software composition analysis

Echo Acquires Minimus: Secure-by-Default Market Consolidates

Echo Acquires Minimus: Secure-by-Default Market Consolidates

Application Development, Cloud, Infrastructure, Marketing Strategy, Security /

Echo has acquired key technology assets from Minimus, positioning itself as the first distro-agnostic, secure-by-default software platform. The deal signals market consolidation around two players: Echo and Chainguard. ECI Research data on open source validation and AI compliance friction reveals why this category matters now.

Echo Acquires Minimus: Secure-by-Default Market Consolidates Read More »

AI Code Security: Why False Negatives Beat Hallucinations

AI Code Security: Why False Negatives Beat Hallucinations

AI, Application Development, Application Security, Machine Learning /

Sonatype CTO Brian Fox argues that AI coding tools have become more dangerous as they’ve gotten smarter—trading visible hallucinations for silent false negatives that leave vulnerable dependencies undetected. The fix requires grounding AI models in real-time dependency intelligence, not just scanning code after it’s written. ECI Research data confirms AI code governance is the top enterprise security investment priority heading into 2026.

AI Code Security: Why False Negatives Beat Hallucinations Read More »