Spectro Cloud completed a $75 million Series C funding round led by Growth Equity at Goldman Sachs Alternatives with participation from existing Spectro Cloud investors.
Mend.io and HeroDevs have forged a new partnership allowing Mend.io to offer HeroDevs support for deprecated packages.
"This partnership with HeroDevs extends our proactive approach to application security by ensuring our customers' data remains secure against threats targeting end-of-life software," said Vered Shaked, Mend.io's EVP Corporate Development.
Mend.io helps developers keep their applications secure by identifying outdated and vulnerable open-source software packages and by providing recommendations for updating to newer, safer versions. But sometimes those updates don't exist because the packages are no longer supported. Fortunately, HeroDevs provides never-ending support (NES) for deprecated packages, ensuring there's always a safe, updated version available.
Aaron Frost, Founder and CEO at HeroDevs stated,"Combining Mend.io's industry-leading scanning and detection with HeroDevs' Never-Ending Support (NES) products allows engineering and security teams, for the first time in history, the ability to scan, detect, and immediately remediate known vulnerabilities in their end-of-life or deprecated open source, all in one seamless process."
By combining the power of the Mend AppSec Platform with HeroDevs NES, enterprises will benefit from:
- Increased Compliance: Compliance standards like PCI DSS, HIPAA, and GDPR require companies to take measures to protect sensitive data. Hero Devs NES adds extended support to deprecated packages that can leave applications vulnerable to attacks, putting companies out of compliance.
- Saved Time and Money: Manually patching deprecated packages can be a time-consuming and expensive process for developers. HeroDevs NES provides upgrade paths for these packages, accelerating remediation, saving costs, and freeing developers to focus on building new features and delivering value faster.
"This Mend.io-HeroDevs partnership is a model of business synergy," said Mend.io CEO and co-founder Rami Sass. "Our combined capabilities will offer customers a solution superior to what we would offer alone – ensuring that the security of software packages is always up to date even if the software itself is not."
Industry News
The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, has announced significant momentum around cloud native training and certifications with the addition of three new project-centric certifications and a series of new Platform Engineering-specific certifications:
Red Hat announced the latest version of Red Hat OpenShift AI, its artificial intelligence (AI) and machine learning (ML) platform built on Red Hat OpenShift that enables enterprises to create and deliver AI-enabled applications at scale across the hybrid cloud.
Salesforce announced agentic lifecycle management tools to automate Agentforce testing, prototype agents in secure Sandbox environments, and transparently manage usage at scale.
OpenText™ unveiled Cloud Editions (CE) 24.4, presenting a suite of transformative advancements in Business Cloud, AI, and Technology to empower the future of AI-driven knowledge work.
Red Hat announced new capabilities and enhancements for Red Hat Developer Hub, Red Hat’s enterprise-grade developer portal based on the Backstage project.
Pegasystems announced the availability of new AI-driven legacy discovery capabilities in Pega GenAI Blueprint™ to accelerate the daunting task of modernizing legacy systems that hold organizations back.
Tricentis launched enhanced cloud capabilities for its flagship solution, Tricentis Tosca, bringing enterprise-ready end-to-end test automation to the cloud.
Rafay Systems announced new platform advancements that help enterprises and GPU cloud providers deliver developer-friendly consumption workflows for GPU infrastructure.
Apiiro introduced Code-to-Runtime, a new capability using Apiiro’s deep code analysis (DCA) technology to map software architecture and trace all types of software components including APIs, open source software (OSS), and containers to code owners while enriching it with business impact.
Zesty announced the launch of Kompass, its automated Kubernetes optimization platform.
MacStadium announced the launch of Orka Engine, the latest addition to its Orka product line.
Elastic announced its AI ecosystem to help enterprise developers accelerate building and deploying their Retrieval Augmented Generation (RAG) applications.
Red Hat introduced new capabilities and enhancements for Red Hat OpenShift, a hybrid cloud application platform powered by Kubernetes, as well as the technology preview of Red Hat OpenShift Lightspeed.
Traefik Labs announced API Sandbox as a Service to streamline and accelerate mock API development, and Traefik Proxy v3.2.