Vulnerability Management

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale

Application Development, Compliance, Cyber Security, DevSecOps, Open Source /

IBM and Red Hat have announced Project Lightwell, a $5 billion initiative pairing 20,000 engineers with AI to secure enterprise open source software at scale. The clearinghouse model targets supply chain vulnerabilities across independent libraries, AI frameworks, and data streaming platforms. ECI Research examines what this means for ITDMs and developers navigating an increasingly fragmented open source security landscape.

IBM & Red Hat Project Lightwell: Open Source Supply Chain Security at Scale Read More »

Google AI Threat Defense: Autonomous Security Arrives | ECI Research

Google AI Threat Defense: Autonomous Security Arrives | ECI Research

AI, Application Development, Cloud, DevSecOps, Enterprise IT Strategy, Security /

Google Cloud has launched Google AI Threat Defense, an autonomous platform designed to prioritize and remediate vulnerabilities faster than attackers can exploit them. ECI Research examines the competitive implications, the developer experience questions, and the governance gaps enterprises must close before deploying autonomous security at scale.

Google AI Threat Defense: Autonomous Security Arrives | ECI Research Read More »

PDQ Connect MSP Features: Multitenancy, Patching & Integrations

PDQ Connect MSP Features: Multitenancy, Patching & Integrations

Application Development, Enterprise IT Strategy, Managed Services, Security /

PDQ has launched MSP-focused capabilities in PDQ Connect, including multitenant architecture, reusable deployment packages, and integrations with Freshworks, Jira, and Zapier. The update targets the margin and security challenges MSPs face when managing endpoints across multiple client environments at scale. This analysis examines the business case, competitive positioning, and what’s still missing.

PDQ Connect MSP Features: Multitenancy, Patching & Integrations Read More »

Mythos and Open Source Security: What the Panic Gets Wrong

Mythos and Open Source Security: What the Panic Gets Wrong

Application Development, Compliance, DevOps, Events, Open Source, Open Source Summit 2026, Security /

AI-powered vulnerability tool Mythos has sparked alarm across the open source community, but the fear-mongering misses the point. ECI Research breaks down the real risk, the rational response, and why upstream contribution matters more than reactive security spending.

Mythos and Open Source Security: What the Panic Gets Wrong Read More »

Outpost24 Brings AI to DAST Authentication Configuration

Outpost24 Brings AI to DAST Authentication Configuration

Application Development, Application Security, DevSecOps /

Outpost24 has launched AI-powered authentication for its Scale DAST platform, replacing script-based configuration with natural-language instructions executed by an AI agent. The move targets one of the most persistent operational barriers to authenticated scanning at scale. ECI Research analyst coverage examines the business case, competitive implications, and what security and DevSecOps teams should evaluate.

Outpost24 Brings AI to DAST Authentication Configuration Read More »

Open Source Security Becomes a Platform Requirement at KubeCon EU 2026

Open Source Security Becomes a Platform Requirement at KubeCon EU 2026

Application Development, Application Security, Cloud-Native, DevSecOps, KubeCon + CloudNativeCon EU 2026, Kubernetes, Open Source, Platform Engineering /

At KubeCon EU 2026, Minimus positioned open source security as more than a community issue. Between SBOM pressure, software supply chain risk, and the Cyber Resilience Act, enterprises are being pushed to treat dependency visibility and hardened container images as part of baseline security posture.

Open Source Security Becomes a Platform Requirement at KubeCon EU 2026 Read More »