CodeSecure and FOSSA announced a strategic partnership and native product integration that enables organizations to eliminate security blindspots associated with both third party and open source code.
Rezilion announced a partnership with CircleCI to give developers the tools necessary to secure software products faster.
Deployed in minutes, the integration with CircleCI allows customers the ability to easily detect, prioritize and remediate software vulnerabilities early on in the product development lifecycle, reducing their vulnerability backlog by up to 85% and remediation timelines from months to hours.
With this integration with CircleCI, Rezilion's platform first helps DevOps teams discover all software components in their environment. Then, using granular run-time validation, Rezilion helps teams prioritize vulnerabilities that are exploitable and eliminate vulnerabilities that pose no risk, so they can focus on what matters most and remediate strategically, while saving a significant amount of time.
Through the Rezilion-CircleCI integration, customers will enjoy the following benefits:
- Reduce vulnerability backlog by 85% by eliminating un-exploitable vulnerabilities that are not loaded to memory.
- Reduce patching efforts by prioritizing what matters most in your environment thus saving developers many hours and delivering better products faster.
- Reduce remediation timelines from months to hours with seamless integration into the development workflow that allows timely attention to threats.
- A dynamic Software Bill of Materials (SBOM) that quickly provides a comprehensive view of all the software components including open source components including their loaded/unloaded status and exportable in CycloneDX format.
- VEX (Vulnerability Exploitability Exchange) export, providing a standardized format to communicate vulnerabilities and their impact with customers and regulators.
- The ability to shift left. Customers can validate vulnerabilities early on in the development process - right after the build - as part of the existing testing phase within the CI pipeline.
- Actionable insights and easy-to-interpret results. Customers can view and share reports from within the CircleCI UI that provide actionable insights for taking remediation steps.
Liran Tancman, Co-Founder and CEO, of Rezilion, said: "Our partnership is a game changer for development teams who can now prioritize and focus on vulnerabilities that pose actual risk and remediate within hours saving a lot of time while continuously delivering secure products."
Industry News
Bauplan, a Python-first serverless data platform that transforms complex infrastructure processes into a few lines of code over data lakes, announced its launch with $7.5 million in seed funding.
Perforce Software announced the launch of the Kafka Service Bundle, a new offering that provides enterprises with managed open source Apache Kafka at a fraction of the cost of traditional managed providers.
LambdaTest announced the launch of the HyperExecute MCP Server, an enhancement to its AI-native test orchestration platform, HyperExecute.
Cloudflare announced Workers VPC and Workers VPC Private Link, new solutions that enable developers to build secure, global cross-cloud applications on Cloudflare Workers.
Nutrient announced a significant expansion of its cloud-based services, as well as a series of updates to its SDK products, aimed at enhancing the developer experience by allowing developers to build, scale, and innovate with less friction.
Check Point® Software Technologies Ltd.(link is external) announced that its Infinity Platform has been named the top-ranked AI-powered cyber security platform in the 2025 Miercom Assessment.
Orca Security announced the Orca Bitbucket App, a cloud-native seamless integration for scanning Bitbucket Repositories.
The Live API for Gemini models is now in Preview, enabling developers to start building and testing more robust, scalable applications with significantly higher rate limits.
Backslash Security(link is external) announced significant adoption of the Backslash App Graph, the industry’s first dynamic digital twin for application code.
SmartBear launched API Hub for Test, a new capability within the company’s API Hub, powered by Swagger.
Akamai Technologies introduced App & API Protector Hybrid.
Veracode has been granted a United States patent for its generative artificial intelligence security tool, Veracode Fix.
Zesty announced that its automated Kubernetes optimization platform, Kompass, now includes full pod scaling capabilities, with the addition of Vertical Pod Autoscaler (VPA) alongside the existing Horizontal Pod Autoscaler (HPA).
Check Point® Software Technologies Ltd.(link is external) has emerged as a leading player in Attack Surface Management (ASM) with its acquisition of Cyberint, as highlighted in the recent GigaOm Radar report.