Structured around development of security software aimed specifically at the cloud-based software market - policy-based workflow and compliance software. Firm recently rolled out a new set of open source, DevOps tools: open source tools designed for automating DevSecOps pipeline security and analysis. A leader in software supply chain security, enabling organizations to protect cloud-native applications against software supply chain attacks, Anchore technology embeds continuous security and compliance checks at every stage of the software development process to prevent security risks from reaching production. Large enterprises and government agencies are reported as using Anchore solutions to generate a comprehensive software bill of materials, pinpoint vulnerabilities, identify malware, and discover unprotected credentials that can lead to hacks and ransomware. With an API-centric approach, Anchore solutions integrate into the tools developers already use to detect issues earlier, saving time and lowering the cost to fix vulnerabilities.