We are Anchore. Securing and managing the software supply chain. Proud parents of Syft and Grype
We regularly write about what we're working on; here are some recent blog posts:
- Beyond the Bottleneck: How RAISE 2.0 is Transforming Navy DevSecOps (1 week ago)
- Under the Hood: How Anchore’s Enterprise Vulnerability Feeds Keep You Secure (2 weeks ago)
- STIG in Action: 4 Lessons on Automating Compliance with MITRE SAF (3 weeks ago)
- The Top Ten List: The 2025 Anchore Blog (4 weeks ago)
- Why SBOMs Are No Longer Optional in 2025 (1 month ago)
We discuss our open source tools on Discourse. Here are some recent topics:
- Help with new provider (5 days ago)
- Grype is reporting a high number of vulnerabilities in one instance, while the other scan returns zero findings. (6 days ago)
- Grype DB schema v5 will be EOL on March 6, 2026 (2 weeks ago)
- PSA: No livestream(s) this or next week (Dec 25, Jan 1), happy holidays! (1 month ago)
- The OSS tools have a new documentation site! (1 month ago)
