#United States #software security #Kirkland #Chainguard #Commercial Builds

Chainguard Launches Commercial Builds: A Leap Towards Zero-Vulnerability Software

In today's fast-paced digital landscape, the need for software security has never been more critical. Recognizing this imperative, Chainguard has rolled out the Commercial Builds initiative—a pioneering effort that aims to set a new benchmark for secure software solutions. This ambitious program is designed to assist software vendors and open source contributors in delivering products that are not only robust but are also verifiably secure, functioning without known vulnerabilities.

Meeting Industry Demands

Launching its Commercial Builds from Kirkland, Washington, Chainguard is responding to increasing demands for secure software amid growing enterprise expectations. As application development moves deeper into the AI era, maintaining security, compliance, and operational consistency remains a complex challenge for businesses. Many enterprises currently grapple with managing various Linux distributions and internal platform standards, leading to a haphazard approach in securing their software stacks. Traditions of using general-purpose base images such as Debian or Ubuntu can create operational bottlenecks as organizations find themselves compelled to harden these images and remediate vulnerabilities themselves. Such tasks often detract from core business operations.

Patrick Donahue, SVP of Product at Chainguard, articulates this challenge by stating, "Software companies are focused on building the applications their customers depend on. The distraction caused by managing hardened containers and vulnerable software can impede that mission.” Chainguard's response—eliminating this extraneous operational burden—marks a significant shift in how software security can be approached.

A Model for Future Developments

With its Commercial Builds, Chainguard intends to streamline the process of delivering software to market. The initiative extends its reliable approach, previously applied to open source containers, to commercial Independent Software Vendor (ISV) products. Through this program, Chainguard collaborates directly with ISVs by packaging their software into hardened and minimal container images that come with verified provenance, and defined CVE service-level agreements.

This means that software vendors can now shift their focus towards development, while Chainguard takes care of security provisioning, ensuring users gain access to highly secure commercial software. Noteworthy initial partners of the program include industry giants such as Azul, Elastic, Grafana Labs, and Mattermost, which symbolically emphasize the significance of this collective undertaking in establishing a new secure software standard.

Future of Secure Software Development

As enterprise needs evolve, Chainguard's Commercial Builds offer numerous advantages including simplifying regulatory requirements, reducing operational overhead, and providing gateways into more heavily regulated markets. For customers, the proposition is equally compelling; they can obtain software that is not only hardened and compliant but also includes vital support services from partnering organizations, ensuring a seamless integration into their operational frameworks.

Each partner reflects a commitment towards secure-by-default solutions often required in today's complex cyberspace. For example, GitLab focuses on helping software teams deploy secure products faster, while Expanso emphasizes securing data pipelines directly at their source, a critical requirement for data integrity.

Other partners in the initiative similarly endorse the ethos of embedding security throughout the entire software stack. They highlight the competitive advantage achieved from using Chainguard’s verifiable security measures instead of expending resources chasing down vulnerabilities.

Emphasizing Trust

The ultimate goal of Chainguard's Commercial Builds is to foster an environment of trust in software systems, where end-users can operate confidently knowing their applications are fortified against security threats. George Gould of Azul confirms this sentiment by stating, "Enterprises shouldn't have to decide between security and performance. With Chainguard's Commercial Builds, we are extending our collaboration to deliver not just trusted, but also world-class software for our customers."

As Chainguard continues to forge partnerships within the software landscape, it is clear that the path towards a secure digital future hinges on collaboration and innovation. The Commercial Builds initiative stands as a resolute commitment from Chainguard and its partners to redefine standards and prioritize proactive security in software development.

To learn more about this groundbreaking initiative and explore the capabilities of Chainguard, visit Chainguard's official website.