DEVOPSdigest

DigiCert, announced a partnership with ReversingLabs to enhance software security by combining advanced binary analysis and threat detection from ReversingLabs with DigiCert's enterprise-grade secure code signing solution.

DigiCert customers will benefit from improved software integrity through deep analysis that shows their software is free from known threats like malware, software implants, software tampering and exposed secrets before they securely sign it.

"DigiCert's partnership with ReversingLabs advances supply chain security through threat detection and secrets protection delivered by automated workflows that seamlessly operate within DevOps environments and CI/CD pipelines," said Deepika Chauhan, Chief Product Officer at DigiCert. "This newly combined solution protects against software-based vulnerabilities and attacks, helping organizations ensure digital trust and build confidence with their customers."

Mario Vuksan, CEO and Co-founder at ReversingLabs, said, "Every DigiCert customer needs to think about the integrity of the software they build, buy or run. Our work together will strengthen the ecosystem and provide organizations with the necessary tools to ensure the trustworthiness of their software."

Powered by ReversingLabs, threat detection within DigiCert Software Trust Manager secures the software supply chain through advanced, comprehensive detection of threats such as malware, software tampering, inclusion of secrets and certificate misconfigurations in open-source software, proprietary software, containers and release packages.

Software Trust Manager provides a single workflow that is centrally controlled across the organization. The solution also generates a comprehensive software bill of materials (SBOM) covering internally developed and third-party software, such as open-source and commercially licensed software. As attacks on the software supply chain increase, threat detection and SBOM generation are becoming increasingly important and the focus of government and industry regulations.