Dependency-Track @DependencyTrack
Open Source SBOM Analysis Platform. Reduce Supply Chain Risk. #OWASP #SBOM #SaaSBOM #HBOM #VEX #SoftwareSupplyChain… https://t.co/12EqTyufEE… dependencytrack.org Joined December 2017-
Tweets438
-
Followers1K
-
Following29
-
Likes204
OWASP Dependency-Track 5.0 is GA, built for enterprise scale: early adopters ingested 20K+ SBOMs/hour and ran single instances with 250K+ projects and 2M+ components. Now with horizontal HA, crash safe processing, and supply chain integrity checks. dependencytrack.org #SBOM
OWASP Dependency-Track 5.0 is GA, built for enterprise scale: early adopters ingested 20K+ SBOMs/hour and ran single instances with 250K+ projects and 2M+ components. Now with horizontal HA, crash safe processing, and supply chain integrity checks. dependencytrack.org
Community meeting tomorrow at 5PM UTC! linkedin.com/posts/owasp-de…
Dependency-Track: Open-source component analysis platform - helpnetsecurity.com/2025/10/27/dep… - #OpenSource @GitHub #GitHub #CyberSecurity @DependencyTrack #OWASP #SBOM #SaaSBOM #HBOM #VEX #SoftwareSupplyChain
We're honored that @defectdojo has chosen Dependency-Track as one of the top #opensource tools in the #SCA category this year. Here's the press release with all the other great tools on the list. businesswire.com/news/home/2025… #SBOM #CycloneDX #OWASP
Today, I attended a session on hashtag @DependencyTrack , where an interesting case study on @monzo Bank was presented by Michael Macnair. It highlighted how they transitioned from a traditional security approach to a more SBOM-driven software supply chain security model. Monzo Bank's Journey to Software Supply Chain Security with SBOMs & Dependency-Track 🔍 Old Approach: • No SBOM (Software Bill of Materials) generation. • Security scans were done using proprietary scanners and in-house tools directly on the code. 🚀 New Approach: • Started generating SBOMs using tools like Syft. • Pushed these SBOMs to Dependency-Track, a popular SBOM management platform. • Leveraged SBOM-driven security analysis for better visibility and risk management. This shift not only improved their security posture but also helped them step into the world of modern software supply chain security, keeping eye on their third party components vulnerabilities, which was lacking in the old architecture. This case study is a great example of how organizations can move beyond traditional scanning and embrace SBOMs for a more structured and proactive approach to security. What are your thoughts on this transformation? Have you seen similar shifts in your organization or still waiting to shifts ? Let’s discuss! 🔍💡 Thanks to Michael Macnair for sharing... #OWASP #OpenSource #CyberSecurity #SBOM #CycloneDX #DependencyTrack #SoftwareSupplyChainSecurity
Join our community meeting next Wednesday, 2nd April at 4-5PM UTC for a presentation from our friends at #Monzo Bank! Learn how they replaced a proprietary vulnerability scanner with #CycloneDX #SBOMs & DT. Calendar: dub.sh/dtcalendar Zoom: dub.sh/dtzoom
OWASP Members change the world. Your membership helps shape the organization and drives our projects and community. If you are not a member or are due for renewal within 60 days, please join or renew today and get 10-25% off! owasp.org/membership > Memberships > Apply
As a reminder, you can watch the recordings, and access the slides, of all previous meetings here: github.com/DependencyTrac… The next community meeting will take place as per usual schedule on December 4th. See you there!
The team decided to skip this month’s community meeting, which was originally scheduled for tomorrow (Nov. 6th). Since the last meeting, we released version 4.12.1 (docs.dependencytrack.org/changelog/#v4-…). We’re aiming to release 4.12.2 in about a week’s time.
Join us in tomorrow's community meeting at 4PM UTC to learn about the new version 4.12.0, which is scheduled for release later today! github.com/DependencyTrac…
.@DependencyTrack is an open-source component analysis platform with a UI #madewithvuejs that helps you to identify & reduce risk in your software supply chain 🔍️ - madewithvuejs.com/dependency-tra…
Fantastic news for @QuarkusIO users! It's now easier than ever to generate accurate CycloneDX SBOMs for your applications. Massive kudos to the Quarkus team for the thoughtful and developer-friendly implementation!
