Palo Alto adds SCA capabilities to Prisma Cloud

Palo Alto Networks aims to enhance the security of open source software with the launch of a new context-aware software composition analysis (SCA) solution for developers.

The company has integrated SCA into its Prisma Cloud cloud-native security platform to help developers more safely use open source software components.

SCA allows developers and security teams to proactively surface and prioritise known vulnerabilities that impact the application lifecycle.

The enhanced Prisma Cloud platform provides capabilities including deep dependency detection and remediation of vulnerabilities in open source software before applications reach the production stage.

The platform is designed to protect applications at every stage of the development lifecycle by providing real-time visibility and contextual security analysis of cloud environments.

Palo Alto Networks Senior Vice President for Prisma Cloud Ankur Shah said unlike traditional SCA solutions, adding SCA to the Prisma Cloud platform can provide the runtime context to help fix developers’ vulnerabilities, and to prioritise remediation based on software components that are already in use.

“Developers leveraging open source software should be able to build applications with the confidence they aren’t opening the organisation up to risk,” he said.

“With the average application consisting of 75% open source components, SCA on Prisma Cloud is key to protecting the organisation from code to cloud and empowering developers to build with speed.”

Image credit: iStock.com/LinearWorld