software supply chain security

RapidFort and GitLab Deliver Hardened Container Images for Regulated Deployments

RapidFort and GitLab Deliver Hardened Container Images for Regulated Deployments

Application Development, DevSecOps /

RapidFort and GitLab have partnered to deliver continuously patched, STIG-hardened container images for regulated self-managed GitLab deployments. The offering bundles automated compliance evidence generation with near-zero CVE posture, targeting federal and defense organizations facing ATO and CMMC requirements. For engineering teams, it reframes container security as a developer productivity problem as much as a compliance one.

RapidFort and GitLab Deliver Hardened Container Images for Regulated Deployments Read More »

Open Source Summit Europe 2026: Sovereignty, Security & AI Governance

Open Source Summit Europe 2026 Wrap-Up

Cyber Security, Enterprise Software, Open Source, Open Source Summit Europe 2026 /

Open Source Summit Europe 2026 made one thing clear: open source is now a strategic foundation for enterprise AI, digital sovereignty, and software supply chain security. The challenge is that the ecosystem is innovating faster than most organizations can govern it. ECI Research examines what that means for ITDMs and developers heading into 2027.

Open Source Summit Europe 2026 Wrap-Up Read More »

RapidFort & SpaceWERX Target AI Software Supply Chain Security

RapidFort & SpaceWERX Target AI Software Supply Chain Security

Application Development, Cyber Security, Government Technology /

RapidFort and SpaceWERX held a national security-focused conference to address AI software supply chain vulnerabilities, agentic system risks, and post-quantum cryptography readiness. The event, grounded in a formal CRADA, signals a shift from policy discussion to operational implementation. ECI Research data shows FedRAMP compliance friction and inconsistent SBOM practices remain the biggest structural barriers to progress.

RapidFort & SpaceWERX Target AI Software Supply Chain Security Read More »

Open Source Sovereignty, AI OS, and Supply Chain Security: OSS Europe 2026

Open Source Sovereignty, AI OS, and Supply Chain Security: OSS Europe 2026

Application Development, Compliance, Cyber Security, Events, Infrastructure, Open Source, Open Source Summit Europe 2026 /

At Open Source Summit Europe 2026, SAP launched the Neonethos governance foundation, IBM introduced the Acridius incident response team, and OpenKylin and openEuler outlined AI-native OS architectures. Together, the session signals a structural shift in how sovereign, secure, and AI-capable open source infrastructure must be built and governed. ECI Research survey data shows that vendor lock-in and supply chain security are already top-of-mind for public sector technology decision-makers.

Open Source Sovereignty, AI OS, and Supply Chain Security: OSS Europe 2026 Read More »

RapidFort + Wiz: Closing the Gap in Software Supply Chain Security

RapidFort + Wiz: Closing the Gap in Software Supply Chain Security

Application Security, Infrastructure /

RapidFort has listed a native integration with Wiz, surfacing its curated hardened container images and evidence-backed CVE advisories directly inside the Wiz platform. The drop-in replacement model eliminates the re-testing burden that typically blocks hardened image adoption. For ITDMs and developers alike, the integration is as much a developer velocity story as it is a security one.

RapidFort + Wiz: Closing the Gap in Software Supply Chain Security Read More »

RapidFort and Trivy Cut CVE Noise in Software Supply Chain Security

RapidFort and Trivy Cut CVE Noise in Software Supply Chain Security

Compliance, Cyber Security /

RapidFort and Aqua Security have partnered to integrate RapidFort’s remediation advisories into the Trivy open-source scanner, enabling accurate reporting of near-zero CVE container images. The integration reduces scanner noise and false positives without requiring developers to own the remediation work themselves. For security and engineering teams, it means scan results that actually reflect reality at the build gate.

RapidFort and Trivy Cut CVE Noise in Software Supply Chain Security Read More »

RapidFort Eyes Federal Market With Q4 Supply Chain Security Push

RapidFort Eyes Federal Market With Q4 Supply Chain Security Push

Cloud-Native, Compliance, Cyber Security, DevOps /

RapidFort is sponsoring four major Q4 events including KubeCon and OWASP AppSec USA, while hosting a defense technology panel tied to the SpaceWERX Transition Program. The move signals a focused push into federal and air-gapped environments where software supply chain security is an acute, underserved need. ECI Research data on open-source validation and disconnected environments helps explain why the timing makes sense.

RapidFort Eyes Federal Market With Q4 Supply Chain Security Push Read More »

AI Is Breaking Open Source Trust — And Provenance Is the Fix

AI Is Breaking Open Source Trust — And Provenance Is the Fix

AI, Application Development, Open Source /

AI-accelerated development is flooding open source maintainers with unreviewed pull requests while cryptographic signing and SBOM adoption remain dangerously low. Timothy Lewis of tea.inc. argues that provenance and identity are the missing foundations of enterprise software supply chain security. ECI Research data shows that AI-generated package risk is now the top open-source security concern for 2026.

AI Is Breaking Open Source Trust — And Provenance Is the Fix Read More »

RapidFort + CrowdStrike: Closing the Container Vulnerability Gap

RapidFort + CrowdStrike: Closing the Container Vulnerability Gap

Application Development, Cloud, Cyber Security, DevSecOps /

RapidFort’s new integration with CrowdStrike Falcon Cloud Security targets the gap between vulnerability detection and remediation in Kubernetes environments. By ingesting SBOM and CVE data from Falcon and automating container image hardening, the two vendors aim to close a loop that has historically required significant manual intervention. The integration has particular relevance for federal and defense organizations operating in air-gapped environments.

RapidFort + CrowdStrike: Closing the Container Vulnerability Gap Read More »

Echo Acquires Minimus: Secure-by-Default Market Consolidates

Echo Acquires Minimus: Secure-by-Default Market Consolidates

Application Development, Cloud, Infrastructure, Marketing Strategy, Security /

Echo has acquired key technology assets from Minimus, positioning itself as the first distro-agnostic, secure-by-default software platform. The deal signals market consolidation around two players: Echo and Chainguard. ECI Research data on open source validation and AI compliance friction reveals why this category matters now.

Echo Acquires Minimus: Secure-by-Default Market Consolidates Read More »