Datadog Software Composition Analysis (SCA)

Top Features

• Identify open source security risk in your applications

  - Surface vulnerable open source libraries in production as you monitor the overall health of your services.
  - Ensure remediated vulnerabilities make it to production and avoid discrepancies between static and runtime code due to errors in the CI/CD pipeline.
  - Proactively mitigate security risk with visibility into open source vulnerabilities within your CI pipelines (beta).
  

• Prioritize vulnerabilities with active risk

  - Prioritize open source library vulnerabilities with Datadog’s Severity Score, which factors in environment, CVSS, and real-time threat activity.
  - Pivot between vulnerable services and affected cloud workloads and infrastructure hosts to assess business impact.
  - Track real-time risk with continuous monitoring of vulnerability exposure.
  

• Fast-track resolution with guided remediation

  - Search, filter, and query across all detected vulnerabilities with Datadog unified tagging for faster investigation.
  - Reduce mean-time-to-remediate with actionable remediation guidance.
  - Select the best library update for your code with recommended upgrade options.
  

• Integrate application security into existing workflows

  - Seamlessly integrate vulnerability management within existing workstreams with JIRA and CI integrations.
  - Drive alignment across development, operations, and security teams with a single source of truth to reduce security risk faster.