Question 1

What does HeroDevs offer for end-of-life (EOL) software?

Accepted Answer

HeroDevs provides Never-Ending Support (NES) for critical EOL software, extending security, compatibility, and compliance so that your applications remain safe and functional without the need for disruptive migrations. Our NES solutions support frameworks like Spring, Vue, AngularJS, jQuery, Bootstrap, and Node.js, among others.

Question 2

How can NES help me maintain security and compliance while I plan my migration?

Accepted Answer

Upgrading can be costly and time-intensive. Our NES offerings act as secure drop-in replacements for legacy software, saving you time and ensuring compliance without altering your existing codebase. You get essential security updates and compatibility without migrating.

Question 3

How does HeroDevs keep my software secure?

Accepted Answer

HeroDevs performs continuous vulnerability scanning and provides proactive security patches, often addressing vulnerabilities before they become widely known. We work with original project maintainers and leverage our internal security expertise to stay ahead of emerging threats. As a certified CVE Naming Authority (CNA), HeroDevs participates in identifying and managing vulnerabilities to streamline vulnerability disclosure, support our customers' compliance needs, and foster collaboration with open source maintainers.

Question 4

Is HeroDevs compliant with major regulations?

Accepted Answer

Yes, HeroDevs’ NES products are designed to help you meet standards such as PCI, HIPAA, FedRAMP, and SOC 2, ensuring your legacy applications are compliant with strict regulatory requirements.

Question 5

What is included in a HeroDevs NES subscription?

Accepted Answer

Each NES subscription includes security and compatibility patches, expert support, and compliance updates. We also provide enterprise-level service-level agreements (SLAs) to ensure timely responses and resolution of critical issues.

Question 6

How quickly does HeroDevs release patches for new vulnerabilities?

Accepted Answer

HeroDevs prioritizes rapid patching, addressing critical fixes within 14 days of a vulnerability’s discovery. Our proactive approach ensures your software remains secure with minimal disruption.

Question 7

Can I try HeroDevs NES before committing?

Accepted Answer

Yes, we offer trial versions of our NES products so you can experience how they integrate with your tech stack. Contact our support team to discuss the best options for your needs.

Question 8

How does HeroDevs compare to alternatives like Tanzu or OpenLogic?

Accepted Answer

Unlike more general solutions, HeroDevs offers targeted, cost-effective support specifically for EOL software with options for only the coverage you need, avoiding the cost of full-suite packages. Our expertise in legacy systems is unmatched, especially for technologies like Spring, AngularJS, and Drupal.

Question 9

Does HeroDevs provide ongoing support for project dependencies and non-CVE issues?

Accepted Answer

Yes. Through HeroDevs Security Advisories, we also address vulnerabilities that might not have a CVE but still impact the security and stability of your applications, ensuring thorough coverage for both core and dependency vulnerabilities.

Question 10

Does HeroDevs share CVE resolution details with security scanning vendors to prevent false positives? If not, is it acceptable for SAS to provide our customers with a list of resolved CVEs, including those addressed by HeroDevs, and direct them to the HeroDevs Vulnerability Directory for reference?

Accepted Answer

Yes, HeroDevs is actively working on improving these efforts. For example, we’ve recently partnered with Mend.io and are engaging with other scanning vendors. Note that this challenge is not exclusive to HeroDevs; it’s an industry-wide issue due to non-public versions.

Technologies We Support

Never-Ending Support (NES) is a drop-in replacement for end-of-life open source software that helps you stay secure, compliant, and compatible while you migrate.

Easy to Install

Stay Secure While You Migrate

Why HeroDevs?

Frequently Asked Questions

Want to partner with us?

Contact Us