October 2022 Summaries

Endor Labs has launched with $25 million in seed financing to address software supply chain security issues, specifically the ungoverned sprawl of open-source software in enterprises. Founded by Varun Badhwar and Dimitri Stiliadis, who have previously developed products acquired by Palo Alto Networks, the company aims to enhance development velocity and security by providing a Dependency Lifecycle Management Platform. This platform enables development and security teams to evaluate, maintain, and update software dependencies safely, thereby reducing supply chain risks and false positives by up to 80%. The approach uses program analysis and call graphs to gain insights into dependency usage, allowing organizations to prioritize vulnerabilities that are actually exploitable and to reduce the overall software attack surface. Endor Labs is collaborating with industry experts to refine its platform and is currently working with large companies in a private beta while also seeking to expand its team with engineers from diverse backgrounds.

Endor Labs has emerged from stealth mode, launching its Dependency Lifecycle Management Platform designed to help development and security teams effectively manage software dependencies, thereby maximizing software reuse while minimizing associated risks. As enterprises increasingly rely on open-source software, managing the average 40,000 direct and transitive dependencies has become challenging, especially given existing tools' limitations. Endor Labs addresses these challenges by providing deep analytics to uncover security and operational risks, improving open-source software selection, and facilitating the maintenance and security of dependencies at scale. By offering a comprehensive understanding of dependency usage across organizations, Endor Labs enables the creation of accurate software bills of materials (SBOMs) and reduces supply chain risks. The platform, backed by $25 million in seed funding from prominent investors, promises to set a new standard for supply chain and open-source security, with a strong founding team that includes experienced leaders from top tech companies.