What Hopper is
Hopper provides SCA and container scanning with the full suite of features you'd expect from a modern SCA tool - function level reachability, legal compliance, prioritization, and more. Their function level reachability uses a unique methodology to reduce false positives. The vendor site is www.hopper.security. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Hopper covers
Hopper is in the catalog for these capabilities. Categories: SCA and Container Vulnerability.
How to evaluate Hopper in a security program
Use Hopper as a stack candidate, not as diligence evidence. The oneNorma score for Hopper is 5/10 (percentile 46). If the real gap is in SCA and Container Vulnerability, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.hopper.security publishes. Contrast it with pentesting and Security Cloud & Compliance.
