Gartner continues the push for software supply chain security

“By 2025, 45% of organizations worldwide will have experienced attacks on their software supply chains, a three-fold increase from 2021.”

This is the key strategic planning assumption underlying Gartner’s brand new report by Manjunath Bhat, Dale Gardner, and Mark Horvath: “How Software Engineering Leaders Can Mitigate Software Supply Chain Security Risks”.

Bhat, Gardner, and Horvath find that there is a rapidly escalating threat to software supply chains and organizations need to protect themselves by improving the security and integrity of their software delivery process. Key focus areas include version control, secrets in code, and anomaly detection and response.

“Attackers are increasingly targeting build pipelines as an attack vector. Therefore, software engineering leaders must implement security tools to protect code integrity and prevent code tampering in the build pipeline.”

We’re excited to be named as a representative vendor for CI/CI Security and Code Integrity. We have written extensively on our capabilities to help organizations detect and prevent the SolarWinds build-time code injection attack. The Apiiro Application Risk Management platform also offers a risk-based solution to detecting and remediating Secrets in Code and detecting compromised developer identity like the Malicious Commits to the PHP Repository.

If you’d like to learn more about Apiiro’s extensive Supply Chain Security capabilities, schedule a demo today!