Kusari Platform gives you the information you need to secure your software supply chain.
March 5, 2025
When you know what’s in your supply chain, you can secure your supply chain. The Kusari Platform delivers transparency and insights, making your software development more secure, efficient and reliable. Two features that make the Kusari Platform key tool in understanding your software supply chain are the Timeline View and the List Views.
They say those who don’t learn from history are doomed to repeat it. That’s why the Kusari Platform offers a timeline view of package history. Click on any package in the Packages tab to get a view of how a package has changed over any date range you’d like.
At the top of the timeline, you’ll see a count of the vulnerabilities at the start and end of your date range. Knowing the start and end states doesn’t tell you what happened in the middle, so the summary table also shows a count of vulnerabilities added and removed over the time period.
Below the summary, you’ll find a list of events for the package from most to least recent. “New Sbom Version” entries show when the Kusari Platform ingested a new SBOM for the package and includes changes to dependency and vulnerability counts. Clicking the entry shows you more details.
Information about your software changes between versions, too, as new vulnerabilities are discovered and reported. The Package History timeline also shows when your packages are impacted by newly-discovered vulnerabilities. Clicking on a “Data Changed” entry will give you more information about the updated vulnerability information.
When you need to focus on the current state, Kusari Platform offers several lists of data to fit your needs. The Vulnerabilities tab gives you a quick overview of all of the active vulnerabilities in your application ecosystem, including the Kusari Score and Effort to Fix. These enable you to quickly prioritize the most impactful vulnerabilities in your environment.
On the Packages tab, you’ll see a list of your software, along with key information like the vulnerability and dependency counts as well as the latest SBOM timestamp. Clicking on any of the packages gives you a more detailed view. There are tables for vulnerabilities affecting that package, SBOM history with downloadable SBOMs in JSON format, and potential software license issues.
The Kusari Platform tracks attributes, relationships, and posture through each stage of development so you can easily share information with departments that need to know.
No older posts
No newer posts