Compliance

Dawnguard Launches Secure-by-Design Security Platform | ECI Research

Dawnguard Launches Secure-by-Design Security Platform | ECI Research

Application Development, Cloud-Native, Compliance, Security /

Dawnguard has publicly launched a security architecture automation platform that turns secure design intent into deployable Infrastructure as Code, then continuously validates alignment in production. With $6.3M raised and a new New York office, the company is betting that shift-left security needs to move earlier than CI/CD. ECI Research examines whether the market is ready for design-time security as a category.

Dawnguard Launches Secure-by-Design Security Platform | ECI Research Read More »

Codenotary AgentMon 3: Adaptive AI Agent Runtime Security

Codenotary AgentMon 3: Adaptive AI Agent Runtime Security

AI, Application Development, Compliance, Enterprise Software, Machine Learning, Security /

Codenotary has launched AgentMon 3, an enterprise AI runtime security platform that replaces static allow-lists with adaptive behavioral policies. The platform monitors more than 5 million AI agent interactions daily and is now available on AWS Marketplace. ECI Research analyst commentary explains why behavioral runtime monitoring is becoming a baseline enterprise requirement.

Codenotary AgentMon 3: Adaptive AI Agent Runtime Security Read More »

VDI Modernization: Patching Gaps and Security Risk in 2026

VDI Modernization: Patching Gaps and Security Risk in 2026

Application Development, Compliance, Infrastructure, Security /

The 2026 State of VDI Survey from Recast, Nerdio, and VMblog finds virtual desktop infrastructure firmly in active modernization, not retirement. Only 34% of VDI administrators are confident patches are applied on time, while over half cite lifecycle management as a top operational burden. ECI Research analyst commentary examines what this means for IT security strategy and the vendor landscape.

VDI Modernization: Patching Gaps and Security Risk in 2026 Read More »

ORC Learning Hub: Preparing Open Source Teams for CRA Compliance

ORC Learning Hub: Preparing Open Source Teams for CRA Compliance

Application Development, Compliance, DevOps, Open Source, Security /

The Eclipse Foundation and ORC Working Group have launched the ORC Learning Hub, a free modular training platform helping developers, maintainers, and security teams prepare for the EU’s Cyber Resilience Act. With the first CRA obligations taking effect in September 2026, the initiative addresses a critical gap in role-specific compliance education for open source software supply chains. ECI Research analysts assess what this means for ITDMs and engineering teams navigating the new regulatory landscape.

ORC Learning Hub: Preparing Open Source Teams for CRA Compliance Read More »

FTZ Software Gaps Are Costing Enterprises Millions | ECI Research

FTZ Software Gaps Are Costing Enterprises Millions | ECI Research

Application Development, Compliance, Supply Chain /

A new survey of 301 enterprise trade and compliance executives finds that 67% of FTZ users had negative audit findings in the past 11 months, and 87% report direct financial harm from inadequate FTZ software. ECI Research examines why fragmented toolchains are the root cause and why AI adoption requires a consolidated data foundation first. The investment case for FTZ platform modernization is no longer about future capability — it’s about stopping current-period losses.

FTZ Software Gaps Are Costing Enterprises Millions | ECI Research Read More »

Cequence Intent Graph: Bot Defense Built for Agentic AI

Cequence Intent Graph: Bot Defense Built for Agentic AI

AI, Application Development, Automation, Compliance, Security /

Cequence Security has launched Intent Graph and Biometric Check, two capabilities designed to replace client-side bot detection with behavioral modeling and hardware-bound cryptographic verification. The move targets the growing gap between traditional bot defense architectures and the realities of MCP-based agentic commerce. ECI Research analysis examines what this means for security teams and developers building agent-integrated workflows.

Cequence Intent Graph: Bot Defense Built for Agentic AI Read More »

Pure Accelerate 2026: Storage-Layer Cyber Resilience

Pure Accelerate 2026: Storage-Layer Cyber Resilience

Application Development, Cloud, Compliance, Cyber Security, Events, Pure Accelerate 2026 /

Pure Storage used Accelerate 2026 to position its storage platform as an active participant in enterprise cyber defense, not just a recovery tool. SafeMode immutability, Fusion Fleet Management, and integrations with CrowdStrike and Splunk form the core of a layered resilience architecture. ECI Research examines what this means for ITDMs facing wiper attacks and agentic AI governance challenges.

Pure Accelerate 2026: Storage-Layer Cyber Resilience Read More »

The $3.5B Imposter Scam Crisis: A Data Governance Wake-Up Call

The $3.5B Imposter Scam Crisis: A Data Governance Wake-Up Call

Application Development, Compliance, Enterprise IT Strategy, Security /

The FTC reports Americans lost $3.5 billion to imposter scams in 2025, nearly triple 2020 losses. ECI Research analyst take: the crisis traces back to enterprise PII governance failures across sprawling multi-cloud environments. Here’s what IT decision-makers and developers need to do about it.

The $3.5B Imposter Scam Crisis: A Data Governance Wake-Up Call Read More »

Keyfactor Trust Control Plane: Unified Machine Identity Management

Keyfactor Trust Control Plane: Unified Machine Identity Management

AI, Application Development, Compliance, Security /

Keyfactor has announced the Trust Control Plane, a unified operating model for machine identities and cryptographic infrastructure. The platform consolidates fragmented point tools into a continuous governance loop designed for AI-driven identity sprawl and post-quantum readiness. ECI Research analyst commentary examines what this means for ITDMs, security engineers, and enterprise AI deployments.

Keyfactor Trust Control Plane: Unified Machine Identity Management Read More »

Specops AD Security Assessment: Exposing Attack Paths Before Attackers Do

Specops AD Security Assessment: Exposing Attack Paths Before Attackers Do

Application Development, Compliance, Cyber Security /

Specops has launched a fixed-price, fixed-scope Active Directory Security Assessment delivered by Outpost24’s CREST-Accredited Offensive Security Team. The engagement maps privilege escalation and lateral movement paths from a low-privileged user to Domain Admin. ECI Research analyst coverage examines the business case, technical depth, and competitive positioning of the offering.

Specops AD Security Assessment: Exposing Attack Paths Before Attackers Do Read More »