Vulnerability Management

Recast Tightens Endpoint Patch Management With CVE-Driven Visibility

Recast Tightens Endpoint Patch Management With CVE-Driven Visibility

Application Development, Application Security /

Recast has expanded Right Click Tools with tighter integration between application inventory, vulnerability identification, and patching across Microsoft Intune and Configuration Manager environments. The release adds ARM64 and macOS support and cites a 438% quarterly increase in tracked CVEs as the operational case for faster remediation workflows. ECI Research data on procurement preferences and security gate friction helps frame why this integration-first approach resonates with buyers.

Recast Tightens Endpoint Patch Management With CVE-Driven Visibility Read More »

Arnica Launches Agentic Penetration Testing for AI-Speed Dev

Arnica Launches Agentic Penetration Testing for AI-Speed Dev

AI, Application Development, Application Security, DevSecOps /

Arnica has launched Agentic Pen Testing, a capability that validates whether vulnerabilities are actually exploitable in live applications and routes confirmed findings directly to developer fix workflows. The product targets the growing gap between AI-accelerated code production and traditional, interval-based security testing. ECI Research data shows why the timing is right and what organizations should watch before committing.

Arnica Launches Agentic Penetration Testing for AI-Speed Dev Read More »

RapidFort + Wiz: Closing the Gap in Software Supply Chain Security

RapidFort + Wiz: Closing the Gap in Software Supply Chain Security

Application Security, Infrastructure /

RapidFort has listed a native integration with Wiz, surfacing its curated hardened container images and evidence-backed CVE advisories directly inside the Wiz platform. The drop-in replacement model eliminates the re-testing burden that typically blocks hardened image adoption. For ITDMs and developers alike, the integration is as much a developer velocity story as it is a security one.

RapidFort + Wiz: Closing the Gap in Software Supply Chain Security Read More »

RapidFort and Trivy Cut CVE Noise in Software Supply Chain Security

RapidFort and Trivy Cut CVE Noise in Software Supply Chain Security

Compliance, Cyber Security /

RapidFort and Aqua Security have partnered to integrate RapidFort’s remediation advisories into the Trivy open-source scanner, enabling accurate reporting of near-zero CVE container images. The integration reduces scanner noise and false positives without requiring developers to own the remediation work themselves. For security and engineering teams, it means scan results that actually reflect reality at the build gate.

RapidFort and Trivy Cut CVE Noise in Software Supply Chain Security Read More »

PDQ Wins Texas K–12 Endpoint Management Deal | ECI Research

PDQ Wins Texas K–12 Endpoint Management Deal | ECI Research

Application Development, Cyber Security, Public Sector Technology /

PDQ has been selected to provide endpoint management software to Texas K–12 school districts at no cost, funded through the Texas K–12 Cybersecurity Initiative. ECI Research examines why the cooperative procurement structure behind the deal is as significant as the technology itself. The agreement covers patching, software deployment, local admin removal, and EDR deployment across Windows and macOS endpoints statewide.

PDQ Wins Texas K–12 Endpoint Management Deal | ECI Research Read More »

PDQ Expands Endpoint Vulnerability Management to macOS and Six Ticketing Platforms

PDQ Expands Endpoint Vulnerability Management to macOS and Six Ticketing Platforms

Application Development, Application Security, DevSecOps, Software Development /

PDQ has extended its vulnerability management workflow to macOS devices and added ticketing integrations with Zendesk, ServiceNow, and Halo. Three new APIs allow teams to push endpoint, vulnerability, and deployment data into external systems programmatically. The release positions PDQ as a unified endpoint management and security data platform for mixed Windows and macOS environments.

PDQ Expands Endpoint Vulnerability Management to macOS and Six Ticketing Platforms Read More »

ServiceNow Autonomous Security: AI-Native Cyber Defense Analyzed

ServiceNow Autonomous Security: AI-Native Cyber Defense Analyzed

AI, Application Development, Automation, Cyber Security, Enterprise Software /

ServiceNow announced Autonomous Security, a six-solution AI-native security portfolio integrating Armis and Veza capabilities into its AI Control Tower. The platform targets the 70-tool fragmentation problem with autonomous remediation, identity governance for AI agents, and continuous compliance monitoring. ECI Research examines what it means for ITDMs and security architects.

ServiceNow Autonomous Security: AI-Native Cyber Defense Analyzed Read More »

Eclipse Foundation & OWASP Unite for CRA Open Source Security

Eclipse Foundation & OWASP Unite for CRA Open Source Security

Application Development, Compliance, Open Source, Security /

The Eclipse Foundation and OWASP have signed an MOU to strengthen open source security and support EU Cyber Resilience Act compliance. With mandatory reporting obligations taking effect September 11, 2026, the partnership targets SBOM adoption, supply chain security, and maintainer readiness. ECI Research data shows supply chain security is a top-12-month investment priority for nearly half of enterprise respondents.

Eclipse Foundation & OWASP Unite for CRA Open Source Security Read More »

Codenotary Free AI-Powered Linux Security for AlmaLinux

Codenotary Free AI-Powered Linux Security for AlmaLinux

Application Development, Open Source, Security /

Codenotary has launched a permanently free tier of its AI-powered security platform for AlmaLinux, covering up to 25 machines with full feature access. The offer includes SBOM management, CIS compliance, patch management, and AI agent monitoring. It’s a freemium land-and-expand play targeting lean ops teams with growing AI exposure.

Codenotary Free AI-Powered Linux Security for AlmaLinux Read More »

Recast Bundles Endpoint Patch Management Tools as CVE Surge Hits 341%

Recast Bundles Endpoint Patch Management Tools as CVE Surge Hits 341%

Application Development, Enterprise IT Strategy, Security /

Recast has launched a bundled offering combining endpoint remediation, third-party patching, and hardware lifecycle management in response to a 341% surge in CVEs tracked in the first half of 2026. The announcement reflects a broader shift in enterprise IT: patching is no longer a scheduled task but a continuous operational requirement. ECI Research data shows that most engineering teams spend the vast majority of their time on maintenance rather than innovation, making operational efficiency tools like this bundle a high-priority investment.

Recast Bundles Endpoint Patch Management Tools as CVE Surge Hits 341% Read More »