diff --git a/_data/tools.json b/_data/tools.json index ea71697bfb..bf2bec8bd9 100644 --- a/_data/tools.json +++ b/_data/tools.json @@ -1,4 +1,22 @@ [ + { + "title": "Socket Firewall Free", + "url": "https://github.com/SocketDev/sfw-free/", + "owner": "Socket Inc.", + "license": "Free", + "platforms": "On-Premises", + "note": "Socket Firewall Free is a lightweight tool that protects developer machines in real time, blocking malicious dependencies before they ever reach your laptop or build system. It works out of the box — no API key and no configuration required.", + "type": "DAST" + }, + { + "title": "Socket SCA", + "url": "https://socket.dev", + "owner": "Socket Inc.", + "license": "Commercial or Free", + "platforms": "SaaS, CI/CD, IDE, CLI", + "note": "Socket is a developer-first security platform that protects your code from both vulnerable and malicious dependencies.", + "type": "SAST" + }, { "title": "Corgea", "url": "https://corgea.com/", diff --git a/pages/Component_Analysis.md b/pages/Component_Analysis.md index b74927a9c3..4663cd840c 100644 --- a/pages/Component_Analysis.md +++ b/pages/Component_Analysis.md @@ -334,6 +334,7 @@ and legal teams an opportunity to create solutions for healthy open source usage | [SBOM Observer] | Bytesafe | Commercial | SaaS | | [Scantist SCA] | Scantist | Freemium | Cross Platform / SaaS | | [Snyk] | Snyk | Commercial / Freemium | SaaS | +| [Socket] | Socket | Commercial / Freemium | Cross Platform / SaaS | | [Software Health Indicator] | YourSky.blue | Commercial / Freemium | SaaS | | [SOOS] | SOOS | Commercial / Freemium | SaaS | | [Veracode SCA] | Veracode | Commercial | Cross Platform / SaaS | @@ -390,6 +391,7 @@ and legal teams an opportunity to create solutions for healthy open source usage [SBOM Observer]: https://sbom.observer/ [Scantist SCA]: https://scantist.com/ [Snyk]: https://snyk.io/ +[Socket]: https://socket.dev/ [Software Health Indicator]: https://software-health-indicator.com/ [SOOS]: https://soos.io/ [Veracode SCA]: https://www.veracode.com/products/software-composition-analysis diff --git a/pages/Free_for_Open_Source_Application_Security_Tools.md b/pages/Free_for_Open_Source_Application_Security_Tools.md index 7ea8180469..33d4f2716f 100644 --- a/pages/Free_for_Open_Source_Application_Security_Tools.md +++ b/pages/Free_for_Open_Source_Application_Security_Tools.md @@ -255,6 +255,12 @@ Commercial tools of this type that are free for open source: more public than you might prefer) - They also provide detailed information and remediation guidance for known vulnerabilities here: + - [Socket](https://socket.dev/features) - Socket is a developer-first security platform that protects your code from both vulnerable and malicious dependencies. + - [Free for individual developers and small teams, and open-source projects](https://socket.dev/pricing) + - JavaScript, TypeScript, Python, Go, Java, Ruby, .NET, Scala, Kotlin, Rust, C/C++, PHP, and more + - Integrates with any CI/CD platform + - License enforcement and policies + - SBOM generation - [Software Health Indicator](https://software-health-indicator.com) by YourSky.blue - The real time indicator that promotes supply chain transparency Free for FOSS projects: