Snyk, the industry leader in developer security, and Codenotary, pioneers in software supply chain protection, today announced a technical alliance. The alliance agreement gives the modern development organisation greater security and trust when trying to ensure that only well-known and reputable artefacts are utilised in software builds.

 

Organisations of various sizes and in all sectors use vulnerability scanners frequently to find security flaws in their software and systems. Maintaining code security early and throughout the development process has become crucial to an organization's overall security strategy given the growing emphasis on cybersecurity and the sophistication of cyberattacks. Users are now searching for vulnerabilities to exploit and patch in conjunction with code signing, Software Bill of Materials (SBOM), and runtime security.

 

“The partnership between Codenotary and Snyk is an exciting development in the field of software security,” said Moshe Bar, co-founder and CEO, Codenotary. “By combining Codenotary's expertise in software supply chain protection with Snyk's developer security solutions, the two companies can offer a more comprehensive and effective approach to securing the modern development organization.”

 

It is crucial to ensure the integrity and security of the entire supply chain as software development grows more distributed and complicated with more components and dependencies. Codenotary and Snyk can assist organisations in identifying and mitigating security issues early on and throughout the whole software development lifecycle by offering end-to-end visibility and protection.

 

“Our agreement represents a new level of collaboration between developer security and supply chain protection, highlighting the importance of a holistic approach to software security,” said Jill Wilkins, senior director, Global Alliances, at Snyk. “By integrating our technologies, our two companies can provide developers and organizations with the tools and knowledge they need to build and deploy secure software while ensuring the integrity and security of the entire software supply chain.”