CodeSentry 5.1 Available: new Checks for 8.400+ new Safety Vulnerabilities

(Bethesda/USA, 4 October 2023)

CodeSecure version 5.1 is available. The new version provides among others the following new features and updates:

• Live N-Day Updates for SaaS and internet-connected on-premises instances make it easy to discover new vulnerabilities and exploits affecting your scanned applications, without the need to rescan.
• over 8,400 new vulnerabilities and 3,900 new products
• now compatible with FIPS-enabled systems for on-premises installations

For further features and more information, please have a look to the release notes.

GrammaTech’s Application Security Testing Software Business sold to Battery Ventures

(Bethesda/USA, 5 September 2023)

Our partner GrammaTech today announced that Battery Ventures has acquired its software products division, including the CodeSonar and CodeSentry product lines. The transaction establishes a new, independent entity that will operate under the CodeSecure, Inc. name and be headquartered in Bethesda, Maryland.
GrammaTech will continue to offer cyber security research and development services and tools to the US defense and intelligence community.
Further information is available on the CodeSecure website

GrammaTech CodeSentry v5.0 Available: 9,700 New Vulnerabilities and 3,700 New Components

(Ithaca/USA, Offenburg/Germany, 3 July 2023)

GrammaTech is pleased to announce the availability of CodeSentry 5.0.
Highlights of the new release include:

• The new Component Annotation feature can be used to exclude components from an SBOM, with an associated audit trail, to deliver the most accurate SBOMs and vulnerability reports
• The CodeSentry UI now includes an Instance Wide Vulnerability Search to enable users to quickly and easily determine which analyzed files are vulnerable to specific CVEs
• CodeSentry binary analysis can now report on Shared Library Dependencies referenced by target binaries – these results are accessible via the CodeSentry API
• CycloneDX SBOM exports now include Open Source License Information
• Over 9,700 new vulnerabilities and 3,700 new components are available in CodeSentry 5.0

GrammaTech CodeSentry v4.2 checks for over 2,300 new Vulnerabilities and 3,800 new Components

(Ithaca/USA, Offenburg/Germany, 20 February 2023)

GrammaTech is pleased to announce the availability of CodeSentry 4.2.
Highlights of the new release include:

• CodeSentry 4.2 makes it easy to search your software inventory for vulnerable open source packages with the new Component Search feature
• The new CodeSentry Dashboard provides a 'single pane of glass' overview of artifact scanning and results across the CodeSentry instance
• SBOM Edition is now available to deliver SBOM generation, component license, inventory and search capabilities
• Security Edition adds N-Day vulnerability detection and security attribute reporting
• Advanced Security edition expands vulnerability detection with 0-Day capabilities
• Over 2,300 new vulnerabilities and 3,800 new components are available in CodeSentry 4.2
• Vulnerabilities can now be exported from CodeSentry in the industry standard VEX (Vulnerability Exploitability Exchange) format

GrammaTech CodeSentry v4.1.2 checks for over 1,700 new Vulnerabilities

(Ithaca/USA, Offenburg/Germany, 30 December 2022)

GrammaTech is pleased to announce the availability of CodeSentry 4.1.2. GrammaTech moves to increase the frequency of vulnerability updates in the product in order to provide the most up-to-date vulnerability information to CodeSentry users.
Highlights of the new release include over 1,700 new vulnerabilities and 500 new components as well as updates to internal components.

GrammaTech CodeSentry v4.1 Available

(Ithaca/USA, Offenburg/Germany, 15 November 2022)

Version v4.1 of the Binary Software Composition Analysis tool CodeSentry is now available.
Some highlights of the new release include:

• Over 4,700 new vulnerabilities can be reported by CodeSentry
• Enhanced support for Javascript package detection when a 'package-lock.json' or 'yarn.lock' file is included
• Improved component detection for PE and COFF binaries
• The accuracy of version detection of open source components found in DLLs has been improved
• CodeSentry deployments now can run in AWS GovCloud
• Several third-party open source components were updated

GrammaTech CodeSentry v4.0 Available

(Ithaca/USA, Offenburg/Germany, 13 September 2022)

Version v4.0 of the Binary Software Composition Analysis tool CodeSentry is now available.
CodeSentry v4.0 includes the following new features and enhancements:

New and Expanded Analysis Capabilities

• Support for open-source component detection in Mobile, Firmware, and Embedded software (a wide range of binaries are supported, including Android, iOS, VxWorks, QNX, Cisco and other popular embedded and firmware image formats)
• New support for binaries originating from C#, Go, and Java source code
• Detection of JavaScript and Python components and packages
• Expanded version detection to provide more accurate reporting of older and more vulnerable open-source components
• 11,000 new vulnerabilities have been added to the CodeSentry vulnerability database
• File system image formats such as ext2, ext3, VMDK and others can now be scanned

Improved User Interface

• The CodeSentry User Interface now has a Dark Mode option for easier viewing
• A summary of N-Day Findings is now available in the Detailed Vulnerability Report (PDF) to review the high-level security of detected components
• When uploading an artifact, the upload progress is now displayed in the UI

New On-Premise Installer

• The CodeSentry on-premise installer is now delivered via Replicated – this technology makes it even easier to deploy CodeSentry in an on-premise Kubernetes cluster or air-gapped network.

The complete release notes are available from GrammaTech's website.

GrammaTech CodeSentry v3.1 Available

(Ithaca/USA, Offenburg/Germany, 2 May 2022)

Version v3.1 of the Binary Software Composition Analysis tool CodeSentry is now available.
CodeSentry v3.1 includes the following new features and enhancements:

• Software Bill of Materials can now be exported in SPDX format,
• CycloneDX SBOM format exports now include License and Supplier (Vendor) information where available,
• Security Attributes Service scans and results are now available via the UI,
  • Reports on binary security features such as ASLR, Stack Execution and more
• Enhanced Reports include new Scan Dashboard and Security Attributes Reporting
• Over 20,000 new and updated vulnerabilities including detection of the Log4Shell vulnerability
• Support for additional archive file formats
  • ISO, ext4, SquashFS
  For further information watch our video

GrammaTech CodeSentry v3.0 Available

(Ithaca/USA, Offenburg/Germany, 25 January 2022)

Version v3.0 of the Binary Software Composition Analysis tool CodeSentry is now available.
CodeSentry v3.0 includes the following enhancements:

• Enriched vulnerability information
• 8 new fields including links to patches, component upgrades, and remediation information
• Open Source Component Licenses (GPL, BSD, etc) are now reported with the associated license risk
• New Zero-Day Shallow Scan with faster scanning times
• New Security Attributes Service
• Reports on binary security features such as ASLR, Stack Execution and more
• Enhanced CodeSentry Portal featuring new Application Dashboard and Custom Report Generation
• Expanded Component Database with improved component version detection
• Audit Logging of system activity is now available
• Support for additional archive file formats
• MacOS DMG (Extended), .pax archives, symlinks in archives