Compliance

Red Hat Digital Sovereignty & Lightwell: EMEA Analyst Take

Red Hat Digital Sovereignty & Lightwell: EMEA Analyst Take

Application Development, Cloud, Compliance, Open Source, Security /

Red Hat’s EMEA Analyst Update advanced three strategic themes: OpenShift crossing $2B ARR, the GA of Confirmed Sovereign Support for EU customers, and the launch of Project Lightwell, a Red Hat and IBM supply chain security clearinghouse. ECI Research analysis finds the sovereignty and supply chain security plays are structurally durable, backed by regulatory mandates and a €5B engineering commitment to secure 150,000-plus open-source packages.

Red Hat Digital Sovereignty & Lightwell: EMEA Analyst Take Read More »

Argon2 Password Security: Stronger Hashing, Smarter Limits

Argon2 Password Security: Stronger Hashing, Smarter Limits

Application Development, Compliance, Cyber Security /

Specops Software has published research showing Argon2id is 451 million times slower to crack than SHA256, but a $2,100 CPU still outpaces an eight-GPU rig. The findings highlight why stronger hashing must be paired with continuous compromised credential monitoring. ECI Research data shows software supply chain security is a top enterprise investment priority for 2026.

Argon2 Password Security: Stronger Hashing, Smarter Limits Read More »

EU AI Act Compliance: Why Observability Isn't Enough for High-Risk AI

EU AI Act Compliance: Why Observability Isn’t Enough for High-Risk AI

AI, AI Governance, Application Development, Compliance, Machine Learning /

Diagrid’s Catalyst platform addresses two structural gaps in EU AI Act compliance that observability tools leave open: the inability to produce cryptographically verifiable agent records and the absence of runtime authorization controls. Built on the CNCF-graduated Dapr runtime, Catalyst targets the high-risk AI categories where regulatory exposure is greatest. With the compliance deadline extended to December 2027, the procurement window for agentic execution infrastructure is opening now.

EU AI Act Compliance: Why Observability Isn’t Enough for High-Risk AI Read More »

Isovalent Enterprise Platform 26.05: One Model for K8s, VMs, and LB

Isovalent Enterprise Platform 26.05: One Model for K8s, VMs, and LB

Application Development, Cloud, Compliance, Platform Engineering, Security /

Isovalent’s 26.05 release promotes VM networking to GA, introduces shared load balancing for tenant clusters, and advances Hubble Timescape as a policy authoring environment. The release targets platform teams running mixed infrastructure across clouds and data centers. ECI Research breaks down what matters for ITDMs and platform engineers.

Isovalent Enterprise Platform 26.05: One Model for K8s, VMs, and LB Read More »

Descope Agentic Identity Hub: AI Agent IAM Arrives

Descope Agentic Identity Hub: AI Agent IAM Arrives

AI, Application Development, Automation, Compliance, Security /

Descope has launched the Agentic Identity Hub, a dedicated identity provider for AI agents and MCP servers. The product addresses a fundamental gap in traditional IAM: AI agents need ephemeral credentials, runtime-scoped permissions, and delegation-aware audit trails that existing platforms were never designed to provide. ECI Research finds AI code governance is the #1 enterprise security investment priority for 2026, making this launch well-timed.

Descope Agentic Identity Hub: AI Agent IAM Arrives Read More »

Atos Bets on Sovereign AI Security With CrowdStrike and Microsoft

Atos Bets on Sovereign AI Security With CrowdStrike and Microsoft

AI, Application Development, Automation, Compliance, Enterprise IT Strategy, Security /

Atos’s June 2026 announcements reveal a coordinated sovereign AI strategy spanning threat management, agentic productivity, and healthcare infrastructure. ECI Research analyzes what the CrowdStrike and Microsoft partnerships mean for enterprise security buyers and the broader sovereign AI market.

Atos Bets on Sovereign AI Security With CrowdStrike and Microsoft Read More »

Dawnguard Launches Secure-by-Design Security Platform | ECI Research

Dawnguard Launches Secure-by-Design Security Platform | ECI Research

Application Development, Cloud-Native, Compliance, Security /

Dawnguard has publicly launched a security architecture automation platform that turns secure design intent into deployable Infrastructure as Code, then continuously validates alignment in production. With $6.3M raised and a new New York office, the company is betting that shift-left security needs to move earlier than CI/CD. ECI Research examines whether the market is ready for design-time security as a category.

Dawnguard Launches Secure-by-Design Security Platform | ECI Research Read More »

Codenotary AgentMon 3: Adaptive AI Agent Runtime Security

Codenotary AgentMon 3: Adaptive AI Agent Runtime Security

AI, Application Development, Compliance, Enterprise Software, Machine Learning, Security /

Codenotary has launched AgentMon 3, an enterprise AI runtime security platform that replaces static allow-lists with adaptive behavioral policies. The platform monitors more than 5 million AI agent interactions daily and is now available on AWS Marketplace. ECI Research analyst commentary explains why behavioral runtime monitoring is becoming a baseline enterprise requirement.

Codenotary AgentMon 3: Adaptive AI Agent Runtime Security Read More »

VDI Modernization: Patching Gaps and Security Risk in 2026

VDI Modernization: Patching Gaps and Security Risk in 2026

Application Development, Compliance, Infrastructure, Security /

The 2026 State of VDI Survey from Recast, Nerdio, and VMblog finds virtual desktop infrastructure firmly in active modernization, not retirement. Only 34% of VDI administrators are confident patches are applied on time, while over half cite lifecycle management as a top operational burden. ECI Research analyst commentary examines what this means for IT security strategy and the vendor landscape.

VDI Modernization: Patching Gaps and Security Risk in 2026 Read More »

ORC Learning Hub: Preparing Open Source Teams for CRA Compliance

ORC Learning Hub: Preparing Open Source Teams for CRA Compliance

Application Development, Compliance, DevOps, Open Source, Security /

The Eclipse Foundation and ORC Working Group have launched the ORC Learning Hub, a free modular training platform helping developers, maintainers, and security teams prepare for the EU’s Cyber Resilience Act. With the first CRA obligations taking effect in September 2026, the initiative addresses a critical gap in role-specific compliance education for open source software supply chains. ECI Research analysts assess what this means for ITDMs and engineering teams navigating the new regulatory landscape.

ORC Learning Hub: Preparing Open Source Teams for CRA Compliance Read More »