Free webinar
You sign off on code your team never wrote. Libraries your developers chose, libraries those pulled in behind them, deliveries from contractors whose source you never see. Your customer, your auditor and your regulator make no distinction — it is your application. In one hour: how to know what is inside it, which of it your code actually reaches, and what was planted there on purpose.
Speakers
Charles Sutanto
Country Manager Indonesia, Positive Technologies
Timothy Hansen
Presales Engineer SEA, Positive Technologies
Programme
14:00–14:10
Opening: the code you did not write
When a critical vulnerability reaches the news, most organizations take days to answer whether it affects them. Nobody holds a current inventory.
Charles Sutanto
14:10–14:25
Know what is inside: an SBOM and a dependency graph from every scan
Every component, including the ones your dependencies pulled in. And when a supplier will not share source code, their SBOM can be scanned on its own.
Timothy Hansen
14:25–14:40
Presence is not usage, and a mistake is not an intent
Usage analysis separates what your code calls from what merely sits in the build. Then malicious code, which no version check will ever see.
Timothy Hansen
14:40–15:00
Live demo, what a regulator asks for
Seven minutes in the product, regulatory outlook, and how to have one of your own applications analyzed at no cost.
Charles Sutanto
Timothy Hansen
Save your seat
Free to attend. Link and calendar invite follow registration. Every attendee gets a free SCA scan of one application, or one SBOM, with the findings walked through on a call with an engineer.
