The Endor Labs Experience
Cursor (Anysphere)
Endor Labs shows us the exact line of code that has the issue, and provides the context to show it’s exploitable. This has reduced the back-and-forth between security and developers, so we can focus on fixing."
.avif)
Endor Labs makes it easy for us to conduct our own internal risk assessment before SBOMs from our internal applications are rolled out, just like we do with ISO certifications and other audits."
As a society, we are going to generate more and more code. I am confident that Endor Labs is the AppSec platform of choice if you want to be on the cutting edge of where software development is going.”
Passing lists of unsubstantiated or irrelevant CVEs to engineering takes a toll within lean organizations like ours. Endor Labs lets us build trust by focusing on software supply chain risks that actually matter.”
Our top executives are attesting to these SBOMs. We have a duty of care to ensure that we produce high integrity SBOMs. If we don’t know all of our direct and transitive dependencies, have missing components, or are unable to quickly validate things like the deployment build matching the declared source, the SBOM cannot be complete. This is where having Endor Labs is crucial - it helps us identify all dependencies, understand the impact of risk, and gives us the trust and assurance to back and commit to our leadership that we have a high integrity SBOM.
Since switching from our previous SCA tool, Endor Labs has cut the findings we send to developers by 95%, which returned time to ship features faster, and helped us remediate exploitable vulnerabilities quickly with precise reachability and clear upgrade guidance."
Endor Labs is, in a good way, simplistic. The data I care about is quickly available to me."
Solarwinds was the first time a lot of businesses became aware of supply chain risk. Every boardroom had a conversation about how the company can ship secure code. Log4j made this issue even more obvious as everyone had to scramble to find a solution. We need to shift further left and solve these issues at design time, that's what Endor Labs is doing."
