Spectra Resolve
Learn how Spectra Resolve leverages AI to help you detect and prevent software supply chain risk in your projects.
What is Spectra Resolve?
Spectra Resolve is an AI-native application security tool for dependency management. It is a cross-platform desktop application that scans dependencies in your software projects for supply chain risk and lets you collaborate with an AI coding agent to understand and fix detected issues. The integration with AI agents allows for faster decision-making and optimized, repeatable workflows across multiple projects.
Users can interact with the AI to summarize security reports, investigate specific dependencies in more detail, and identify the most appropriate remediation steps. Spectra Resolve relies on rl-protect for scanning manifest files and requires either a free Spectra Assure Community account or an enterprise account on a Spectra Assure Portal instance.
More specifically, rl-protect scans the packages listed in supported manifest files and produces findings on known vulnerabilities, confirmed malware, leaked secrets, tampering and hardening signals, license problems, and policy violations measured against a scan profile.
Next, an AI coding agent checks your code to verify that flagged packages are actually reachable from the code.
Finally, it proposes an upgrade, a code fix, or a risk acceptance.
All proposals are recorded in a plan with an audit trail, and must first be validated by a human user before being applied or committed.
How to use Spectra Resolve?
Who should use Spectra Resolve?
- Developers who want to know whether a flagged dependency actually affects their code and need a quick way to perform package version upgrades
- Application security engineers who need an auditable record of what was fixed and accepted in a software project
- Teams looking for a central place to see outstanding supply chain work across many repositories
Spectra Resolve is most suitable for the following use-cases:
Safely adopting new dependencies - Before installing a package, ask the AI agent whether it is safe to adopt. Spectra Resolve performs a real scan of that exact version and returns a verdict you can compare against your current packages.
Triaging a fresh advisory - A new CVE lands in a package you depend on. Open the affected folder's report, find the package, and run Triage on the finding.
Automatically managing dependency upgrades - Resolve can check if an upgrade is safe, determine if it matches the policy, and ask the user for confirmation only when necessary (such as a major version upgrade). AI agents will run available tests to ensure that the upgrades are compatible.
Quickly removing malware - The Investigate malware option in Spectra Resolve traces how a malicious package could reach your code, and the worklist prioritizes it so the package can be replaced as soon as possible.
Keeping third-party dependencies under control - Use Chat features to answer questions about dependencies across multiple projects. Identify which projects have malware and what the highest-risk unresolved vulnerabilities are, with exact records for each claim.
Get Spectra Resolve
Current version of Spectra Resolve is 1.1.1.
Spectra Resolve is a self-contained Electron application that supports the following operating systems:
Linux
For Linux, you can download the latest version of Spectra Resolve in any of the formats listed in the following table. SHA-256 checksums for installer packages are included in the table for integrity verification purposes.
| Format | Download links | SHA-256 checksum |
|---|---|---|
| AppImage (x64) | Download | a43fd2ea12fbac4cc71032bbb457e4c153bee47d51a72accdbe464855231dbfd |
| DEB (x64) | Download | 0979d272740aee18df944292d7440a487abfcafbe80cf7ff46325f8b1f29720c |
| RPM (x64) | Download | 2a0671fc42c8f227251cb54499b9c4022cddccc0f878e99e0d51f2b39ba43a8e |
Windows
For Windows, you can download the latest version of Spectra Resolve in any of the formats listed in the following table. SHA-256 checksums for installer packages are included in the table for integrity verification purposes.
| Format | Download links | SHA-256 checksum |
|---|---|---|
| Windows Installer (x64) | Download | 59151702917e80906a487bf13a8a5b68236b971dd3045f5a6f1ba70db4ea1cd5 |
After downloading the appropriate version for your system, proceed with the installation.