software supply chain security

Docker provides a container application development platform, including Docker Desktop, Docker Hub, Docker Sandboxes, Docker Hardened Images, Docker Scout, and Docker AI Governance. The company states that 91% of the Fortune 100 run on Docker, with 20B+ pulls a month on Docker Hub and 20M+ developers building on Docker every day.

AI agent governancecontainer application developmentcontainer image hardeningMCP gateway managementmicroVM isolation

Fidelitas Defense is a cyber security company safeguarding AI, robotics, and autonomous systems from geopolitical, foreign influence, cyber, and regulatory risk. It serves National Security & Critical Infrastructure customers across sectors including autonomous vehicles, defense & government, energy & infrastructure, MedTech, and private capital & corporate development. Its AI-native risk intelligence platform, HORIZON, is delivered as SaaS on Azure Commercial and Government Clouds.

regulatory risk managementrisk detection, assessment, and remediationsoftware assurancesystem assurancetechnology diligencetraining

JFrog provides a software supply chain platform that manages binaries and artifacts from build to production, uniting DevOps, DevSecOps, DevGovOps, and AI Security on a single source of truth. Its platform products include JFrog Artifactory, Distribution, Connect, Curation, Xray, Advanced Security, AI Security, and AppTrust, serving over 80% of the Fortune 100 and 6600+ customers.

AI asset scanningartifact managementautomated remediationCI/CDCompliance & GovernanceSASTSCAsecrets detection

Kusari is a software supply chain security platform that builds a continuously updated knowledge graph of components across repos, images and pipelines, verified at source rather than inferred from finished binaries. It answers whether a vulnerability exists, where it is running, how bad it is once reachability, exploitability and blast radius are accounted for, and how to fix it. Kusari was founded by Tim Miller, Parth Patel, Michael Lieberman and Brian Miller, who co-created GUAC and SLSA and maintain in-toto attestations.

attestation generationautonomous remediation (AutoFix)blast radius tracingexploitability rankingingests scanner and SBOM tool outputreachability analysisSBOM generationsecurity review on pull requests (Inspector)