New Capabilities Provide Snyk Customers with Enhanced License Compliance and Deeper C/C++ Support
Snyk, the leader in cloud native application security, today announced its acquisition of聽FossID, a software composition analysis tool that scans code for open source licenses and vulnerabilities. Based in Sweden, FossID was founded with a mission to give developers a solution that detects all footprints of free and open source software (FOSS) within code bases, from entire components to code snippets and including license obligations and compliance issues.
Founded in 2016, FossID was created based on the team鈥檚 experience working with FOSS since 2001, specifically with the complexities of open source software used within legacy as well as embedded modern applications. With strong customer adoption in Fortune 500 organizations across verticals like automotive, financial services, manufacturing, technology and telecommunications, FossID has earned a strong reputation with developers using C/C++.
By joining forces with Snyk, FossID鈥檚 capabilities will be integrated into Snyk鈥檚 Software Composition Analysis (SCA) product,聽Snyk Open Source, extending the developer-first security and license compliance mindset and experience to teams worldwide currently leveraging C/C++. With over six million developers using C/C++ to build their applications today1, including teams both modernizing legacy applications and building new embedded Internet of Things (IoT) applications, FossID鈥檚 technology allows Snyk to reach a significantly larger percentage of the current 27 million developers across the globe2 in 2021 and beyond.
More from News
- Meta Promised Unmatched Privacy For Muse 鈥� So How Did Researchers Crack It So Quickly?
- Digital Avatars Are Bringing Deceased Artists Back To The Stage 鈥� Where Do We Draw The Line?
- Can Europe Solve Its Critical Minerals Problem Fast Enough To Support Its Tech Ambitions?
- Google Has Agreed To A 拢260 Million Settlement: Who’s Eligible For Compensation?
- China Wants To Build A Third Global AI Bloc 鈥� What Does That Mean For Everyone?
- Advanced AI Society Joins the Linux Foundation And Launches Open Verification Ecosystem
- What Could Snap鈥檚 Partnerships With Big Tech Mean For The AR Industry?
- Why Did A Four-Year Bomb Threat Campaign Involving 500,000 Gmail Accounts Go Unchecked?
This includes:
- Unmanaged code, inclusive of snippet detection: FossID鈥檚 solution identifies vulnerabilities in all forms of open source, including the detection of snippets (a few lines of code copied from the open source software package). This has been historically difficult and is a critical problem to solve for developers looking to increasingly own security responsibilities within their organizations.
- 2 PBs of machine harvested source code: FossID鈥檚 comprehensive knowledge base contains the equivalent of more than two petabytes (PBs) of machine harvested source code from all of the world鈥檚 currently known open source repositories.
- AI-powered analysis: FossID鈥檚 AI technology automatically eliminates false-positives, allowing development teams to save time and money and ultimately ship their applications faster and safer than their competition.
- Developer-friendly license compliance: FossID鈥檚 license compliance engine is able to automatically inspect applications with speed and accuracy to detect license and copyright information, thanks to its AI-powered patent-pending software solution that relies on an audit-grade database of over 1900 licenses.
鈥淲ith FossID鈥檚 powerful capabilities to find, fix and monitor vulnerabilities in all forms of open source software, Snyk is now accelerating our vision to bring security to every developer in the world,鈥澛� said Peter McKay, CEO, Snyk. 鈥淭ogether with this world class team, we look forward to reaching millions more of the world鈥檚 developers, empowering them to build applications securely while also staying a step ahead of their competition.鈥�
鈥淎s FossID鈥檚 employees today become Snykers, I believe our founding mission 鈥� to help companies to achieve maximum open source adoption efficiency 鈥� evolves and expands with the scope of the opportunity now in front of us,鈥� said Oskar Swirtun, Co-Founder and CEO, FossID. 鈥淭his is a perfect fit for both the Snyk and FossID teams, and we鈥檙e proud to play a crucial role in this next phase of the Snyk journey.鈥�
The acquisition of FossID is Snyk鈥檚 third within the last six months, following the successful purchases of聽Manifold聽in January 2021 and聽DeepCode聽in October 2020. This latest corporate development comes on the heels of the company鈥檚 March 2021 announcement of聽$300 million in Series E investment聽and its resulting expansion into聽Asia Pacific Japan聽(APJ). Due in part to several key automotive and semiconductor customers, FossID additionally brings to Snyk a strong customer base both in Europe as well as across APJ.
To learn more about how cloud native adoption has both transformed the way organizations build modern applications and resulted in increased security threats and concerns, explore Snyk鈥檚聽recently released State of Cloud Native Application Security Report –
