Systems and methods for software security analysis

A computer-implemented method for analyzing software dependencies, comprising:

• on a first asset, executing a technology agent configured to:
• analyze software stored in memory of the first asset, the analysis comprising:
• identifying nodes within the software,
• recording a hierarchy of the nodes within the software,
• identifying any dependencies within the software and with other portions of software;
• and
• on the first asset, executing a security agent configured to:
• analyze security of the software stored in the memory of the first asset, the security analysis comprising:
• identifying security risks in the software and assigning a risk level to each,
• associating each identified security risk with a node or edge,
• aggregating security risks at at least two different levels of the software hierarchy into hierarchy level risk scores by adding risk levels of identified security risks associated with nodes or edges within the levels,
• wherein the analysis performed by the technology agent further comprises detecting when the hierarchy has been modified to include one or more new or changed nodes and, upon detecting such modification, initiating a security analysis of the new or changed nodes and re-aggregating security risks of the at least two different levels of the software hierarchy based on the results of the security analysis of the new or changed nodes.