Compliance

RapidFort and Trivy Cut CVE Noise in Software Supply Chain Security

RapidFort and Trivy Cut CVE Noise in Software Supply Chain Security

Compliance, Cyber Security /

RapidFort and Aqua Security have partnered to integrate RapidFort’s remediation advisories into the Trivy open-source scanner, enabling accurate reporting of near-zero CVE container images. The integration reduces scanner noise and false positives without requiring developers to own the remediation work themselves. For security and engineering teams, it means scan results that actually reflect reality at the build gate.

RapidFort and Trivy Cut CVE Noise in Software Supply Chain Security Read More »

Eclipse Foundation Launches Sovereign AI Foundation | ECI Research

Eclipse Foundation Launches Sovereign AI Foundation | ECI Research

AI, AI Governance, Application Development, Compliance, Digital Sovereignty, Machine Learning, Technology /

The Eclipse Foundation has launched the Sovereign AI Foundation, a vendor-neutral initiative connecting 17 founding members with open source AI projects to help organizations reduce dependency risk and retain control over critical AI systems. ECI Research data shows vendor lock-in anxiety is already widespread among technology decision-makers. The initiative’s real test will come as it translates its knowledge-sharing mandate into practical, actionable guidance.

Eclipse Foundation Launches Sovereign AI Foundation | ECI Research Read More »

RapidFort Eyes Federal Market With Q4 Supply Chain Security Push

RapidFort Eyes Federal Market With Q4 Supply Chain Security Push

Cloud-Native, Compliance, Cyber Security, DevOps /

RapidFort is sponsoring four major Q4 events including KubeCon and OWASP AppSec USA, while hosting a defense technology panel tied to the SpaceWERX Transition Program. The move signals a focused push into federal and air-gapped environments where software supply chain security is an acute, underserved need. ECI Research data on open-source validation and disconnected environments helps explain why the timing makes sense.

RapidFort Eyes Federal Market With Q4 Supply Chain Security Push Read More »

Globalgig Managed AI Security: What Enterprises Need to Know

Globalgig Managed AI Security: What Enterprises Need to Know

AI/ML, Application Development, Compliance, Cyber Security, Managed Services /

Globalgig has launched a managed security bundle targeting enterprise AI, covering shadow AI exposure, agent runtime threats, and 24/7 SOC monitoring. The announcement comes as breach data shows shadow AI involvement doubling year over year. ECI Research data suggests the timing aligns with a rapid expansion of AI-assisted code in enterprise development pipelines.

Globalgig Managed AI Security: What Enterprises Need to Know Read More »

Cisco Splunk AI: Closing the Enterprise Trust Gap at Scale

Cisco Splunk AI: Closing the Enterprise Trust Gap at Scale

Application Development, Compliance, Cyber Security, Enterprise Software /

Cisco announced major Splunk AI advancements at .conf26, including on-premises AI via Cisco AI POD, real-time agent spending observability, and a multi-year AWS co-development deal. The announcements target the three barriers Cisco says block enterprise AI adoption: trust, cost, and security. ECI Research data shows compliance friction, not capability, is the primary AI adoption blocker in regulated markets.

Cisco Splunk AI: Closing the Enterprise Trust Gap at Scale Read More »

AI Disclosure Requirements: What Consumer Data Means for Enterprise Strategy

AI Disclosure Requirements: What Consumer Data Means for Enterprise Strategy

AI, Application Development, Compliance, Enterprise IT Strategy /

A new Customertimes survey of 2,000 U.S. adults finds overwhelming consumer support for mandatory AI disclosure and annual job-replacement reporting. For enterprise AI vendors and IT leaders, the findings function less as sentiment data and more as a regulatory risk map with a 24-month countdown. Companies building disclosure infrastructure now will have a structural advantage when federal legislation arrives.

AI Disclosure Requirements: What Consumer Data Means for Enterprise Strategy Read More »

VMware Explore 2026: Private AI Cloud Expands Model Choice and Agentic Security

VMware Explore 2026: Private AI Cloud Expands Model Choice and Agentic Security

Application Development, Cloud, Compliance, Infrastructure, Security, VMware Explore /

At VMware Explore 2026, Broadcom extended its Private AI Cloud strategy with an expanded validated model catalog spanning five vendors and more than 150 open-source models via vLLM. The company also announced planned Agentic Zero Trust capabilities for vDefend and Avi Load Balancer designed to discover shadow AI and secure agent transactions. ECI Research examines the architecture, the governance gaps, and what enterprise buyers should evaluate before committing.

VMware Explore 2026: Private AI Cloud Expands Model Choice and Agentic Security Read More »

EU AI Act Compliance: Why Vendor Claims Aren't Enough

EU AI Act Compliance: Why Vendor Claims Aren’t Enough

AI, AI Governance, Application Development, Compliance, Enterprise Software /

The EU AI Act creates distinct obligations for AI providers and deployers, and enterprises acting as deployers cannot rely on vendor compliance certifications to satisfy their own requirements. From embedded generative features to auto-drafted content, the exposure points are broader than most legal teams anticipate. ECI Research outlines what ITDMs and developers need to audit now.

EU AI Act Compliance: Why Vendor Claims Aren’t Enough Read More »

TransFi JARVIS: AI Compliance Platform for Cross-Border Payments

TransFi JARVIS: AI Compliance Platform for Cross-Border Payments

AI, Application Development, Automation, Compliance, FinOps /

TransFi has launched JARVIS, a proprietary AI compliance intelligence platform that unifies customer risk data across its cross-border payments infrastructure. The platform combines KYC, sanctions screening, and blockchain transaction monitoring under a single risk-profile model with human-in-the-loop decision authority. ECI Research analyzes what this means for fintech compliance strategy and competitive positioning.

TransFi JARVIS: AI Compliance Platform for Cross-Border Payments Read More »

Meta Muse Glimmer and the Agentic AI Benchmark Gap

Meta Muse Glimmer and the Agentic AI Benchmark Gap

AI, Application Development, Compliance, Enterprise Software, Machine Learning /

Meta’s Muse Glimmer is positioned as an always-on agentic model, but a 52-point spread between its general and banking-domain benchmark scores exposes a structural gap in how agentic AI performs under policy constraints. The bottleneck isn’t model intelligence; it’s retrieval architecture and data structure. Enterprise buyers in regulated industries should evaluate domain-specific benchmark performance before committing to agentic deployments.

Meta Muse Glimmer and the Agentic AI Benchmark Gap Read More »