Show HN: Vigilance – Catch software supply chain attacks anywhere in the SDLC

Category: security

Tags: supply-chain, security, behavioral-analysis, file-integrity, malware-detection

Score: 6.3/10 (Innovation: 6, Technical: 6, Documentation: 5, Utility: 7)

Vigilance is a supply chain attack detection tool that focuses on behavioral anomalies in software updates rather than known signatures. It analyzes file changes to identify new capabilities like network access or command execution, aiming to catch novel attacks with fewer false positives. The tool scans inside various package formats and operates offline in its Pro version, but remains closed-source to prevent attackers from reverse-engineering its checks.

Target audience: security engineers, devops, backend developers

Repository: https://vigihq.com/

View on Hacker News