RapidFort has launched RapidFort Runtime, a security platform designed to extend software supply chain protection beyond development and into live production environments.
RapidFort extends security monitoring into production
The solution, RapidFort Runtime, creates an end-to-end continuous threat elimination solution from curated, independently malware-scanned open-source software before deployment to continuous CVE monitoring and tamper detection in live production environments.
Among the new capabilities are:
- End-to-end continuous monitoring: Monitors live production environments to detect and address CVEs that emerge after software deployment, solving the “production obsolescence” problem where software is often “born outdated” and immediately vulnerable when it hits production due to new CVE disclosures.
- Agent-based runtime profiling: Uses BPF/ptrace instrumentation to map system calls, network/memory usage, and process execution to provide cryptographic evidence of what is truly running.
- Proactive mitigation recommendations: Notifies administrators of new relevant security impacts and offers actionable mitigation recommendations to fix them in live environments.
- Automated Runtime Bills of Materials (RBOM) generation: Continuously produces RBOMs for audit-ready compliance.
- Curated, independently malware-scanned software: Integrates with the RapidFort extensive catalog of curated open-source libraries and hardened container images, validated through ReversingLabs deep-binary malware analysis – reducing the risk of compromised or unverified software reaching production.
- Runtime tamper detection and integrity monitoring: Establishes a verifiable baseline of approved software and continuously detects changes to packages, binaries, libraries, processes, and runtime behavior, providing evidence of what changed and where the change occurred.
Automated RBOMs support audits and compliance
The solution notifies administrators and developers of relevant security impacts and provides actionable mitigation recommendations, distinguishing between first-party and third-party software, generating an RBOM, and providing evidence of the software and processes executing in production.
“Competing Software Supply Chain Security tools look only at pre-production software and lack any analysis during actual live runtime,” said Rajeev Thakur, CTO with RapidFort. “RapidFort is the first genuinely end-to-end continuous threat elimination solution that also monitors the runtime system to determine if new CVEs have emerged that may impact the live production environment. With this new capability, the solution uniquely eliminates the human error associated with manually tracking new CVE discoveries and analyzing whether they impact live deployments.”
The RapidFort Runtime solution leverages agents that use BPF and ptrace technology to deliver true runtime intelligence and execution evidence, reducing false positives and vulnerability noise compared to relying solely on static analysis or scanning.
Channel partners gain new tooling to reduce noise and identity risks faster
For MSPs, MSSPs and other channel partners, the launch reflects a broader shift toward continuous software security rather than point-in-time vulnerability checks.
Partners managing cloud-native applications, containers and compliance-sensitive environments increasingly need visibility into what software is actually running after deployment, not just what appeared in a development scan.
RapidFort Runtime could give those providers another way to reduce vulnerability noise, document runtime activity and identify which newly disclosed CVEs pose a genuine risk to customer environments.
Its value for the channel will ultimately depend on how easily partners can integrate that intelligence into existing security operations, remediation workflows and managed compliance services.