Software Composition Analysis by Datadog is a comprehensive security monitoring solution that enables end-to-end visibility into vulnerable open source libraries across continuous integration (CI) and production environments. It continuously monitors and analyzes open source components and dependencies within software applications, combining runtime monitoring with vulnerability detection to help DevOps and Security teams identify, assess, and remediate security risks. The solution operates within the CI/CD pipeline and provides real-time observability of vulnerable components in running applications, allowing teams to track and manage vulnerabilities in open source dependencies by examining library exposure, CVSS scores, and threat activity data.
