diff --git a/README.md b/README.md
index 5467d34..0d897f6 100644
--- a/README.md
+++ b/README.md
@@ -227,6 +227,7 @@ Testing is an essential element of a DevSecOps program because it helps to prepa
 * [ShiftLeft Scan](https://slscan.io)
 * [Snyk](https://snyk.io)
 * [SourceClear](https://www.sourceclear.com)
+* [NPM Scan](https://npmscan.com) - Real-time npm package malware scanner and supply-chain analyzer. Detects malicious scripts, obfuscation, hidden installs, abandoned maintainers, and suspicious behavior.
 
 
 ## Alerting