JSP-ComponentSecurity™
Management of software components, SBOM data, and supply-chain risk
SaaS environmentOn-premisesManaged service
ⓘ What do the product labels mean?
SaaS environment The solution can be installed in the customer’s own or customer-controlled cloud or SaaS environment.
On-premises The solution can be installed in the customer’s local server or virtual environment.
Managed service We can handle the solution’s maintenance, updates, and technical administration.
How the solution works
JSP-ComponentSecurity™ brings an organisation's open-source libraries and other application dependencies together as software bills of materials (SBOM). The solution identifies known vulnerabilities, outdated components, and licence risks, and shows which applications a new vulnerability affects. It suits ongoing component tracking in software development and maintenance.
Key benefits
Visibility into components and their vulnerabilities speeds up remediation prioritisation and reduces unexpected supply-chain risk. A shared SBOM dataset makes application dependencies comparable across teams.
Installation and Commissioning
JSP-ComponentSecurity™ can be implemented in the customer's SaaS, cloud, or on-premises environment. Onboarding is scoped to agreed applications, SBOM generation, vulnerability sources, alerting, and responsible owners.
Who the solution is for
For software companies, integrators, public-sector bodies, and other organisations that develop their own applications and need visibility into their components and supply-chain risk.
When comparing options:
Discuss JSP-ComponentSecurity™ implementation
Explore other solutions in the Security and identities category.
Back to JSP-Product™ main page.
Features and technical implementation
Name: Dependency-Track.
Development: Dependency-Track is an Apache 2.0-licensed OWASP project for SBOM-based component management.
Info: The solution can include SBOM generation and import for applications, tracking of known vulnerabilities and licences, impact analysis, and alerts for new findings. Major version upgrades, such as the 5.x line replacing 4.x, are tested before moving to production.
Content of delivery: Delivery includes the agreed Dependency-Track implementation, basic configuration, SBOM import for agreed applications, and separately agreed alerting, integration, backup, update, documentation, and training work.
Price: We charge for assessment, onboarding, definition of applications and data, integrations, testing, server resources, and agreed maintenance.
Integrations and scope
JSP-ComponentSecurity™ tracks an application's internal software components and supply chain. JSP-VulnerabilityManagement™ primarily finds vulnerabilities in servers and networks, while JSP-InformationSecurity™ covers security governance more broadly.
