Addressing the threat intelligence gap for open source software with Tidelift
Undertaking threat intelligence analysis for open source software is challenging. To begin with, there are many sources of threat intelligence data on the internet, and data quality is often unreliable. Meanwhile, different ecosystems like Java, JavaScript, and Python often have different practices and standards, and certain aspects of threat analysis just can’t be done accurately enough without direct information and guidance from open source maintainers.
Tidelift is taking a unique approach to solve this challenge by partnering with the maintainers of thousands of the most-relied-upon open source packages and paying them to implement industry-leading secure software development practices and document the practices they follow. The result is a unique source of cross-ecosystem threat intelligence that organizations use to minimize cybersecurity risks. Organizations are using Tidelift’s threat intelligence data for:
50 Milk St, 16th Floor, Boston, MA 02109
.svg){kind=icon}