“The Palamida Enterprise Edition features a complete suite of AppSec analyzers, an integrated dashboard, and collaboration around development for an entire organization including security and legal teams.”

Palamida Application Security Enterprise Edition

Resources

Data Sheet

AppSec EE provides security and intellectual property protection against the use of undocumented open source software.
It works by automatically identifying what open source software you're using, how much you're using, location within your global code base and provides other critical information: description, associated vulnerabilities, licenses and copyrights as well as patch and remediation updates.

Securing Your Development and Deployment Process: Palamida Enterprise Edition provides relevant vulnerability and IP alerts for early detection and remediation of security and IP issues.
Component request alert License request alert		Security policy violation alert IP policy violation alert New vulnerability information alert Final open source inventory and associated licenses		New vulnerability information alerts
Design	Code	Testing	Release	Deployment

Palamida Application Security Enterprise Edition: Feature Set

Dashboard	Provides customizable reports and dashboards so that managers, appsec and legal professionals, and software engineers have instant access to relevant data they need in order to make decisions surrounding critical application security and intellectual property issues. An alert-based system allows cross-functional roles to interact on an as-needed basis to handle policy and remediation issues.
Policy Manager	Provides approval and workflow automation capabilities that users can easily customize to better manage their company's unique open source evaluation process and usage policy. The result is great control over routine activities, the elimination of redundant tasks, and adherence to companys' approval process.
Vulnerability and IP Detection Engine	The true power of AppSec EE comes comes from the breadth and scope of the two detection engines. Together they used six different technologies to automatically identify and compare 3rd-party open source components: version, binary file, Java namespace, license, copyright, source code and user-specified search.
Vulnerability and IP Reference Libraries	The reference libraries are fundamental to the EE system. The Vulnerability Reference Library provides information on hundreds of security alerts, covering thousands of common open source files. The IP Reference Library provides customers with ability to manage intellectual property information on over 884,000 open source project versions.