WhiteSource Reviews in February 2025: User Ratings, Pros & Cons

"Invaluable tool to keep your software safe"

What do you like best? Summary: Whitesource shows us which libraries can be upgraded and which ones are vulnerable. This keeps our code up-to-date with other project's releases. Having an integration into our pipeline assures us we can follow this up easily. Applying Whitesource to our projects has helped us tremendously in keeping our project secure. It would be more difficult for our developers to search around to try and find those vulnerabilities by themselves. Most projects do have ...

"White Source Bolt Review (open source packages scanner)"

What do you like best? the easy way to implement in the cloud into our pipelines What do you dislike? at the moment i didn't noticed anything that i can dislike Recommendations to others considering the product: i recommend whitesource to scan opensource code What problems are you solving with the product? What benefits have you realized? the problems that everyone are facing, we all use opensource packages but without scanning them for known vulnerabilities, whitesource bolt is a great ...

"modern UI"

What do you like best? modern and familiar UI, easy to use and comfortable What do you dislike? structure of pages are not easy to understand What problems are you solving with the product? What benefits have you realized? detect company's license policy violations and solve them

"This is tool is better to review for security vulnerability for libraries."

What do you like best? This is tool is better to review for security vulnerability for libraries. What do you dislike? try to give flexible version of libraries. What problems are you solving with the product? What benefits have you realized? xstream and poi as well as spring security.

"Indispensable"

What do you like best? Turns keeping your software up to date from a chore into something you don’t even need to think about. What do you dislike? Faster creation of MRs - perhaps a database of who uses what dependency so as soon as a new release is created they can all be updated, rather than each repo polling their dependencies individually. Recommendations to others considering the product: Focus on building a good test suite so you can turn on auto merging. Also an automatic semantic ...

"Whitesource is an excellent tool for ensuring adequate security for third party software packages"

What do you like best? The licensing/copyright check is a major time saver. What do you dislike? For Nodejs the npm packages run deep, and currently it is not easy to determine the root package for some of the vulnerabilities. Recommendations to others considering the product: I would recommend integrating the scan process into your devOps pipeline. What problems are you solving with the product? What benefits have you realized? Whitesource automates the listing of third party packages, ...

"Automating software IPR checking"

What do you like best? The offering is delivered as SaaS and has an intuitive and easy to use interface which provides rapid access to key information on IPR and security vulnerabilities in an easy to understand graphical format. the wide range of reporting options allow potential issues to be captured and explored in more detail. What do you dislike? Configuration of the scanning element of the offering requires some practice and there are a large number of parameters to master. What ...

"WhiteSource identifies security vulnerabilities in easy steps & provides remediation for quick fixes"

What do you like best? User friendly, quick remediation & better reports What do you dislike? Provides only OSS security vulnerabilities Recommendations to others considering the product: WhiteSource is best in class solution, easy to adapt and with good customer support. What problems are you solving with the product? What benefits have you realized? Outdated versions of Open source libraries, vulnerable library components

"WhiteSource identifies security vulnerabilities in easy steps & provides remediation for quick fixes"

What do you like best? User friendly, quick remediation & better reports What do you dislike? Provides only OSS security vulnerabilities Recommendations to others considering the product: WhiteSource is best in class solution, easy to adapt and with good customer support. What problems are you solving with the product? What benefits have you realized? Outdated versions of Open source libraries, vulnerable library components

"Using WhiteSource integration to Continuous Integration system"

What do you like best? The API, The Maven plugin and the service oriented attitude from WhiteSource engineering What do you dislike? Performance in huge projects (might be solved with workarounds) . The CLI is running as JAVA jar only. The dashboard UX is bad. Really need to improve it What problems are you solving with the product? What benefits have you realized? Keeps us and our customers safe from legal and security aspects