Zero false positives, eliminate unnecessary manual review processes

Kuntek announced that it is launching 'WhiteSource,' the industry's first open source security solution from WhiteSource (www.whitesourcesoftware.com), a global open source specialist, in Korea.

There is increasing demand for 'DevSecOps,' which accelerates the software development process while maintaining security by identifying and fixing open source security vulnerabilities in real time during the development process.

WhiteSource is an open source security solution that provides all information regarding open source security vulnerability databases, real-time updated open source quality issues, and open source licenses in a single solution.

WhiteSource automatically provides customers with information such as bugs, fixes, and patches based on the largest security vulnerability database that is updated in real time. In addition, by eliminating false positives with proprietary technology, it removes unnecessary manual review processes for developers and supports customers in fully integrating into their development teams' unique SDLCs through integration support functions for various ALM (Application Lifecycle Management) tools.

In addition, by using a digital signature comparison method, it overcame the disadvantages of the code scanning method used in existing products, such as analysis time, delay, and false positives.

Koontek CEO Bang Hyuk-jun emphasized, “As open source becomes a tool for IoT and ICT convergence, most corporate organizations utilizing it are unaware of whether they are properly using it in terms of licenses, security, and quality. Consequently, there is an increasing number of cases where companies face lawsuits for copyright infringement or suffer damages due to security vulnerabilities. Now is the time to comprehensively consider open source licenses, vulnerability identification, and security management.”