SCAN
Scan endpoints for packages & browser extensions
SUPPLY CHAIN ECOSYSTEM SECURITY
Secure Your Supply Chain. Strengthen Your Business.
PexLens helps organizations identify, assess, and manage risks across their
supply-chain ecosystem.
How PexLens Works
Software Supply Chain Security
Real-time Protection
Malware & Risk Detection
Policy-driven Control
Continuous Intelligence
Enterprise Ready
THE SOFTWARE SUPPLY CHAIN
Every package, dependency and browser extension can become an entry point.
Modern organizations rely on thousands of software components that change every day. Without visibility and control, a single compromised or vulnerable component can introduce risk into the organization.
Your software ecosystem is constantly changing.
Do you know what you're allowing in?
THE PEXLENS BRAIN
Intelligence behind every package and extension
REAL-TIME PROTECTION
Stop threats before they reach your endpoints
PexLens evaluates package requests in real time and applies your organization's security policies
before software is installed
The decision engine
Policy-driven decisions
Apply your own security thresholds to every package request
From detection to action
Protection doesn't stop at detection
When PexLens identifies a threat, your organization can respond immediately -with automated blocking, real-time notificationsand administrator-led remediation
What PexLens Protects Against
Protect Against the Risks Hidden in Your Software Supply Chain
See Your Software Supply Chain Clearly
Discover packages, dependencies, extensions, threats and affected endpoints from one place.
Built for the Teams Responsible for Security
Security Leadership
Understand your software supply-chain exposure and enforce organizational risk policies.
Application Security / DevSecOps
Assess packages, dependencies and extensions before they introduce risk.
IT & Endpoint Security
Discover software across endpoints and respond to threats quickly.
From Detection to Action
Know What Enters Your Organization. Control What Stays
PexLens brings software supply-chain intelligence, real-time protection
and policy enforcement into one platform
FAQ
Collapsable panel with such questions
What does PexLens scan?
PexLens scans software packages installed on endpoints as well as packages present within project folders. It also identifies browser and developer extensions, giving organizations visibility into the software components running across their environment.
Which package ecosystems are supported?
PexLens currently analyzes major open-source package ecosystems, including npm, PyPI, MavenCentral, RubyCentral.org with support for additional ecosystems evolving as the platform expands.
How does PexLens block malicious packages?
Package installation requests can be routed through the PexLens Proxy, where the package is evaluated against PexLens intelligence and your organization’s security policies. Packages that fail the defined security criteria can be blocked before installation.
Can organizations define their own security policies?
Yes. Organizations can define their own security requirements, including risk and CVE thresholds, and PexLens applies those policies when evaluating package requests.
Does PexLens monitor browser and developer extensions?
Yes. PexLens can identify and assess browser extensions and developer-environment extensions, including VS Code extensions, helping organizations detect malicious, suspicious, or risky extensions.
How does PexLens handle newly published packages?
PexLens continuously discovers and analyzes new packages and package versions, updating its intelligence as the software ecosystem evolves. This helps organizations make decisions using current risk information rather than relying only on historical scans.