What is this report about?

This document is a sample Software Composition Analysis portfolio assessment report on Open Source risks for 20 applications generated automatically by CAST Highlight. The assessment was completed in three days by analyzing the source code and completing a few survey questions for each application.

What will you find inside this report?

• Overall assessment of the open source risk for the entire application portfolio
• Detail on the specific security vulnerability, IP licensing, and obsolescence risks identified for each application
• Specific recommendations on open source risks that should be addressed