We released Quarkus 3.14.3 with some additional bugfixes and a new feature SBOM generation. We don't usually add new features in micro but this is part of the preparation for our upcoming 3.15 LTS release. buff.ly/3B1Wr7G
We'd like to take this opportunity to thank the team at @IBM around Melba Lopez and Caroline Lee, who generously hosted all previous community meetings on their WebEx account. Thanks so much!
As usual, you can find the invite in the OWASP Software Supply Chain Community Calendar: calendar.google.com/calendar/u/0/e…
With the upcoming community meeting on Sept 4th, we're switching from WebEx to @owasp's Zoom. The calendar invite was updated accordingly. If you imported the invite to a calendar app, please verify whether the Zoom details are present, and re-import the invite if they're not.
Couldn’t attend this week’s Dependency-Track community meeting? No0WPvVCRyLjwe’ve got the recording. @nscur0 leads us through the project roadmap. We also have special guests from the CycloneDX #cryptography working group presenting #CBOM. Don’t miss it. youtube.com/watch?v=0WPvVC…
CBOMs are sexy, you know this right? So if you agree, you should attend the @CycloneDX_Spec meeting tomorrow where you'll learn all about how sexy they are linkedin.com/events/depende…
Be a driving force in advancing the #OWASP Foundation's mission! Join us as a Corporate Supporter and create a meaningful impact with your support! 🌐🤝 owasp.org/supporters/pac… #Cybersecurity #InfoSec #supportnonprofit #nonprofit #benefits #appsec #developers
Join us for our next community meeting on January 31st at 3PM UTC (10:00am U.S. Eastern)! Agenda: - Project / Release Update (~15 min) - How IBM CISO uses Dependency-Track (~10 min) - Q&A (~30 min) Calendar invite: calendar.google.com/calendar/event… #OWASP #SBOM #CycloneDX #EO14028
mRr3b00t @UK_Daniel_Card
123K Followers 8K Following Department of Cyber WAR. Member of the Counter Spider Collective. Wielder of AI to defend in Cyber Space. Ralph Vibe Specialist. VibeOps Operator!
Sean Wright @SeanWrightSec
17K Followers 599 Following Head of Application Security focused on all things #AppSec. Occasionally dabble in my own research. Also keen gamer and aspiring photographer.
Jim Manico from Manic... @manicode
17K Followers 6K Following AI and AppSec Educator. Secure coding system prompts. https://t.co/gbW3ZLhURT
Simon Bennetts ⚡�... @psiinon
7K Followers 639 Following ZAP (@zaproxy) by @Checkmarx lead, #Mozillian Mastodon: @[email protected]
Sam Stepanyan @securestep9
7K Followers 4K Following @OWASPLondon Chapter Leader (#OWASP #OWASPLondon). OWASP Board Member. Application Security (#AppSec) Consultant. OWASP #Nettacker Project leader. #CISSP
OWASP® Foundation @owasp
216K Followers 525 Following We improve the security of apps with community-led open source projects, 260 local chapters, and tens of thousands of members worldwide. Famous for OWASP Top 10
Allan is @allanfriedm... @allanfriedman
7K Followers 2K Following #SBOM Champion. Full service technocrat. Now at @CISAgov, formerly NTIA. Lapsed{engineer, academic, author}. Personal Account.
R M ⚡🇺🇦 @kingthorin_rm
2K Followers 474 Following IT Sec guy, @zaproxy co-lead, @owasp_wstg co-lead, VWAD co-lead, @owasp_ottawa volunteer, Hac≺3r, supporter of oxford commas, #INTJ. (Opinions == mine) 🍁
Crash Override @crashappsec
3K Followers 228 Following The only developer productivity insights platform with code-to-cloud visibility through deep build inspection.
VAIBHAVA MISHRA @VaibhavaMishra9
5 Followers 934 Following
Samk @samk1710
39 Followers 485 Following software security~gsoc '26 @vulnerablecode i'll give you one more time
e10 @e10tweets
0 Followers 40 Following
Yoshi @hotmeiporo
83 Followers 864 Following
Saivarun Daripalli @SaivarunDa99400
0 Followers 31 Following
aniket chougule @aniketchou39237
9 Followers 269 Following
Antonio Minnella @AntonioMinnella
920 Followers 2K Following #AppSec #Engineer, #SoftwareEngineer, #SecurityEngineer and #OWASP member
jrm @50c910566fb3a33
0 Followers 270 Following
Christophe Vaudry @_TGITS
398 Followers 3K Following Husband. Proud Dad. Working for @norsys. Programming languages explorer. Concerned by climatic changes. Know nothing. Tweets & opinions are my own.
