Bitergia Risk Radar

Let’s keep you ahead of software supply chain threats with a proactive solution.

The risks to open source supply chain are growing and Bitergia Risk Radar helps you manage and reduce the risks associated with open source dependencies with an interactive dashboard.

How Bitergia Risk Radar will help you?

We analyze the resilience of dependencies at scale and direct your attention to problem areas with a simple risk level score.

You can then answer questions like:
How efficiently are the libraries being maintained?
How many developers are maintaining them?
Are new developers joining?
Where are threats most likely to happen?

How can we best support a specific project?

By understanding these factors, you can make informed decisions and proactively address risks before they become costly problems

Bitergia Risk Radar elevates your strategy

Our Risk Radar evaluates dependencies by using the SBOM as an input and provides a bird’s eye view of hundreds of thousands of dependencies at a time.

Our Guided Path with the Bitergia Risk Radar

We work together to identify all of the OSS libraries used by your enterprise’s software components.

We analyze the developer communities behind the open source libraries, and use data from platforms like Git, GitHub, and GitLab to feed our risk model.

The Bitergia Risk Radar platform provides you with expert analysis, visualizations, and a simple risk level score.

Our consultancy team works with you to customize the scoring weights, select the most impactful visualization choices, and establish a repeatable reporting format.

The 7 Risk Radar Metrics to Master Your Software Supply Chain

Bitergia Risk Radar provides 7 metrics to identify risks and manage them before they become a problem in our software supply chain.

With our Bitergia Analytics Platform, we provide a centralized source of information, where you can track these 7 risk metrics and the total risk scores, saving you hours of switching between different platforms to access the data and insights you need.

The Pony Factor: How sustainable is the project? Does the project depend on only a few people?
Retention Rate: What is the inflow of active contributors that can sustain the project? How many of the existing contributors are leaving the project? Is this ratio well-balanced?
Growth of Active Contributors: How is the number of people currently active in the project evolving?

Median Lead Time for Issues: How efficient and effective are the maintainers in addressing its issues?
Median Lead Time for Pull Requests: How efficient and effective are the maintainers in addressing its pull requests?
Backlog Management Index (BMI): Are the maintainers able to keep the pace of solving issues?
Review Efficiency Index (REI): Are the maintainers able to keep the pace of solving code reviews?