Works with GitHub

Black Duck CoPilot

Automatically find and fix open source risks

GitMonkey

Monitor your repos for exposed secrets and private keys

Gravitational Teleport

Modern SSH for Teams Managing Distributed Server Clusters

HashiCorp Vault

Secure Any Application and Any Infrastructure! HashiCorp Vault enables centrally securing, storing, and tightly controlling access to secrets across distributed infrastructure and applications

Jacks

Recommendations to secure code, provide training and patches

Kiuwan Code Review

Shield your applications. OWASP, CWE certified. Over 4500 rules, multilanguage support

Nexus Lifecycle

Automatically identify and eliminate risky components within a GitHub pull request. The Nexus Platform plugin for Jenkins pushes component intelligence into GitHub where developers can view and respond to policy violations, eliminating manual re-work later

GitHub Enterprise compatible

Scantist

Open-source vulnerability scanner

Snyk

Fix and Prevent security vulnerabilities in Node.js npm dependencies

SourceClear

Security for open-source code

GitHub Enterprise compatible

VersionEye

Security, version and license alerts for your dependencies

GitHub Enterprise compatible