EdgeBit

Introducing the "real-time" software bill of materials (SBOM): https://lnkd.in/gfzh9nZb EdgeBit secures your software supply chain by focusing on code that is actually running. This simplifies vulnerability management as it cuts through noise. The real-time SBOM is the brains behind the noise reduction.

Great connecting with everyone at OWASP AppSec Days Pacific Northwest Conference! This was our second OWASP event and each one is stellar, with a unique vibe based on size and location. We'll be back to both AppSecNW and Global AppSec DC!

Trend: starting out your first SOC2 with AWS Inspector...then coming to realize it's shortcomings – lacking app & developer workflow context and little tuning/configurability. Our pathway to fix this: https://lnkd.in/e24-5Qtx

EdgeBit now supports syncing workloads from ECS in addition to existing EKS, Kubernetes, EC2 and other Linux workloads. Runtime context is the only way to understand your risk *right now* and powers a highly automated security program. Read more: https://lnkd.in/e3NHqwM2

We’ve partnered with Vanta to give EdgeBit customers greater context and increased automation around vulnerability management in their compliance programs. More on the blog or log in to Vanta or EdgeBit to get started. https://lnkd.in/eAXWDr6u

We're looking for a Graduate-level Software Engineering Intern to join the team this summer to focus on code analysis. Ideal candidates have a focus or concentration in programming language theory or compiler construction. Head over the careers page for more: https://lnkd.in/ehNH8Zqc

EdgeBit has achieved SOC2 Type II. Accordingly, we've updated our security page with more detail about our policies. We practice what we preach – least privileged access, quick to react to security vulnerabilities and encryption everywhere: https://lnkd.in/ecMHUdQX Our responsible disclosure policy is also outlined for folks to reach out to our team.

Don't like reading papers? Learn about SBOM enforcement with Linux & eBPF in video form: https://lnkd.in/ey6bPnfT Read the paper here: https://lnkd.in/gg5KcwqB

Can Linux enforce that a workload's SBOM remains a truthful representation of the running app? EdgeBit authored a paper covering the research to find out. This pre-print will be published in an ACM journal but you can find more detail and background on our blog: https://lnkd.in/gg5KcwqB We're excited to continue to push state-of-the-art on runtime enforcement and moving beyond SBOMs as compliance artifacts. There are still gaps to close, as we found in the paper, but It's exciting to see SBOMs + SLSA + in-toto + eBPF come together to form a foundation to build these capabilities on.

EdgeBit is speaking all over at the end of November: - Nov 16th @ Bay Area SLSA meetup: https://lnkd.in/gKcZyPgm - Nov 17th @ RVA.js conference: https://lnkd.in/gQDYxVVt - Nov 30th @ ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses: https://lnkd.in/gbAnAGpv Hope to see you there! Come meet Eugene Yakubovich 🇺🇦, Rob Szumski and others.