NB Defense

Dependency Vulnerability Detection:

Your data science practice is built on open source frameworks and libraries. NB Defense scans your dependencies, looking for any known vulnerabilities in them. NB Defense also reports the version where the issue was fixed if it exists, giving you the exact target to upgrade to that fixes the issue.

Third Party License Validation

Not all open source licenses are equally, especially if you are working for a company. NB Defense checks the licenses of all of your third party dependencies and looks to see if their license is permissive enough for use. By removing these dependencies you also remove the risk of having to release sensitive IP or to pay fines.

Secrets Detection

It could be a small detail in a stack trace or a variable spelled out in plain text, regardless security credentials often end up in notebooks without anyone being aware. NB Defense scans for not only simple usernames and passwords but also complicated hash like credentials over dozens of services, alerting you to the exact location in a notebook so you can remove them, even before the content goes into Git.

PII Identification

Models are often built using sensitive data, we have a responsibility to protect that information from leaking. NB Defense uses a local NLP model to scan your notebooks looking for any potential PII in cells or their output. Once detected it alerts you to the exact cell location and to the type of suspected PII to make it easier to find and redact before it is misused.