About WhiteSource

WhiteSource is the leading solution for agile open source security and license compliance management. 

It integrates with your development environments and DevOps pipeline to detect open source libraries with security or compliance issues in real-time. 

WhiteSource doesn’t only alert on issues, it also provides actionable, validated remediation paths to enable quick resolution and automated policy enforcement to speed up time-to-fix. It also helps you focus on what matters by prioritizing remediation based on whether your code is actually using a vulnerable method or not, and guaranteeing zero false positives.

WhiteSource offers support for over 200 programming languages, and continuous tracking of multiple open source vulnerab...


Read More

Supported Operating System(s):

Web browser (OS agnostic)

5 Reviews of WhiteSource

Average User Ratings

Overall

4.20 / 5 stars

Ease-of-use

3.5

Value for money

1.0

Customer support

4.5

Functionality

3.0

Ratings Snapshot

5 stars

(3)

3

4 stars

(1)

1

3 stars

(0)

0

2 stars

(1)

1

1 stars

(0)

0

Likelihood to Recommend

Not likely

Very likely

Filter reviews by:

Sort by: Most Helpful | Most Recent

Showing 1 - 5 of 5 results

Do you use this product?Write a review

November 2015

Udi from Alcatel Lucent

Time Used: Free Trial

Review Source: Capterra


Ease-of-use

4.0

Customer support

5.0

November 2015

FOSS lifecycle management with Whitesource

Using Whitesource to manage the process of analysing FOSS for a large product with hundreds of opensource dependencies. Makes life much easier and helps you cover all dependencies much more accurately. Some processes are still a bit course (though improved dramatically over the past 18 months) Refresh performance might be a bit slow when there are very large dependency lists. Best product out there for FOSS lifecycle management

November 2015

shaul from Stanley Healthcare

Time Used: Free Trial

Review Source: Capterra


Ease-of-use

4.0

Customer support

5.0

November 2015

work with it for a long time still place to improve.

It aggregates my licenses in one centralized place. The software helps me to generate the reports for many requests that I have inside my organization. It also helps me to identify the changes between versions and compare them.

May 2013

John McIntire

Time Used: Free Trial

Review Source: GetApp


May 2013

Easy to use. Saves tons of time.

We used to document it all manually. Now its done easily and effectively. Not to mention that we missed many things, so with this we were able to fix some small issues before they become big issues....

Pros

easy inexpensive very comprehensive no more hassle

June 2018

Don from Computer Software

Time Used: Less than 6 months

Review Source: Capterra


Ease-of-use

3.0

Value for money

1.0

Customer support

4.0

Functionality

3.0

June 2018

Tons of false positives, prepare to spend hours fixing it manually

After much manual configuration, a nicely formatted output that looks reputable. I could have just made my own in excel a lot faster.

Pros

Fast, quick reviews of your code. They do a good job of putting all the relevant reports and dashboards in front of you quickly. Once you manually fix everything, it can look really good.

Cons

The false positives are awful. I had to spend hours and hours manually fixing everything it mis-identified - dozens of libraries and thousands of source files. If you use a library not in its database... too bad. You can make a support request and wait for them to enter it for you, whenever they get around to it. The search is pretty awful. There is some kind of syntax to using it but when I asked our account rep, she couldn't give me any documentation on it. You will frequently see results like "openssl-v0_9_8" in your search, but if you type "openssl" it will vanish and not come up. Don't ever both trying to search for a version, it doesn't work. This results in a lot of time scrolling through very large lists. Naming schemes are random and follow no established pattern. For a good half of all libraries, they have not assigned a license. Guess who gets to go google search them all? You, the user! Isn't the point of this tool to help me identify the licensing? UI navigation is challenging. Back button will take you to a different place than you were almost every time. You'll love the dashboard... because you have to go back to it roughly every 5 minutes and start over. No great system for notes/todos/reminders. When you have to fix 60 libraries, it's hard to remember what you want to do with each one.

September 2012

Alice Akins

Time Used: Free Trial

Review Source: GetApp


September 2012

License Management in the cloud

I use the free cloud based service of White Source and it is pretty well done. Things get done quickly and easy and the software helps me to track open source licences. There is nothing to complain about it!