Package Security Manager

Proactively manage risks and ensure compliance in your data science, machine learning, and AI projects with a comprehensive security solution.

Security in an Ever-Changing Landscape

Tackle the complexities of securing software packages, managing vulnerabilities, creating security policies, and meeting compliance standards using Package Security Manager. 

Comprehensive Vulnerability Scanning

Understand vulnerabilities for packages and their dependencies.

Vulnerability Notifications

Get updates on vulnerabilities that affect the packages you are using.

Custom Security Policies

Define and enforce custom security policies, tailored to your compliance standards.

Granular Risk Assessment

Get detailed insights into vulnerabilities and implement efficient and impactful mitigation strategies.

Centralized Security Management

Manage and track your organization from a central location. Streamline security operations and compliance requirements.

License Filtering

Ensure adherence to open-source license compliance standards and filter out licenses that do not align with your organization’s requirements.

Centralized, Automated Package Security Management with Notifications

Get curated packages from a trusted source. Manage access to your organization and enforce security policies with fine granularity. Easily meet compliance standards with Software Bill of Material records for packages, and stay ahead of vulnerabilities with notifications. 

Cloud or On-premise Solutions

Manage your organization’s package security in the cloud, or on-premise, including air-gapped networks.

Access Control

Control who has access to your Package Manager and the channels it contains.

CVE Curation and Notifications

Keep up to date with fluctuating vulnerability scores that affect packages in your applications.

Package Signatures

By utilizing cryptographic signatures, we ensure each package’s integrity and authenticity, protecting your projects from compromised or tampered software.

Software Bill of Materials

Generate detailed SBOMs to easily identify dependencies, streamline security checks, and ensure license compliance.

Policy Filters

Create and enforce security policies and filters tailored to the needs of your users and industry compliance. Enhance your organization’s security posture by preventing the use of insecure packages.

External Source Mirroring

Gain access to extra packages from public channels (e.g., conda-forge) and repositories (e.g., PyPI and CRAN) to ensure your team has all necessary resources centralized in one location.

Hosted Channels

Secure access to signed and scanned conda-forge recipes that we have rebuilt within a secure and constructed on Anaconda’s trusted private infrastructure.

Enhanced Environment Control

Scan environments in the Cloud GUI, view your organization’s environments, and use comprehensive vulnerability scanning capabilities.