Company Performance Metrics
Ossprey Security is a British cybersecurity company that detects malicious open-source packages in npm and PyPI using AI-powered behavioural analysis. Unlike signature-based scanners, Ossprey analyses what packages do at runtime to catch novel threats before they reach production. A graduate of both the Cyber Runway Launch and Grow programmes,
Ossprey is working with copmanies across UK and European fintech, crypto, and technology companies to establish the standard for open-source dependency security.
Engineering teams depend on open-source software at scale, and the supply chain attacks targeting those ecosystems are accelerating faster than traditional defences can track. Ossprey's just-in-time AI scanning pipeline catches malicious packages in real time, without relying on databases of known threats.
The platform is API-first, with integrations across the CLI, CI/CD pipeline, AI security coding apps, IDEs, SCA, and a security dashboard, giving teams visibility at the point of dependency resolution rather than after a compromise has occurred. Ossprey has detected confirmed real-world campaigns including Shai-Hulud, Bitwarden CLI breach, and the Telnyx PyPI compromise.