NetRise Provenance

Description

NetRise Provenance reveals the origin, maintainers, and repository health of open-source software components, enabling organizations to assess risk concentration and enforce policies to reduce supply chain risk.

Key Differentiators

• Maps packages to canonical repositories and maintainers.
• Correlates advisories with repository security checks.
• Evaluates repository health signals like activity and maintainer concentration.
• Enforces policy-driven guardrails for safer library selection.

Features

• Blast radius analysis for dependency relationships.
• Policy engine for enforcing build and procurement standards.
• Repository health evaluation for early risk detection.

Use Cases

• Assess vendor software using independent evidence about contributors and organizations.
• Evaluate open-source dependencies before approving software for production.
• Overlay provenance and dependency risk onto SBOMs for faster incident triage.

Pricing

Deployment & Platforms

Compliance

Target Market