The Endor Labs Experience

We both want to create a secure platform for people to use AI, but we also want to use AI ourselves to make that process easier.”

Our top executives are attesting to these SBOMs. We have a duty of care to ensure that we produce high integrity SBOMs. If we don’t know all of our direct and transitive dependencies, have missing components, or are unable to quickly validate things like the deployment build matching the declared source, the SBOM cannot be complete. This is where having Endor Labs is crucial -  it helps us identify all dependencies, understand the impact of risk, and gives us the trust and assurance to back and commit to our leadership that we have a high integrity SBOM.

Having Endor Labs is crucial. It helps us identify all dependencies, understand the impact of risk, and gives us the trust and assurance commit to our leadership that we have a high integrity SBOM."

Endor Labs’ support for VEX — which is considered a companion document to any SBOM — and how easily we can ingest and manage SBOMs was key to our decision.”

Endor Labs shows us the exact line of code that has the issue, and provides the context to show it’s exploitable. This has reduced the back-and-forth between security and developers, so we can focus on fixing."

Implementing Endor Labs is easy. I had exactly what I needed between the docs, CLI tool, a GitHub Action, and a GitHub app— all readily available."

Integrating Endor Labs into our Azure DevOps pipeline has saved us thousands of developer hours. We're able to quickly pinpoint and fix reachable and exploitable vulnerabilities without wasting time chasing false positives."

Endor Labs is, in a good way, simplistic. The data I care about is quickly available to me."