Developing concrete processes and controls to secure your organization's software supply chain can absorb massive amounts of time and resources without guaranteeing significant security improvements. Enter VIPERR, an actionable software supply chain security framework developed by Anchore, synthesizing lessons learned from supporting the most challenging software supply chains across government agencies and the defense industrial base. Join An...

The persistence of nation-state actors has introduced a threat to America’s cybersecurity landscape that has never been seen before. Ample countermeasures have been prescribed through various White House, DoD, and CISA guidance that places responsibility on government and private industry to follow these new guidelines for the development of secure software. As we turn the corner toward the close of the federal fiscal year and begin cybe...

The NIST Secure Software Development Framework , or SSDF, has 40+ controls to help ensure secure software development with companies that do business with the government. However, compliance can feel daunting if you don't know where or how to start. This webinar will explain what SSDF is and why it's more of a journey than a simple checking of the box. Join us for a conversation with Josh Bressers, Vice President of Security, and Paul Novarese...

In today's world, federal agencies need impeccable situational awareness of all software, including open source components and third party dependencies. Iron Bank is a program within the Department of Defense (DoD) that is paving the way for transparency into applications. With the increased rise in standards of Software Bill of Materials (SBOM) and the utilization of processes and procedures, it is critical for agencies to have supreme situat...

With the increase of high-profile breaches, it is becoming clearer that compliance does not equal security. And while most development teams want a secure software development lifecycle, the increasing pressure to get to market faster means check the boxes - and no more. Combining the top two de facto standards - the development power of GitLab and the federal container-scanning capabilities of Anchore - this easy-to-use integration will help...