RapidFort Runtime Extends Software Security into Live Production
RapidFort Runtime offers continuous CVE monitoring and tamper detection for deployed software, aiming to provide end-to-end threat elimination from pre-deployment scanning to live production.
RapidFort has launched RapidFort Runtime, a new solution designed to extend its software supply chain security (SSCS) capabilities directly into live production environments. This offering aims to provide continuous threat elimination, covering the entire lifecycle from the scanning of open-source software before deployment to ongoing monitoring for vulnerabilities and unauthorized changes in production.
RapidFort Runtime operates within an organization's production infrastructure, continuously observing deployed software. It is engineered to detect unexpected or unauthorized modifications and to proactively track newly disclosed Common Vulnerabilities and Exposures (CVEs). Upon detection, the system alerts administrators and developers to relevant security impacts and furnishes actionable recommendations for mitigation.
A key feature of RapidFort Runtime is its ability to provide granular visibility into the software landscape. It distinguishes between first-party and third-party components, generates a precise Runtime Bill of Materials (RBOM), and offers verifiable evidence of the software and processes actively running. The solution integrates seamlessly into existing CI/CD pipelines without necessitating code modifications, thereby bridging the gap between pre-production security checks and real-time runtime protection.
When combined with RapidFort's curated catalog of open-source software and hardened images, which have undergone deep-binary malware analysis by ReversingLabs, RapidFort Runtime empowers organizations to validate both the integrity of software entering production and its state once deployed. This dual approach ensures that what is deployed remains unaltered and secure.
"Maintaining an accurate, real-time inventory of what is actually executing in production has been a consistent audit and compliance hurdle," stated Sangram Dash, CISO and VP of IT at Sisense. "RapidFort Runtime’s ability to generate a precise, dynamic RBOM provides us with undeniable evidence of our software’s state. We can now verify integrity and confirm our compliance in real-time, which is a total game-changer for our security operations."
RapidFort Runtime introduces several differentiating capabilities. It offers end-to-end continuous monitoring, addressing the issue of "production obsolescence" where software can be vulnerable immediately upon deployment due to new CVE disclosures. Its agent-based runtime profiling uses BPF/ptrace instrumentation to map system calls, network and memory usage, and process execution, providing cryptographic evidence of what is truly running. Furthermore, it provides proactive mitigation recommendations, automated RBOM generation for compliance, and integrates with independently malware-scanned software from RapidFort's catalog.
"While most software supply chain security tools stop at build-time or deployment, RapidFort continuously monitors live production environments for newly disclosed CVEs that impact deployed software," explained Rajeev Thakur, CTO of RapidFort. "By automatically correlating new vulnerabilities with running workloads, RapidFort eliminates the manual effort of tracking CVEs and determining real production exposure, enabling organizations to respond faster and with greater confidence."
The platform leverages lightweight agents employing BPF and ptrace technology to monitor software in live production environments. This approach reduces false positives and vulnerability noise compared to methods relying solely on static analysis. RapidFort Runtime offers zero-overhead integration and supports standard package managers, aligning with regulatory requirements such as NIS2 and the EU Cyber Resilience Act, and supporting standards like CIS Benchmarks and STIG validation.