FOSSA Announces Open Source Security Management Toolkit

The newly released FOSSA Security Management toolkit aims to provide automated application security and help prevent vulnerabilities from entering the code base.

According to the announcement on the FOSSA blog, the Security Management toolkit “makes it easy to identify, control, and remediate a huge variety of open source vulnerabilities without disturbing the speed and consistency of software releases.”

Features include:

  • Flexible policy engine 
  • Detailed information about vulnerabilities
  • Remediation support
  • Clear reporting
  • Zero-configuration onboarding
  • Curated database
  • Integration into JIRA, Slack, GitHub, and most CI/CD tools