Skip to main content

Community and language coverage

The Spectra Assure platform supports a variety of communities, programming languages, and file formats. A specific set of features is available for each of those categories.

The tables on this page contain supported communities and programming languages.

For every supported community and programming language, the tables cover the following information:

  • Code Analysis - the supported file formats and environments on which Spectra Assure products can perform static analysis
  • Packages - the supported package formats, libraries, and package managers
  • Dedicated Policies - indicates if there are dedicated Spectra Assure policies for the community/language
  • Threat Detection - indicates if the Spectra Assure platform identifies threats targeting the community/language
  • Behavioral Analysis - indicates if the Spectra Assure platform performs code intent analysis
  • Known Vulnerabilities - indicates if the Spectra Assure platform detects publicly disclosed vulnerabilities (CVE)

Community coverage​

Select a community in the table for details about code analysis and package format support.

CommunityDedicated PoliciesThreat DetectionBehavioral AnalysisKnown Vulnerabilities
WindowsWindows and Linux mitigation checks in compiled binaries only✔️✔️Vulnerabilities in statically linked libraries only
LinuxWindows and Linux mitigation checks in compiled binaries only✔️✔️✔️
macOS❌✔️❌❌
Machine Learning✔️✔️✔️N/A or unsupported
Development❌✔️✔️✔️
Containers✔️✔️✔️✔️

Windows​

Code Analysis
  • Compiled code: PE (x86, arm, chpe)
  • Library code: LIB
Packages
  • Windows (MSI, MSIX, APPX, WIM)
  • Installers (NSIS, InnoSetup, InstallBuilder, InstallShield, Wise, Actual Installer, Advanced Installer, DreamShield, InstallAnywhere, WiX Toolset, SFX Archives)
  • Documents (Microsoft Office, CHM, RTF, CRTF)
  • Multimedia (BMP)

Linux​

Code Analysis
  • Compiled code: ELF(x86, arm, mips)
  • Library code: A/AR
Packages
  • Debian (DEB, UDEB)
  • RedHat (RPM, DRPM)
  • Alpine (APK)
  • Documents (OpenOffice, LibreOffice, PDF, HTML)
  • Multimedia (GIF, PNG, JPEG, TIFF, SVG)

macOS​

Code AnalysisCompiled code: Mach-O (x86, arm, ppc)
PackagesmacOS (PKG, DMG, Universal)

Machine Learning​

Code AnalysisModel data
Packages
  • NumPy (NPY, NPZ)
  • Keras, Tensorflow, scikit-learn, PyTorch, Joblib (PKL)

Development​

Code AnalysisCI/CD and IDE plugins
Packages
  • VSCode (VSIX)
  • Jenkins (HPI)

Containers​

Code Analysis
  • Container images
  • Virtual machines
Packages
  • Universal (ISO, UDF)
  • Windows:
    - VHD and VHDX - Virtual machines with MBR/GPT/LVM/EFI partitioning and NTFS/FAT/EXT/XFS/UFS2/BTRFS file systems only
  • Linux:
    - OCI, LXD, OVA;
    - VDI, VMDK and QCOW - Virtual machines with MBR/GPT/LVM/EFI partitioning and NTFS/FAT/EXT/XFS/UFS2/BTRFS file systems only
  • Docker (TAR)
  • Kaniko (TAR)

Language coverage​

Special conditions

Programming languages with the info (ℹ️) symbol in the table have some restrictions or special conditions for what is supported.

The following special conditions are indicated:

  • C/C++ - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only; Known Vulnerabilities: Vulnerabilities in statically linked libraries only
  • Visual Basic - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only
  • Delphi - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only
  • Python - Dedicated Policies: Machine learning model data only
  • Go - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only
  • Rust - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only
  • AutoIt - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only
LanguageCode AnalysisPackagesDedicated PoliciesThreat DetectionBehavioral AnalysisKnown Vulnerabilities
C/C++Compiled code
  • PE: x86, arm, chpe
  • ELF: x86, arm, mips
  • Mach-O: x86, arm, ppc
N/A or unsupported
ℹ️✔️✔️ℹ️
.NET (C#, F#, VB.NET)Compiled bytecode
  • CLR
  • NuGet (NUPKG)
❌✔️✔️✔️
Visual BasicSource code
  • HTA, VBS, VBE, VBA
Compiled code
  • PE: x86, pcode
N/A or unsupported
ℹ️✔️✔️❌
DelphiCompiled code
  • PE: x86
N/A or unsupported
ℹ️✔️✔️❌
PythonSource code
  • PY
Compiled bytecode
  • PYC
Model data
  • PKL
  • Wheel (WHL)
  • PyProject (Poetry, Flit, Setuptools)
  • Installers (Py2ExeInstaller, PyInstaller, PYZ)
  • Keras, Tensorflow, scikit-learn, PyTorch, Joblib (PKL)
  • NumPy (NPY, NPZ)
ℹ️✔️✔️✔️
Node.jsSource code
  • JS
Compiled code
  • Electron
  • NPM (TGZ)
  • Electron (AppImage, ASAR)
❌✔️✔️✔️
RubySource code
  • RB
  • RubyGems (GEM)
❌✔️✔️✔️
GoCompiled code
  • PE: x86, arm
  • ELF: x86, arm
  • Mach-O: x86, arm, ppc
N/A or unsupported
ℹ️✔️✔️✔️
RustCompiled code
  • PE: x86, arm
  • ELF: x86, arm
  • Mach-O: x86, arm, ppc
  • Cargo (TGZ)
ℹ️✔️✔️✔️
JavaCompiled bytecode
  • CLASS
  • Scala
  • Maven (JAR, WAR)
❌✔️✔️✔️
JavaScriptSource code
  • HTA, JS, JSE, TypeScript
Browser extension
  • XPI, OEX, CRX
N/A or unsupported
❌✔️✔️❌
PHPSource code
  • PHP
  • Packagist (ZIP, TGZ)
❌✔️❌✔️
AutoItSource code
  • AU3
Compiled code
  • PE: x86
N/A or unsupported
ℹ️✔️✔️N/A or unsupported
PowerShellSource code
  • BAT
  • PS
N/A or unsupported
❌✔️✔️N/A or unsupported
ShellSource code
  • SH
N/A or unsupported
❌✔️✔️N/A or unsupported