){kind=logo}
){kind=logo}
){kind=logo}
Understand Open-Source Risk: Beyond Vulnerability Scanning
Modern software applications are 90% comprised of open-source dependencies, creating systemic fragilities traditional scanners miss. This session introduces the Cairn Index, a non-intrusive, metadata-driven approach to quantifying software supply chain resilience. Key takeaways include identifying "hidden" transitive risks and strategies for meeting regulatory mandates like DORA and SBOM compliance.
