Platform Use Cases
DeployHub turns static SBOMs into continuous vulnerability intelligence by showing which open-source components are running in production, where they are deployed, and which CVEs need to be fixed first.
The Risk
New vulnerabilities are disclosed every day, but knowing about a vulnerability is only the first step. Security teams need to quickly determine whether affected software is already running in production and which applications require attention.
Without continuous monitoring, teams may rely on periodic scans or manual investigations to identify affected systems. This creates a gap between when a vulnerability is disclosed and when it can be remediated—giving critical exposures more time to impact the business.
Platform Benefits
Using the DeployHub platform allows security teams to continuously monitor production software for newly disclosed vulnerabilities, quickly identify affected applications, and focus remediation on the systems that present the greatest business risk.
Continuously compare newly published vulnerabilities against software already running in production to identify potential exposure as soon as new threats emerge.
Get immediate visibility into applications affected by newly disclosed vulnerabilities without waiting for manual investigations across teams and environments.
Reduce exposure time by prioritizing remediation for systems with actual production exposure and business impact—not simply the highest number of theoretical vulnerabilities.
Here’s how DeployHub compares to Traditional SCA, Scanners, and SAST.
| Capability | DeployHub | Traditional SCA | Container Scanners | SAST |
|---|---|---|---|---|
| Maps CVEs to deployed applications | Yes | Limited | Container-only | No |
| Shows where vulnerable packages are running | Yes | No | Limited | No |
| Tracks ownership and blast radius | Yes | Limited | Limited | No |
| Uses SBOMs after deployment | Yes | Limited | Limited | No |
| Supports agentless operational visibility | Yes | Usually no | Usually no | No |
Know when a new CVE affects software you’ve already released by using your SBOM insights.
See the exact package, version, artifact, and endpoint affected by a newly reported CVE.
Continuously monitor your deployed software without agents or production rescanning.
DeployHub aggregates OpenSSF Scorecard data to help teams evaluate the security practices of the open-source projects they depend on, not just whether those projects currently have known CVEs
Turn static SBOM files into a live inventory of the open-source packages and versions running across your software estate.
Built on Ortelius, DeployHub gives teams an open, extensible foundation for software inventory, SBOM intelligence, deployment tracking, and vulnerability defense.
meet ortelius
DeployHub is built on Ortelius, the open-source foundation for post-deployment vulnerability intelligence. Ortelius connects SBOMs, deployment data, applications, environments, and endpoints so teams of all sizes and budget constraints can determine whether newly disclosed vulnerabilities are actually affecting live systems.
Ortelius is an open-source project incubating at the Continuous Delivery Foundation.
