StackGen has partnered with Google Cloud Platform (GCP) to bring its platform to the Google Cloud Marketplace.
Synopsys announced an agreement between its Software Integrity Group and ReversingLabs that provides software development and security teams with a comprehensive software supply chain risk management solution.
Synopsys Software Integrity Group's open-source scanning capabilities of Black Duck® and ReversingLabs' Software Supply Chain Security (SSCS) Platform address complete software bill of materials (SBOM) requirements and software supply chain threats as part of their software development and continuous integration and continuous delivery (CI/CD) processes.
Black Duck software composition analysis manages the security, quality and license compliance risks that come from the use of open-source code in applications and containers. The ReversingLabs SSCS Platform complements the capabilities of Black Duck by scanning commercial third-party components for vulnerabilities, malware and instances of software tampering. These capabilities provide additional security risk insight to quickly identify malware, software tampering and anomalies inserted in software to prevent supply chain attacks before release. Synopsys is now authorized to resell the ReversingLabs SSCS Platform with Black Duck to create comprehensive, actionable SBOMs automatically and throughout the software supply chain.
"Software and security leaders are looking to Synopsys to lead in delivering complete solutions to secure the rapidly evolving software supply chain threat landscape," said Jason Schmitt, GM of the Synopsys Software Integrity Group. "ReversingLabs provides the perfect complement to our expertise in open-source risk and application security by layering in some of the most advanced security technology available for identifying and eliminating security risk from commercial and third-party software components. Together, we can produce accurate and complete SBOMs that include all sources of software in the supply chain."
"Recent software supply chain attacks on open-source and commercial third-party software require a new approach to software resilience," said ReversingLabs CEO, Mario Vuksan. "This means organizations must strive for a more holistic view of the software supply chain, a deeper understanding of complex software package composition, including open-source and commercial third-party components, and a more comprehensive view of software behavior. With Synopsys, our combined efforts will not only ensure regulatory needs are met but truly enable developers and security managers to avoid software threats and prioritize and action software risks and quality issues."
Industry News
Tricentis announced its spring release of new cloud capabilities for the company’s AI-powered, model-based test automation solution, Tricentis Tosca.
Lucid Software has acquired airfocus, an AI-powered product management and roadmapping platform designed to help teams prioritize and build the right products faster.
AutonomyAI announced its launch from stealth with $4 million in pre-seed funding.
Kong announced the launch of the latest version of Kong AI Gateway, which introduces new features to provide the AI security and governance guardrails needed to make GenAI and Agentic AI production-ready.
Traefik Labs announced significant enhancements to its AI Gateway platform along with new developer tools designed to streamline enterprise AI adoption and API development.
Zencoder released its next-generation AI coding and unit testing agents, designed to accelerate software development for professional engineers.
Windsurf (formerly Codeium) and Netlify announced a new technology partnership that brings seamless, one-click deployment directly into the developer's integrated development environment (IDE.)
The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, is making significant updates to its certification offerings.
The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, announced the Golden Kubestronaut program, a distinguished recognition for professionals who have demonstrated the highest level of expertise in Kubernetes, cloud native technologies, and Linux administration.
Red Hat announced new capabilities and enhancements for Red Hat Developer Hub, Red Hat’s enterprise-grade internal developer portal based on the Backstage project.
Platform9 announced that Private Cloud Director Community Edition is generally available.
Sonatype expanded support for software development in Rust via the Cargo registry to the entire Sonatype product suite.
CloudBolt Software announced its acquisition of StormForge, a provider of machine learning-powered Kubernetes resource optimization.