Function-level reachability analysis
Named by 7 kept items in this workspace.
Search every workspace for Function-level reachability analysis. It matches the name as written, so it can find other things that share it.
The items that name it 7
Generates a call path from code to a vulnerable function to determine if the vulnerable code is actually reachable/exploitable, allowing deprioritization of 80%+ of SCA alerts that aren't reachable.
Determines whether a vulnerability is reachable/exploitable at the function level to mark unexploitable risks as false positives and take them out of FedRAMP scope; Endor Labs research indicates fewer than 9.5% of vulnerabilities are exploitable at the function level on average
Builds a call graph of the application to determine whether any execution path exists from the code to a vulnerable function; Endor Labs research shows fewer than 9.5% of vulnerabilities are exploitable at the function level
Determines whether an application calls vulnerable code at all, reducing alert noise from thousands of findings to the handful that matter; used by Endor Labs SBOM Hub to cut 95% of noise.
Maps the application's call graph to determine whether the app actually executes a vulnerable function, cutting actionable findings by up to 95% and distinguishing exploitable from non-exploitable dependencies
All techniques in this workspace.