OCI Application Dependency Management

Software-supply-chain scanner that inspects application dependencies (Maven, npm, PyPI, NuGet, RubyGems, Go modules) for known CVEs, builds an SBOM per app, and integrates into OCI DevOps pipelines to block deploys on unresolved vulnerabilities

FluffyStack tools

Add to Service Builder Add to Compare Compare with equivalents Explore OCI in Treemap Explore security in Honeycomb See OCI regions on the World Map See security as a network Score jurisdiction exposure

Documentation Pricing OCI website

Jurisdictional exposure

Provider HQ

USAustin, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations

APACEEAEUUKUSOther58 regions across 6 jurisdictions

Sovereign option

Yes — 12 sovereign-flagged regions available

Full scorecard for this service →US lens detail →Sovereign cloud coverage map →

Sub-services (2)

Vulnerability Scans

Per-application CVE scan against declared dependencies

SBOM Export

SPDX / CycloneDX exports for compliance evidence

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

GDPR SOC 2 ISO 27001 HIPAA PCI DSS FedRAMP IRAP C5 ENS High CCCS Medium ISMAP

Where this runs

58 regions

27 countries

12sovereign

Sovereign regions (12)

EU Sovereign Spain (Madrid) · MadridOracle EU Sovereign Cloud
EU Sovereign Germany (Frankfurt) · FrankfurtOracle EU Sovereign Cloud
US Gov East (Ashburn) · AshburnOracle US Government Cloud
US Gov West (Phoenix) · PhoenixOracle US Government Cloud
US Federal (Ashburn) · AshburnOracle US Government Cloud
US Federal (Chicago) · ChicagoOracle US Government Cloud
US Federal (Phoenix) · PhoenixOracle US Government Cloud
US DoD East · AshburnOracle DoD Cloud (US)
US DoD Central · ChicagoOracle DoD Cloud (US)
US DoD West · PhoenixOracle DoD Cloud (US)
UK Government (London) · LondonOracle UK Government Cloud
UK Government (Newport) · NewportOracle UK Government Cloud

Commercial regions (46)

Europe (12)

France South (Marseille)
France Central (Paris)
Germany Central (Frankfurt)
Italy Northwest (Milan)
Italy North-West (Turin)
Netherlands Northwest (Amsterdam)
Serbia Central (Jovanovac)
Spain Central (Madrid)
Sweden Central (Stockholm)
Switzerland North (Zurich)
UK South (London)
UK West (Newport)

North America (8)

Canada Southeast (Montreal)
Canada Southeast (Toronto)
Mexico Northeast (Monterrey)
Mexico Central (Querétaro)
US East (Ashburn)
US Midwest (Chicago)
US West (Phoenix)
US West (Salt Lake City)

South America (5)

Brazil East (São Paulo)
Brazil Southeast (Vinhedo)
Chile Central (Santiago)
Chile West (Valparaíso)
Colombia Central (Bogotá)

Asia (11)

India South (Hyderabad)
India West (Mumbai)
Indonesia Central (Batam)
Japan Central (Osaka)
Japan East (Tokyo)
Malaysia Central (Kulai)
Malaysia West 2 (Kulai)
Singapore (Singapore)
Singapore West
South Korea North (Chuncheon)
South Korea Central (Seoul)

Oceania (2)

Australia Southeast (Melbourne)
Australia East (Sydney)

Middle East (6)

Israel Central (Jerusalem)
Saudi Arabia West (Jeddah)
Saudi Arabia Northwest (NEOM)
Saudi Arabia Central (Riyadh)
UAE Central (Abu Dhabi)
UAE East (Dubai)

Africa (2)

Morocco Central (Casablanca)
South Africa Central (Johannesburg)

Equivalent services on other platforms

Amazon InspectorAWS

Automated vulnerability management service that continually scans EC2, Lambda, and container images for software vulnerabilities and unintended network exposure, delivering prioritised findings with contextual risk scoring

Pricing

Pricing model:no-charge