What the problem is
Applications haven't been written from scratch for a long time: they are assembled from ready-made components—libraries, packages, container images, a significant portion of which are distributed as open source. Along with convenience come risks: vulnerabilities, unsuitable licenses, and versions that no one supports anymore.
Usually, developers and information security specialists resolve these issues via correspondence, with the outcome recorded nowhere. Basis Repository formalizes the process: the rules are uniform for all teams, and inspection results and decision history are stored in the system.
How it works
The customer defines the requirements themselves: which sources to fetch components from, which licenses are permitted, and which are not. The platform checks the component and compares the result against these requirements. Developers receive from the repository only what has passed verification or is permitted as an exception.
Exceptions are provided for: if a team needs a component with a known issue, an authorized employee can temporarily permit it, specifying the reason and timeframe. The system retains a record of who made the decision and on what grounds.
Glossary
Software component—a ready-made part of a program: a library, package, container image.
PPK—a list of detected software components and their versions; generated based on analysis results.
BDU FSTEC—Information Security Threat Data Bank of FSTEC of Russia, against which discovered vulnerabilities are verified.
Closed perimeter—an isolated infrastructure segment without internet access.
Verification does not end the first time
A component that is safe today may turn out to be vulnerable tomorrow. Therefore, checks can be repeated—manually or on schedule. If a new vulnerability is detected in a previously approved component, its further download can be blocked immediately for all teams.
How to respond is up to the customer: the system can automatically restrict access or maintain it while notifying the specialists in charge.
What else the platform can do
Which formats are supported
What is inside the product itself
Key functionality—managing verifications, applying admission rules, approving, and publishing components—is written in proprietary Basis code. Open-source software is used for specific tasks: storing and delivering packages, user identification, and certain technical checks.
“Secure development is becoming increasingly in demand, but the Russian market lacked a suitable tool for storing components and controlling their use according to unified rules. We drew on our own experience developing Basis Digital Energy and cooperating with FSTEC of Russia. The solution will complement the Basis ecosystem and help customers mitigate the risks of using open-source code,”—David Martirosov, General Director of Basis.
Who needs this
• Companies that use third-party software, including open source, when building and updating applications.
• Organizations subject to regulatory requirements where it is important to show who approved a specific component and why.
• Those developing in an isolated infrastructure who cannot access external repositories directly.
What is important to keep in mind
The platform does not make decisions for the company: it executes the rules set by the customer. The more accurately the admission policy is described, the more useful the tool is.
The claim regarding the lack of equivalents on the Russian market is the company’s position.
About the company
Basis is a Russian software developer for dynamic IT infrastructure management, virtual desktops, and cloud services. The company was founded in 2021 by merging the assets of Tionix, Digital Energy, and Skala Software, and is controlled by the RTK-TsOD group. Since December 2025, its shares have been traded on the Moscow Exchange under the ticker BAZA. The products are included in the Unified Register of Russian Software and certified by FSTEC of Russia.
Learn more about the products on the company’s website: basis.ru
erid: 2VtzqvZZCvz
Advertisement. OOO “Basis” INN 7731316059