New Feature
Monarx Supply Chain Defense
Detect Malware Hidden in Your Customers' Software Dependencies
Malware Can Enter Your Servers Through Trusted Software Packages
Modern Node.js applications rely on third-party packages to function. While these dependencies make development faster, they can also introduce malicious code into applications and hosting environments.
Attackers increasingly target software supply chains by distributing malicious packages, compromising legitimate ones, or injecting harmful code into package updates. Once installed, these packages can bring malware directly into your customers' applications.
Malicious Packages
Packages created or modified to distribute malware, sometimes disguised as legitimate libraries.
Compromised Dependencies
Trusted packages that have been modified to include malicious code.
Hidden Threats
Malicious files buried within application dependencies, making them difficult to identify through manual inspection.
For hosting providers, this creates another attack surface that traditional vulnerability scanning alone cannot address.
Advanced Malware Detection for Node.js Dependencies
Monarx extends its malware detection and remediation capabilities to the software packages installed on your servers.
With Supply Chain Defense, hosting providers can identify malicious or compromised package files without changing how customers build, deploy, or manage their applications.
1. Detect Malicious Code
The Monarx agent scans installed package files using Monarx threat intelligence to identify known malicious and compromised files.
2. Identify Affected Files
Get visibility into supply-chain threats through the Monarx Console, including affected files and their detection status.
3. Automatically Remediate Threats
When protection is enabled, Monarx quarantines eligible malicious files and cleans eligible compromised files automatically, helping reduce manual security work.
Protect More Applications Without Adding Operational Complexity
For Hosting Providers
Monitor detected supply-chain threats across your protected infrastructure from the Monarx Console.
Reduce manual investigation and cleanup with automated remediation for eligible malicious and compromised files.
Enable automatic remediation or run in detection-only mode while maintaining visibility into identified threats.
Supply Chain Defense runs through the existing Monarx agent, simplifying deployment and ongoing management.
For Your Customers
See detected malicious and compromised package files through the Monarx plugin.
Understand which files were affected, where they were found, and when threats were detected.
Quickly identify detected threats and whether further action is required.
Vulnerability Scanning Isn't the Same as Malware Detection
Vulnerability Scanners
Identify packages with known security vulnerabilities that may require updates.
Monarx Supply Chain Defense
Detects malicious and compromised files inside installed npm packages and automatically remediates eligible threats.
Monarx Server Security
Provides broader malware detection, remediation, and real-time threat protection across servers and applications.
