trust

dependency-scanning

Dependency & Vulnerability Scanning

Dependency & Vulnerability Scanning

Automated checks for known vulnerabilities in third-party dependencies.

Automated checks for known vulnerabilities in third-party dependencies.

Applies to

Security Program

Domain

Product Security

Contact

security@oxvo.com

Overview

Modern applications rely on third-party libraries. Vulnerability scanning helps identify known CVEs and risky components early. OXVO supports dependency hygiene practices to reduce exposure from compromised or outdated packages.

Controls & Practices

- Dependency scanning integrated into CI (implementation dependent) - Patch management workflow to remediate issues - Recommended: prioritize fixes for critical/high severity vulnerabilities - Track security advisories for key components

More trust controls

Browse related security, privacy, and reliability controls across OXVO.

Multi-Factor Authentication (TOTP)

Require a second factor to reduce the risk of account takeover.

Single Sign-On (SAML 2.0)

Centralize authentication and offboarding through your identity provider.

SCIM Provisioning (Enterprise)

Automate user lifecycle management from your identity provider.

Role-Based Access Control (RBAC)

Apply least-privilege access across admin, agent, and analyst workflows.

Audit Logs

Track security-relevant actions and configuration changes across your workspace.

API Tokens & Scoped Keys

Issue scoped access tokens for integrations with rotation and revocation.

Multi-Factor Authentication (TOTP)

Require a second factor to reduce the risk of account takeover.

Single Sign-On (SAML 2.0)

Centralize authentication and offboarding through your identity provider.

SCIM Provisioning (Enterprise)

Automate user lifecycle management from your identity provider.

Role-Based Access Control (RBAC)

Apply least-privilege access across admin, agent, and analyst workflows.

Audit Logs

Track security-relevant actions and configuration changes across your workspace.

API Tokens & Scoped Keys

Issue scoped access tokens for integrations with rotation and revocation.