EdgeBit

Introducing the "real-time" software bill of materials (SBOM): https://lnkd.in/gfzh9nZb EdgeBit secures your software supply chain by focusing on code that is actually running. This simplifies vulnerability management as it cuts through noise. The real-time SBOM is the brains behind the noise reduction.

EdgeBit is leaning hard into a “find, fix and merge” ethos by introducing Dependency Autofix to our security platform. Over the past year we’ve worked with an amazing group of customers to secure their supply chains through vulnerability tracking, SBOM generation and proactive protection before code merges. It’s clear from these efforts and discussions with many security leaders that our industry needs more focus on?fixing vulnerabilities?rather than just detecting them. With Dependency Autofix, we aim to do just that. Read more: https://lnkd.in/eUkSyD4d

Fact: Over 1/3rd of JS deps don't do semver correctly – yikes. Excited to chat about Javascript/Typescript security with folks at Netlify Compose! See you Oct 2nd!

Great connecting with everyone at OWASP AppSec Days Pacific Northwest Conference! This was our second OWASP event and each one is stellar, with a unique vibe based on size and location. We'll be back to both AppSecNW and Global AppSec DC!

Trend: starting out your first SOC2 with AWS Inspector...then coming to realize it's shortcomings – lacking app & developer workflow context and little tuning/configurability. Our pathway to fix this: https://lnkd.in/e24-5Qtx

EdgeBit now supports syncing workloads from ECS in addition to existing EKS, Kubernetes, EC2 and other Linux workloads. Runtime context is the only way to understand your risk *right now* and powers a highly automated security program. Read more: https://lnkd.in/e3NHqwM2

We’ve partnered with Vanta to give EdgeBit customers greater context and increased automation around vulnerability management in their compliance programs. More on the blog or log in to Vanta or EdgeBit to get started. https://lnkd.in/eAXWDr6u

We're looking for a Graduate-level Software Engineering Intern to join the team this summer to focus on code analysis. Ideal candidates have a focus or concentration in programming language theory or compiler construction. Head over the careers page for more: https://lnkd.in/ehNH8Zqc

EdgeBit has achieved SOC2 Type II. Accordingly, we've updated our security page with more detail about our policies. We practice what we preach – least privileged access, quick to react to security vulnerabilities and encryption everywhere: https://lnkd.in/ecMHUdQX Our responsible disclosure policy is also outlined for folks to reach out to our team.

Don't like reading papers? Learn about SBOM enforcement with Linux & eBPF in video form:?https://lnkd.in/ey6bPnfT Read the paper here:?https://lnkd.in/gg5KcwqB