Phylum: cybersecurity software

Acquired by Checkmarx. Phylum meets standard SCA scanning requirements, but differentiates with upstream malware detection. They have some smart features such as providing a CLI wrapper for NPM stalls to block attempted malware instalonenorman during development.

What Phylum is

Acquired by Checkmarx. Phylum meets standard SCA scanning requirements, but differentiates with upstream malware detection. They have some smart features such as providing a CLI wrapper for NPM stalls to block attempted malware instalonenorman during development. The vendor site is www.phylum.io. This profile is an entry in the oneNorma directory, not a vendor landing page.

What Phylum covers

Phylum is in the catalog for these capabilities. Categories: SCA. Catalog tags: Hands-on, Acquired, and Best for Enterprise.

How to evaluate Phylum in a security program

Use Phylum as a stack candidate, not as diligence evidence. The oneNorma score for Phylum is 3/10 (percentile 2). If the real gap is in SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.phylum.io publishes. Contrast it with pentesting and Security Cloud & Compliance.

Classification

Categories

SCA

Tags

Hands-onAcquiredBest for Enterprise

Frequently asked questions

What is Phylum?

Acquired by Checkmarx. Phylum meets standard SCA scanning requirements, but differentiates with upstream malware detection. They have some smart features such as providing a CLI wrapper for NPM stalls to block attempted malware instalonenorman during development. Site: www.phylum.io.

Which categories does Phylum fall into?

Phylum appears in the oneNorma directory under SCA. Use those labels to compare it with other vendors for the same problem, not as an official ranking.

Does oneNorma resell or implement Phylum?

No. The Phylum profile (www.phylum.io) is for inventory and comparison. oneNorma delivers offensive and compliance evidence (pentesting, cloud compliance), not a vendor license.

Other cybersecurity vendors

More profiles from the vendor directory.