GrammaTech CodeSentry v4.2 checks for over 2,300 new Vulnerabilities and 3,800 new Components

(Ithaca/USA, Offenburg/Germany, 20 February 2023)

GrammaTech is pleased to announce the availability of CodeSentry 4.2.
Highlights of the new release include:

CodeSentry 4.2 makes it easy to search your software inventory for vulnerable open source packages with the new Component Search feature
The new CodeSentry Dashboard provides a 'single pane of glass' overview of artifact scanning and results across the CodeSentry instance
SBOM Edition is now available to deliver SBOM generation, component license, inventory and search capabilities
Security Edition adds N-Day vulnerability detection and security attribute reporting
Advanced Security edition expands vulnerability detection with 0-Day capabilities
Over 2,300 new vulnerabilities and 3,800 new components are available in CodeSentry 4.2
Vulnerabilities can now be exported from CodeSentry in the industry standard VEX (Vulnerability Exploitability Exchange) format

GrammaTech CodeSentry v4.1.2 checks for over 1,700 new Vulnerabilities

(Ithaca/USA, Offenburg/Germany, 30 December 2022)

GrammaTech is pleased to announce the availability of CodeSentry 4.1.2. GrammaTech moves to increase the frequency of vulnerability updates in the product in order to provide the most up-to-date vulnerability information to CodeSentry users.
Highlights of the new release include over 1,700 new vulnerabilities and 500 new components as well as updates to internal components.

GrammaTech CodeSentry v4.1 Available

(Ithaca/USA, Offenburg/Germany, 15 November 2022)

Version v4.1 of the Binary Software Composition Analysis tool CodeSentry is now available.
Some highlights of the new release include:

Over 4,700 new vulnerabilities can be reported by CodeSentry
Enhanced support for Javascript package detection when a 'package-lock.json' or 'yarn.lock' file is included
Improved component detection for PE and COFF binaries
The accuracy of version detection of open source components found in DLLs has been improved
CodeSentry deployments now can run in AWS GovCloud
Several third-party open source components were updated

GrammaTech CodeSentry v4.0 Available

(Ithaca/USA, Offenburg/Germany, 13 September 2022)

Version v4.0 of the Binary Software Composition Analysis tool CodeSentry is now available.
CodeSentry v4.0 includes the following new features and enhancements:

New and Expanded Analysis Capabilities

Support for open-source component detection in Mobile, Firmware, and Embedded software (a wide range of binaries are supported, including Android, iOS, VxWorks, QNX, Cisco and other popular embedded and firmware image formats)
New support for binaries originating from C#, Go, and Java source code
Detection of JavaScript and Python components and packages
Expanded version detection to provide more accurate reporting of older and more vulnerable open-source components
11,000 new vulnerabilities have been added to the CodeSentry vulnerability database
File system image formats such as ext2, ext3, VMDK and others can now be scanned

Improved User Interface

The CodeSentry User Interface now has a Dark Mode option for easier viewing
A summary of N-Day Findings is now available in the Detailed Vulnerability Report (PDF) to review the high-level security of detected components
When uploading an artifact, the upload progress is now displayed in the UI

New On-Premise Installer

The CodeSentry on-premise installer is now delivered via Replicated – this technology makes it even easier to deploy CodeSentry in an on-premise Kubernetes cluster or air-gapped network.

The complete release notes are available from GrammaTech's website.

GrammaTech CodeSentry v3.1 Available

(Ithaca/USA, Offenburg/Germany, 2 May 2022)

Version v3.1 of the Binary Software Composition Analysis tool CodeSentry is now available.
CodeSentry v3.1 includes the following new features and enhancements:

Software Bill of Materials can now be exported in SPDX format,
CycloneDX SBOM format exports now include License and Supplier (Vendor) information where available,
Security Attributes Service scans and results are now available via the UI,
- Reports on binary security features such as ASLR, Stack Execution and more
Enhanced Reports include new Scan Dashboard and Security Attributes Reporting
Over 20,000 new and updated vulnerabilities including detection of the Log4Shell vulnerability
Support for additional archive file formats
- ISO, ext4, SquashFS
For further information watch our video

GrammaTech CodeSentry v3.0 Available

(Ithaca/USA, Offenburg/Germany, 25 January 2022)

Version v3.0 of the Binary Software Composition Analysis tool CodeSentry is now available.
CodeSentry v3.0 includes the following enhancements:

Enriched vulnerability information
8 new fields including links to patches, component upgrades, and remediation information
Open Source Component Licenses (GPL, BSD, etc) are now reported with the associated license risk
New Zero-Day Shallow Scan with faster scanning times
New Security Attributes Service
Reports on binary security features such as ASLR, Stack Execution and more
Enhanced CodeSentry Portal featuring new Application Dashboard and Custom Report Generation
Expanded Component Database with improved component version detection
Audit Logging of system activity is now available
Support for additional archive file formats
MacOS DMG (Extended), .pax archives, symlinks in archives