DEVOPSdigest

AppViewX and Fortanix announced a partnership to offer cloud-delivered secure digital identity management and code signing.

Together the companies make it easy to address critical enterprise security challenges with comprehensive, robust and scalable platforms for certificate lifecycle management automation and code signing.

“The collaboration between AppViewX and Fortanix not only addresses the immediate security needs of enterprises but also ensures a seamless and pure SaaS deployment of machine identity management and secure code signing solutions,” said Ravishankar Chamarajnagar, Chief Product Officer at AppViewX. “This synergy provides joint customers with a unified, scalable, and efficient approach to safeguard their digital assets, significantly enhancing their security posture and operational efficiency in an increasingly complex cyber landscape”.

By combining the AppViewX Digital Trust Platform and Fortanix Data Security Manager (DSM), both companies complement their current offerings for enterprise organizations via powerful SaaS solutions that empower DevOps, CloudOps, SecOps and application teams to help solve two critical cybersecurity use cases:

- Machine identity management – Organizations are struggling to manage the massive increase of machine identities across complex hybrid multi-cloud environments. Together AppViewX and Fortanix simplify and streamline this process with a fully automated and secure certificate lifecycle and key management solution.

- Software Supply Chain Security – While code signing is an important component of ensuring software supply chain security, recent mandates from the CA/Browser Forum for securely storing code signing private keys is disrupting DevOps processes. AppViewX and Fortanix are offering an end-to-end SaaS solution that simplifies secure code signing and meets CA/Browser Forum requirements.

The AppViewX Digital Trust Platform includes AppViewX CERT+, AppViewX PKI+, and AppViewX KUBE+, for automating PKI and certificate lifecycle management across complex hybrid multi-cloud environments, and AppViewX SIGN+ for simplifying secure code signing. AppViewX maintains a versatile stance, being entirely agnostic to both Certificate Authorities (CAs) and Hardware Security Modules (HSMs), ensuring unparalleled flexibility and integration capabilities.

Fortanix DSM provides full lifecycle key management and cryptography services across hybrid and multi-cloud environments, simplifying provisioning and management while enhancing control of encryption keys. DSM's REST APIs enable integration of the code signing processes with existing developer tools, so keys and certificates can be accessed without delays or disruptions. Granular control options for signings can be used throughout the different stages of the development cycle, with keys and certificates kept safe in natively integrated FIPS 140-2 Level 3 HSMs. Audits can now be simplified with tamper-proof logs to help organizations track the usage of their keys and certificates, cryptographic strength, and all code-signing activities.