Oligo Safety launched out of stealth on Wednesday with its runtime utility safety platform for detecting vulnerabilities in open supply elements. Oligo generates a dynamic invoice of supplies (BOM), identifies vulnerabilities in packages, and units repair priorities for vulnerabilities based mostly on utility context.
A number of the most damaging cyberattacks up to now couple of years originated in open supply packages included inside giant, complicated programs. For instance, Log4Shell assaults continued all through most of 2022 as a result of many organizations did not even notice they had been operating a weak model of Log4j. Oligo generates a dynamic BOM that exhibits all of the elements which might be truly operating, which helps set up which vulnerabilities to repair first.
Oligo profiles the reputable habits of every library and creates a information base of libraries’ profiles. The platform fires alerts when the library exercise deviates from the profile, as that will point out suspicious exercise.
“Solely 15% of CVEs scanned with conventional options are posing an actual threat, and the opposite 85% are irrelevant, leading to a number of false positives and noise,” Avshalom Hilu, co-founder and chief product officer of Oligo, wrote in a technical weblog put up. Decreasing false positives and concentrating on mitigation extra tightly may help safety workers shut probably the most harmful flaws first and scale back alert fatigue.
The corporate bases its product on prolonged Berkeley Packet Filter (eBPF), which permits packages to run in a sandbox inside the Linux working system kernel. This implies builders can lengthen the OS to enhance visibility, networking, safety, and different capabilities to make utilizing containers within the cloud safer.
With the dominance of cloud computing and increasing use of containerization instruments like Kubernetes, eBPF is seeing traction. The general container safety market is anticipated to rise from $714 million in 2020 to $3.6 billion by 2026, and as much as $8.2 billion by 2030. Apart from Oligo, different eBPF startups within the cybersecurity area embody Araali Networks, which affords an eBPF-based firewall; Cilium, an open supply Kubernetes connectivity device; Falco and Aqua, which make Kubernetes runtime safety instruments; and Calico, a cloud-native safety firm.
Oligo raised its $28 million funding from Lightspeed Enterprise Companions, Ballistic Ventures, and TLV Companions, together with a number of angel buyers.
