WhiteSource and Codota Partner to Address Open Source Security Vulnerabilities โ€“ Before Code is Committed

WhiteSource, the leader in open source security and license compliance management, andย Codota, developer of the leading code AI platform, today announced their partnership, offering an Integrated Development Environment (IDE) plugin that alerts developers to open source vulnerabilities in their code in real time and provides suggested fixes within their IDE.

IDEs are the primary applications that developers use to author, modify, and debug software. As the industry shifts security and compliance responsibilities to developers, it is more important than ever for developers to be able to quickly address open source issues in their code. This integration will allow devs to do so without disrupting their workflow.

Now, WhiteSource customers can easily install a plugin for IntelliJ, a popular IDE, and receive alerts on security issues when they reference a component with a known vulnerability. Notifications with all of the relevant details, including remediation recommendations for a quick and efficient fix, will appear in exactly the right context. Codota’s function of sending developers specific, relevant code suggestions within the IDE will also be provided, to substantially improve accuracy and speed.

โ€œThe partnership withย Codotaย allows us to take shift left one step further by alerting developers when they are using open source components with known vulnerabilities in real-time within their IDE UI before even committing the code,โ€ saidย Rami Sass, Co-Founder and CEO of WhiteSource. โ€œIt’s important for us to provide developers with the tools that they need to manage open source security easily within their coding environment without sacrificing time or quality.โ€

โ€œCodota’s fundamental mission is utilizing AI to boost developer productivity. We’re excited to partner with WhiteSource to allow users to safely leverage open source resources and receive vulnerability alerts as the code is being written, well before any potential damage is done,โ€ saidย Dror Weiss, Co-Founder and CEO of Codota.

Mend and Codota Partner to Address Open Source Security Vulnerabilities - Before Code is Committed -

About Mend.io

Mend.io is built for every risk, across AI and AppSec. By securing the code layer and the AI layerโ€”and the interactions between them, where modern application risk now livesโ€”Mend.io extends proven AppSec workflows to the models, prompts, and agents inside today’s applications, delivering continuous protection across the entire AI application lifecycle.