WhiteSource

US vendor that automates the process of open source components selection, approval, tracking and management including real-time alerts on vulnerable open source components

Whitesource is the all-­in-one licensing, security, and reporting solution for managing open source components. Whitesource operates in real-­time, by automatically and continuously scanning open source repositories, and cross-­referencing this data directly against the open source components build. It helps find optimal components, automatically alerts about known security vulnerabilities, bugs, new versions, patches, and fixes in the components in use by its clients.