Stellarlisten.dev
Supply Chain Security for CI/CD

listen.dev uses runtime analysis to detect and block suspicious dependencies and network activity in your build pipelines. Prevent supply chain attacks like SolarWinds, Codecov and event-stream before they cause harm.

hero
icon listen for GitHub
Holistic visibility against modern supply chain threats

Gain full, continuous observability of your supply chain within minutes. listen.dev provides deep context into your dev pipelines and assets, allowing you to enforce the right controls best suited for your environment.

icon See the unseen

Stay ahead of unknown threats
Proactively detect sophisticated and targeted attacks that target developer infrastructure to steal credentials, keys, and sensitive data - before they're known or published in CVE databases.
Not another dependency scanner
icon
Gain holistic visibility of application risk posture in real-time, powered by runtime context. Cover blind spots that traditional, static scanners miss.
Fast track compliance for NIST
icon
Comply with NIST 800-204D, FedRAMP, and SLSA standards through a comprehensive solution covering build hardening, artifact integrity and exfiltration monitoring for your CI/CD pipelines.

icon Backed by industry's leading investors

indexVentures
svangel
firstminute
dig
altman
volt
notboring
cantos
1indicator
icon Read Our Latest

NIST SP 800-204D: A Blueprint for Supply Chain Security in CI/CD pipelines
supply chain attacknistci/cd

NIST SP 800-204D: A Blueprint for Supply Cha...

A discussion of NIST SP 800-204D's latest guidelines for fortifying CI/CD pipelines against modern supply chain threats....

Feb 20 2024
Ledger Supply Chain Attack: A Case Study in Dynamic Visibility
web3npmmalwaresupply chain attackdynamic analysis

Ledger Supply Chain Attack: A Case Study in ...

A technical deep dive into the recent supply chain breach at Ledger and how dynamic analysis of behavior can prevent such threats ...

Dec 15 2023
All your domains are belong to us
npmdomain takeoverattack vector

All your domains are belong to us...

One of the largest threat surfaces in the open source software supply...

Oct 04 2023
blur
iconGet started in minutes

Stay vigilant. Ship with confidence.