Veracode Introduces Automated Fix for Open-Source Vulnerabilities

• •Veracode Fix automates remediation of open-source vulnerabilities.
• •30% of external attacks are attributed to software supply chain breaches.
• •82% of organizations report struggling with security debt from open-source dependencies.

Veracode has launched Veracode Fix for Software Composition Analysis, aimed at automating the remediation of open-source vulnerabilities. This product comes in response to the fact that software supply chain breaches account for 30% of external attacks, with many development teams facing unresolved alerts. The tool enhances Veracode's existing offerings by focusing on third-party and open-source components, detecting vulnerable dependencies, and generating fixes prior to production. It integrates into developer workflows, delivering updates via pull requests in Git environments and refactoring first-party code to prevent build failures. Research indicates that 82% of organizations are struggling with security debt linked to open-source dependencies, increasing the demand for effective remediation tools. Veracode's approach combines logic-driven AI with a proprietary vulnerability database, aiming to provide precise fixes while minimizing disruption. Tim Jarrett, Vice President of Product Management at Veracode, emphasizes the need for automated solutions that not only identify vulnerabilities but also fix them.