SourceClear

SourceClear (also branded SRC:CLR) was a San Francisco-based application security company founded in 2013 by Mark Curphey, the original founder of OWASP (Open Web Application Security Project). The company pioneered software composition analysis (SCA) for developer workflows, building tools that automatically inventoried open-source and third-party libraries used in an application, identified known vulnerabilities in those dependencies, and surfaced remediation guidance directly within CI/CD pipelines and GitHub repositories. SourceClear's platform supported Java, JavaScript, Ruby on Rails, Node.js, and Python, and used machine learning and data science to build the most complete and up-to-date database of verified open-source vulnerabilities available at the time. Customers spanned the technology, social media, retail, finance, and defense industries. The company raised a $1.5 million seed round in June 2014 and a $10 million Series A in October 2015 from Index Ventures and Storm Ventures, with a secondary office in Singapore. In April 2018, CA Technologies acquired SourceClear and folded it into Veracode, where its srcclr CLI tool became part of Veracode's integrated SCA product suite.