Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code
Insignary Launches Clarity AIR: Closing the Blind Spot Between What Your Developers Declare and What’s Actually in Your Code
New snippet-level scanning shows security and compliance leaders which open-source code and which AI-written code never made it into a manifest.
Insignary Inc. today announced the general availability of Insignary Clarity AIR, a source-code scanning product built to answer a question most security teams can’t currently answer with confidence: what is actually running in their software, beyond what developers reported.
Manifests and SBOMs built from declared dependencies are only as complete as what developers chose to report. An estimated 70–90% of applications today are built substantially on open-source code, and a meaningful share of it arrives through channels no manifest captures — a function copied from another project, a snippet pulled from a forum, a block an AI coding assistant generated and nobody reviewed line by line. For a CISO signing...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
