Software Supply Chain Security

XSCAN Supply Chain

A new security paradigm for the software supply chain

AI-based Automated SW Supply Chain Security Solution - XSCAN Supply Chain

Software
SBOM
Actively exploited threats
identified across your SBOM

100 KEV

(Known Exploited Vulnerabilities)

SBOM
Management System
Report
Status of the Product

10 Vulnerabilities

Vulnerability
Databases
VEX Coming Soon

AI-based Integrated Security Management Solution

  • ● Automated Software Analysis: Automated classification of software structures and components via AI-based static analysis
  • ● SBOM Report Provision: Provision of SBOMs containing full component lists (including Open Source/Internal) and threat levels
  • ● Cross-Version Comparison: Tracking potential threat influx by analyzing changes between software versions
  • ● Flexible Deployment: Support for various deployment modes including SaaS, On-Premise, and Hybrid

International Standard 5-Type SBOM Coverage

Provides CISA SBOM type coverage optimized for runtime environments.

XSCAN Supply Chain Coverage

Source

Component and dependency analysis at the source code level

Build

SW specification including build environment and 3rd party information

Analyzed

Precise component specification extracted through binary analysis

Deployed

Specification of SW assets installed after deployment

Runtime

SW composition specification based on running processes

Detailed analysis available in XSCAN Server Runtime

Deep Binary Analysis

Perfectly visualizing internal software behavior via API-level static analysis of executables.

API

Analysis of API calls and communication flows within the executable

Dependencies

Identifying dependencies between external libraries and modules

BINARY
CORE

Codesign

Verification of digital signatures and certificate integrity

Network

Identification of network connection attempts and assets within the file

Behavior

Prediction of potential execution behaviors via code structure