An Intellyx Brain Candy Update
Since our last coverage of ReversingLabs in 2023, they have unified many threat detection, research, remediation and analysis capabilities under a new Spectra Assure platform for enterprises, which is also becoming surprisingly popular for verifying the software supply chains underpinning many other leading cybersecurity vendors and service providers.
Even in well-managed DevOps practices using IaC and automated CI/CD pipelines, the real software supply chain isn’t simply reflected in a declared SBOM (software bill of materials), it’s hidden within the ground truth of actual deployed binaries.
ReversingLabs provides an exploded view of packaged binaries, scanning millions of files daily for material risks such as secrets exposure, malware and tampering, when compared against a repository of billions of observed threat chains in the world.
Speaking of responding to global threats, the company also just introduced their new Spectra Assure Community, a free global InfoSec resource that anyone who contributes to a software supply chain can use to vet downloads from millions of open source packages out on repositories like npm, PyPi and RubyGems.
Copyright ©2024 Intellyx B.V. Intellyx is an industry analysis and advisory firm focused on enterprise digital transformation. Covering every angle of enterprise IT from mainframes to artificial intelligence, our broad focus across technologies allows business executives and IT professionals to connect the dots among disruptive trends. At the time of writing, ReversingLabs is not an Intellyx customer. No AI was used to write this article. To be considered for a Brain Candy article or event visit, email us at pr@intellyx.com.
