EdgeBit

EdgeBit is leaning hard into a “find, fix and merge” ethos by introducing Dependency Autofix to our security platform. Dependency Autofix makes your code branches have the latest & safest set of dependencies, using AI and static analysis under the hood. edgebit.io/blog/announcing-a…

EdgeBit now supports syncing workloads from ECS in addition to existing EKS, Kubernetes, EC2 and other Linux workloads. Runtime context is the only way to understand your risk *right now* and powers a highly automated security program. More: edgebit.io/blog/sync-ecs-wor…

We’ve partnered with Vanta to give EdgeBit customers greater context and increased automation around vulnerability management in their compliance programs. More on the blog or log in to Vanta or EdgeBit to get started. edgebit.io/blog/vanta-compli…

Can Linux enforce that a workload's SBOM remains a truthful representation of the running app? EdgeBit authored a paper covering the research to find out. This will be published in an ACM journal but you can find more detail & background on our blog today edgebit.io/blog/enforcing-sb…

EdgeBit is speaking all over at the end of November: - Nov 16th @ Bay Area SLSA meetup: resources.github.com/github-… - Nov 17th @ RVA.js conf: rvatech.com/rvatech-events/r… - Nov 30th @ ACM Workshop on Software Supply Chain Offensive Research & Ecosystem Defenses: scored.dev/workshop_informat…

A "critical" vuln score is actually a CVSS score. v4 just came out, and we break it down here: edgebit.io/blog/understandin… Super excited about bringing more environmental context to scoring. CVSS has its issues, but this is a step in the correct direction.

Software inventory is still hard. Last week's curl and Rapid Reset vulns were a scramble – unless you have an up-to-date inventory and bill of materials for your apps

A security scanner detects 73 vulnerabilities. If all CVEs correspond to dormant code…how many issues do you have? 0 or 73? We used EdgeBit's tracking of base OS vulnerabilities to reverse engineer the patching practices of EKS & GKE to find out. edgebit.io/blog/base-os-vuln…

Our CEO @robszumski joined the All Aboard pod to chat about SBOMs, vulnerability management and the latest on government supply chain regulations. Do you think NIST rolled out supply chain standards correctly? Listen in for Rob's take: conductorone.com/podcast/sbo…

Solving AI dependency sprawl: layers of transitive dependencies make it challenging to understand your risk. EdgeBit prioritization based on real time risk cuts through the noise. Read how: edgebit.io/blog/ai-dependenc…

Introducing EdgeBit Components: a stream of SBOMs enriched with data & tied to running workloads. Instantly ingested from CI/CD Enriched with vuln findings, SLAs & auto resolution Mapped to active workloads Prioritization based on whats running *now* edgebit.io/blog/components-s…