Synopsys, Inc. has acquired Protecode, a privately held Canadian software company that provides solutions for detecting and managing open source software (OSS) and the associated license and security risks. This acquisition expands Synopsys' presence in the software quality and security market by adding new talent, technology and products to the company's Software Integrity Platform and extending its existing software composition analysis (SCA) solution.
Recent trends highlight that OSS and other third-party components commonly used to build software introduce multiple layers of risk related to license obligations, security vulnerabilities, IP ownership, and quality attributes of the external code. Organizations seeking to mitigate these risks are turning to robust SCA solutions that can address all of these issues.
"As organizations continue to rely more and more on open source and third-party components to build software, maintaining total visibility and managing risk throughout the software supply chain is critical," said Andreas Kuehlmann, senior vice president and general manager of Synopsys' Software Integrity Group. "Understanding software dependencies and their license obligations has been and will continue to be an important part of developing software. By combining Protecode technology with our current SCA solution that focuses on mitigating security vulnerabilities, Synopsys has a comprehensive offering that addresses the gamut of risk across the software supply chain."
Protecode's technology bolsters and extends Synopsys' existing SCA solution by adding improved OSS license detection via source code analysis, OSS governance and policy enforcement features, and Protecode's proprietary Global IP Signatures Database. These capabilities are highly complementary to Synopsys' SCA solution, which analyzes binary code to identify third-party components and flag known security vulnerabilities. By combining these technologies, Synopsys offers the most comprehensive SCA solution in the industry.
The terms of the deal, which is not material to Synopsys financials, have not been disclosed.
Through its Software Integrity Platform, Synopsys provides advanced solutions for improving the quality and security of software. This comprehensive platform of automated analysis and testing technologies integrates seamlessly into the software development process and enables organizations to detect and remediate defects and security vulnerabilities early in the software development lifecycle, as well as gain security assurance and visibility with their software supply chain.
