Developers rely on open source code and apps in their day to day work, but when the provenance of the code is unknown this creates potential weaknesses that cybercriminals can exploit. Chainguard exists to build security into the coding supply chain by making it possible for companies to enforce security policies based on auditable signatures baked into the code, and by providing a security-first set of container images with no known vulnerabilities for cloud app developers.
In the wake of huge cyber attacks like the Log4j vulnerability and Solarwinds breach, software supply chain security has been an area of major focus for startups hoping to solve problems in this sector. However, most of these focus on scanning and detection of threats. Chainguard's approach comes from the other end of the process, focusing on building security into the software itself. It was built by former Google engineers aware of software developers existing workloads, so is designed to be easily installed and integrated into existing automation systems like Terraform.
Chainguard completed a Series C funding round led by Lightspeed Ventures in 2024, minting it as a new Unicorn on the cybersecurity scene. It is using this funding to expand its go-to-market internationally and expand its Chainguard Images product.
Kirsty
Company Specialist at Welcome to the Jungle