Markus Niederöst @NdrstM81139
160 Followers 283 Following I am first and foremost a human being. I know who I am, where I stand in the universe and what my earthly mission is here. IYKYK.
PA Outdoor Dad @PAOutdoorDad
12 Followers 70 Following
ごま @lGXhxx7vyxHZFrd
31 Followers 301 Following
SANJAY RAI @sanjaynrai
28 Followers 480 Following
Bastian Eric Herrera ... @BFuentes4747
117 Followers 981 Following conocimientos de cuerpo humano y en lo espiritual, lo perfecto lo que es transmitido por informacion o guia de el que solo es,como el viento Dios, todopoderoso
ChinaAirStrike @chinaairstrike
3 Followers 34 Following
Dmitry Larkin @mutagen_rinds_9
0 Followers 35 Following
Dave Ishii @ishiid
1K Followers 6K Following Kiara Inc. CEO | @KiaraLab7 | @GetKiara | My Book https://t.co/zwMmXizn7d | Kyoto U | Itochu EU 🇬🇧🇮🇹
rustler2000 @rustler2000
11 Followers 199 Following
Rusak @Rus4k7
92 Followers 1K Following sysadmin awakened by security and devops - automation enthusiast
StijnVR_ @stijnvr_
45 Followers 987 Following
Quintaconta @Couves5J
694 Followers 2K Following "Alguns homens só querem ver o circo pegar fogo". Pennyworth, Alfred.
Clint326 @Clint326
2K Followers 2K Following Fractional CISO • CISSP • CISA • Entrepreneur • Veteran. Interests: AI • LISP • Robotics • Astronomy • Quantum
Soeren Rennecke @SoerenRennecke
2 Followers 59 Following
David Wiley @VetOSINTSec
1 Followers 180 Following Combat-Tested Counter-Espionage for American Companies Former Army 35M HUMINT Collector | Iraq Veteran | Ethical OSINT Sweeps That Stop Cold Insider Threats
Udreroffawq @Udreroffawq909
121 Followers 5K Following
Rodrigo Speller @rodrigospeller
1 Followers 49 Following
Ramkumar Sundarakalat... @nocturnalknight
560 Followers 1K Following Founder & Chief Architect - https://t.co/5IxjcT3J6e Entrepreneur, Open-Source Evangelist, Technologist, Amateur Aerospace Observer. Anthropology Student
Matt Kirby @McWhistlepants
2 Followers 89 Following
Genaro Sanchez @genarosanchez
801 Followers 592 Following DevSecOps & AI Evangelist | .Net Software Architect | Scrum Master.
Sc4t0L3x @ScatolinL
41 Followers 431 Following Engenheiro & Generalista Cada decisão planejada é uma aposta e o resultado um estudo
Tate Gunning @e_tat_II
15 Followers 91 Following Veteran. Founder. Privacy architect. Identity theft survivor translating lived harm into rights-by-design standards across defense, health & Five Eyes agencies.
Alex Tige @AlexTige290753
2 Followers 26 Following
Abhishek Chowdhury @buaonline
5 Followers 80 Following
Anne Bendix | AppSec ... @AppSecNomad
1 Followers 14 Following AppSec Guide | traveling with my 🐺 in my old Chevy
TechNomad @TechNomad007
7 Followers 210 Following Code Security & Digital Operational Resilience mercenary. TPRM code specialist. 1st step to digital trust begins w a shared SBOM. Trust & Verify. Continuously..
Manney McVicker🫂 @manneym
86 Followers 678 Following Married to a top girl, dad to two superstars, devops engineer, but don't hold that against me :-) love my family + friends
gowtham @rgowtham_1993
0 Followers 7 Following
Martin Žídek @martin_zidek_cz
14 Followers 320 Following
paul bert @paul1bert
0 Followers 33 Following
Riichiro Sato @tkz330
232 Followers 529 Following Financial IT Engineer / Sloppy joe (guitar) /cleandistortion(guitar) 人とシステムの関係を良くしたいと思って仕事してます。 たまにギター弾いてます。
Metaport @metaportsh
4 Followers 47 Following Website maintenance agencies can actually schedule - https://t.co/Dr7UDLTvbv
Dean M. Sands, III @deanmsands3
195 Followers 673 Following
Jeremy Long @ctxt
1K Followers 236 Following Builder, infosec, SCA and SAST enthusiast, blue team. Founder of OWASP dependency-check.
