What Deep Factor is
Acquired and subsequently shutdown by Cisco. Deep Factor differentiates their SCA tool with deep runtime insights on the open source package and its state of being loaded or not in the application - a good way to prioritize fixing. The vendor site is www.deepfactor.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Deep Factor covers
Deep Factor is in the catalog for these capabilities. Categories: SCA. Catalog tags: Nerdy and Acquired.
How to evaluate Deep Factor in a security program
Use Deep Factor as a stack candidate, not as diligence evidence. The oneNorma score for Deep Factor is 3.8/10 (percentile 9). If the real gap is in SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.deepfactor.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
