Hey Mate, we at Vulert have helped many companies to do part of it, i.e., keeping their software dependencies monitored for current and upcoming vulnerabilities without any code access or installation.

Feel free to reach out if it interests you.

dawood@vulert.com