OWASP® Foundation @owasp
216K Followers 525 Following We improve the security of apps with community-led open source projects, 260 local chapters, and tens of thousands of members worldwide. Famous for OWASP Top 10
Carlo Reggiani @carloreggiani
2K Followers 2K Following
Chris Hughes @ResilientCyber
455 Followers 168 Following Securing Agentic AI @ Zenity | Founder @ Resilient Cyber | 3x Author | Veteran | Advisor
Help Net Security @helpnetsecurity
60K Followers 26 Following Independent cybersecurity news since 1998. Discover what matters in the world of information security today.
ClearlyDefined @clearlydefd
188 Followers 0 Following Helping FOSS projects be more successful through clearly defined project data.
SANS Cloud Security @SANSCloudSec
15K Followers 421 Following Stay up to date with the latest on SANS cloud security, DevSecOps, and application security.
Security BSides @SecurityBSides
57K Followers 873 Following Building communities one event at a time. Thirteen years, over eight hundred events, and we're just getting started. @[email protected]
SC Media @SCMagazine
119K Followers 2K Following The official Twitter feed for all things IT security. A CyberRisk Alliance Resource.
SecurityWeek @SecurityWeek
228K Followers 3K Following #Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage
Mend.io @Mend_io
11K Followers 3K Following The #AppSec provider of choice for six out of 10 of the world’s most demanding software developers.
Follow @BlackDuck_SW @SW_integrity
6K Followers 6K Following We moved! Follow @BlackDuck_SW to continue the conversation in all things application security in 2025!
SAFECode @SAFECode
770 Followers 730 Following We are a global non-profit organization dedicated to promoting best practices for developing and delivering secure and reliable software, hardware and services.
OWASP Cloud Security @OWASP_CloudSec
942 Followers 3 Following Threat and control BDD stories for cloud services.
DefectDojo @defectdojo
703 Followers 20 Following Making Vulnerability Management Less Painful #AppSec #DevSecOps #ASPM #AppSecPipeline
OpenText Cybersecurit... @OpenTextSec
16K Followers 1K Following We bring the expertise of one of the world’s largest security portfolios to help our customers navigate the changing threat landscape.
Follow @BlackDuck_SW @SWIntegrity
10K Followers 5K Following Follow @BlackDuck_SW - The official X account for Black Duck.
Black Duck Open Hub @bdopenhub
4K Followers 2K Following The Worlds Largest Repository of Freely Available Analytics on Hundreds of Thousands of Open Source Projects, Contributors, Organizations, Languages, etc.
OWASP Global Summit @OWASPSummit
777 Followers 11 Following The OWASP Global Summit is a place to sit down together - taking time to discuss and work out plans, projects, and solutions for the appsec future.
OWASP 24/7 Podcast @OWASP_podcast
1K Followers 275 Following Weekly episodes provided by co-hosts Vandana Verma, Matt Tesauro, and Mark Miller. If it's OWASP, if it's Cybersecurity... we'll be talking about it.
OWASP Top10 @OWASPTop10
5K Followers 25 Following
National Institute of... @NIST
95K Followers 465 Following NIST promotes U.S. innovation & competitiveness by advancing measurement science, standards & tech to enhance economic security & improve our quality of life.
Cybersecurity @ NIST @NISTcyber
98K Followers 522 Following Official handle covering all things cybersecurity at NIST
Risk Based Security @RiskBased
2K Followers 75 Following Comprehensive and timely vulnerability intelligence, breach data and risk ratings. A Flashpoint company. Follow @FlashpointIntel for updates.
CycloneDX SBOM Spec (... @CycloneDX_Spec
967 Followers 8 Following OWASP CycloneDX is a modern standard for the software supply chain. Software Bill of Materials (SBOM), SaaSBOM, Cryptography (CBOM), AI/ML-BOM, VDR/VEX...
Denim Group now Coalf... @denimgroup
1K Followers 1K Following Denim Group was acquired by Coalfire on June 1, 2021. Follow @Coalfire for all updates on ThreadFix and advisory services.You might like
