#Canada #Vancouver #ActiveState #Docker #OpenSource

ActiveState Partners with Docker to Enhance Security in Containers

In a significant move aimed at securing enterprise environments, ActiveState has announced a reselling partnership with Docker, Inc. This collaboration combines Docker's Hardened Images with ActiveState's trusted open source components, presenting a unified solution for managing security risks associated with containerized applications. As the importance of security continues to rise, this partnership is set to provide enterprises with a robust approach to safeguarding their software supply chains.

The Importance of Container Security

In today’s software development landscape, containers are the preferred method for delivering applications swiftly and efficiently. They enable developers to package code along with its dependencies and configurations in a lightweight and portable manner. However, the vulnerability of these containers, especially regarding their open-source components, poses significant security challenges. ActiveState's approach focuses on addressing these vulnerabilities head-on, ensuring that security remains a priority without impeding the development process.

Abby Kearns, the CEO of ActiveState, emphasizes the importance of closing the security gap often seen in enterprise environments. "Even teams that have hardened the base are still running unverified open source on top of it. Docker secures the image. ActiveState secures what runs on it," she states. This partnership not only addresses the foundation security concerns but also extends to the layers above, effectively creating a comprehensive security net.

Collaborative Benefits for Enterprises

A Unified Supply Chain

The partnership results in a joint marketing effort where Docker and ActiveState will promote and resell their respective solutions. Enterprises can now procure both Docker’s hardened base images and ActiveState’s remediated open-source packages through a single vendor relationship. This integration simplifies the procurement process and enhances visibility across the software supply chain, allowing security teams to maintain better control over the components in use.

Provenance and Risk Management

With Docker’s Hardened Images providing over 4,000 secure-by-default images built from source, companies gain the assurance of minimal vulnerabilities. These images are designed to integrate smoothly with popular distributions like Alpine and Debian, while also bearing signature-based Software Bill of Materials (SBOMs) and adhering to SLSA Build Level 3 standards for provenance. This commitment to security is echoed within ActiveState’s offerings, which are built with the same high standards for their open-source components.

This partnership promises measurable risk reduction without slowing down development velocity—a critical factor in today’s fast-paced tech environments. The result is a streamlined process where security is integrated rather than an afterthought.

Enhanced Remediation Measures

ActiveState has noted significant metrics that could impact the effectiveness of DevSecOps teams. According to their 2026 State of Vulnerability Management and Remediation Report, a staggering 91% of DevSecOps leaders reported limited visibility into container components as their biggest security blind spot. Meanwhile, 90% acknowledged using lightly modified public images with minimal hardening.

In an era where 98% of security teams rank hardened images as a high priority, this partnership stands to bridge the gap between expected security and actual protections in place. Docker’s hardened base images meet the demand for foundation security, while ActiveState’s components secure the open-source libraries running atop. This dual-layer security strategy is expected to provide enterprises with the confidence they need to navigate the complex landscape of software vulnerabilities.

Conclusion

The reselling partnership between ActiveState and Docker plays a critical role in fostering a secure software environment. As the reliance on open source continues to grow, ensuring that these components are both trusted and verified is essential. With the combined strengths of Docker and ActiveState, enterprises can confidently build, ship, and run their applications, knowing they are protected against an increasingly complex array of threats.

Availability

The partnership is active now, allowing enterprises to connect with either company to assess their container security landscape. Ensuring a safe and trusted environment for software development is not just a technical obligation; it's a necessity for modern enterprises facing constant threats to their security protocols.