Phylum

Phylum is a Colorado-based company specializing in software supply chain security. With 19 employees, Phylum provides a platform that continuously evaluates software for potential risks. Phylum's automated platform analyzes open-source software, software packages, lockfiles, and SBOMs to identify vulnerabilities and prevent threats. Their service helps customers protect their applications from malicious code, assess third-party vendors, detect brand misuse and targeted attacks, and manage risks associated with using AI in software development. The Phylum platform offers a unique threat feed that provides real-time information about software supply chain attacks. This feed can be integrated with other security tools to enhance threat detection and response capabilities. In 2022, Phylum's analysis of open-source packages led to the discovery of numerous malicious packages, authors, and supply chain risks, contributing to significant improvements in open-source software security. For more information or to download the Phylum GitHub App, visit phylum.io.