Endor Labs

Endor Labs is a company specializing in software supply chain security and software composition analysis (SCA). The company provides tools and solutions to help organizations manage, prioritize, and remediate open source software risks and vulnerabilities. It offers a comprehensive platform that includes reachability-based SCA, artifact signing, container scanning, and Static Application Security Testing (SAST). Endor Labs aims to improve developer productivity by reducing false positive alerts and focusing on actionable risks. They also support compliance efforts for standards such as FedRAMP and PCI DSS. The company integrates with popular platforms such as GitHub and Azure, offering features to optimize CI/CD pipelines and manage software bills of materials (SBOMs).