The Endor Labs Experience

Endor Labs is a rising star in AppSec. They're helping us fix what's necessary by providing context, and context is king when you’re dealing with open source software. For example, now we can easily see where a high severity finding is actually low priority, or a medium severity finding is a must-fix.”

We have been pleasantly surprised about the lack of friction when trying new features outside, like container scanning, that are outside the traditional SCA scope. It took us just five minutes to set up a CircleCI job and give it a container from our registry, and we were immediately seeing results."

Endor Labs helped us cut through the noise and focus on what matters. With fewer alerts and more accuracy, our teams now spend more time building and less time chasing false positives. Endor Labs has made secure development faster and easier to adopt across Zebra."

Software analysis is hard, and there's only one company [Endor Labs] that's doing it correctly.”

Passing lists of unsubstantiated or irrelevant CVEs to engineering takes a toll within lean organizations like ours. Endor Labs lets us build trust by focusing on software supply chain risks that actually matter.”

Endor labs jumped in quickly and effectively, solving the problem of SCA for us.”

This class of issues [3rd party vulnerabilities] is covered for us. When the number is so small, we can focus on what’s truly impactful.”

Endor Labs has a very sophisticated engine for function reachability. I would say it is unparalleled in the industry as of right now."