Cisco has acquired Astrix Security to secure the API keys, OAuth tokens, and service accounts used by AI agents across the enterprise. The deal integrates NHI governance into Cisco Identity Intelligence, Duo IAM, and Splunk. This note analyzes why the acquisition addresses a structural gap in Zero Trust architectures built for human identities.
Cisco Acquires Astrix Security: NHI Security for AI Agents Read More »
Dawnguard has publicly launched a security architecture automation platform that turns secure design intent into deployable Infrastructure as Code, then continuously validates alignment in production. With $6.3M raised and a new New York office, the company is betting that shift-left security needs to move earlier than CI/CD. ECI Research examines whether the market is ready for design-time security as a category.
Dawnguard Launches Secure-by-Design Security Platform | ECI Research Read More »
Codenotary has launched AgentMon 3, an enterprise AI runtime security platform that replaces static allow-lists with adaptive behavioral policies. The platform monitors more than 5 million AI agent interactions daily and is now available on AWS Marketplace. ECI Research analyst commentary explains why behavioral runtime monitoring is becoming a baseline enterprise requirement.
Codenotary AgentMon 3: Adaptive AI Agent Runtime Security Read More »
FINOS and the Linux Foundation have announced the AI Fund, Project OSERA, and FDC3 3.0, targeting AI governance, supply chain remediation, and cross-industry interoperability in financial services. ECI Research examines what these coordinated moves mean for ITDMs and developers inside regulated institutions. The initiatives signal a shift from firm-level AI policy to mutualized, open governance infrastructure.
FINOS AI Fund and OSERA: Open Source AI Governance for FSI Read More »
Baz announced Baz Planner, a pre-code gateway that intercepts AI-generated code at the planning stage to eliminate vulnerabilities before they are written. The company also closed a $9M seed extension, bringing total funding to $17M. ECI Research identifies AI code governance as the top enterprise security investment priority heading into 2026.
Baz Planner Targets AI Code Governance at the Source Read More »
Arcova has announced an end-to-end data center development offering that consolidates site selection, engineering, compliance, and operations under one accountable team. The company claims an 18-month reduction in development timelines and elimination of $60–200M in transition costs generated by fragmented vendor coordination. ECI Research analyst coverage examines why the organizational model, not the technology, is the real bottleneck.
Arcova Tackles Data Center Development Delays With End-to-End Model Read More »
Google’s OSPO presented its open source strategy to an external developer council, framing open source as a deliberate competitive lever rather than altruism. ECI Research analyzes the A2A protocol bet, supply chain sustainability risks, and what enterprise ITDMs and developers should take away. The governance frameworks being written today will shape open source contribution norms for the next decade.
Google’s Open Source Strategy in the AI Era | ECI Research Read More »
Black Kite’s 2026 State of Financial Services report documents a simultaneous rise in direct ransomware attacks and vendor ecosystem vulnerabilities. Q1 2026 ransomware incidents jumped 76% year-over-year while critical CVEs across finance-concentrated vendors rose 387%. ECI Research examines what this two-front threat means for ITDMs and security teams.
Financial Services Faces a Two-Front Cyber Threat in 2026 Read More »
IBM and Red Hat have announced Project Lightwell, a $5 billion initiative pairing 20,000 engineers with AI to secure enterprise open source software at scale. The clearinghouse model targets supply chain vulnerabilities across independent libraries, AI frameworks, and data streaming platforms. ECI Research examines what this means for ITDMs and developers navigating an increasingly fragmented open source security landscape.
IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale Read More »
GitLab 19.0 addresses the AI Paradox: code generation has accelerated, but credential governance, merge workflows, and pipeline security have not kept pace. The release embeds agentic capabilities and unified secrets management directly into the platform where teams already work. ECI Research breaks down what this means for ITDMs and developers evaluating DevSecOps platform consolidation.
GitLab 19.0: Agentic DevSecOps and the AI Paradox Read More »