Company Research Report: BoostSecurity

Company Overview

• Name: BoostSecurity

• Mission: Enable software teams to easily ship secure software and secure their software supply chains through smart security automation that developers love.

• Founded: No information available.

• Founders: Zaid Al Hamami and Rajiv Sinha

• Key People:

• Zaid Al Hamami, Chief Executive Officer

• Rajiv Sinha, Chief Revenue Officer

• Stephan Lefrancois, VP Engineering

• Headquarters: 3 Place Ville Marie, Montreal, H3B-2E3, QC, Canada

• Number of Employees: No information available.

• Revenue: No information available.

• Known For: BoostSecurity is recognized as a developer-first DevSecOps automation platform that builds trust into the software supply chain from keyboard to production.

Products

BoostSecurity provides a DevSecOps automation platform designed for developers and CISOs:

• Product Name: BoostSecurity Platform

• Description: A developer-first zero friction DevSecOps automation platform that integrates security into the software supply chain.

• Key Features:

• Actionable Security Automation: Enables early detection and remediation of security vulnerabilities while ensuring the continuous integrity of the software supply chain.

• Detect Early: Provides visibility into security vulnerabilities in code, cloud, and CI/CD pipeline misconfigurations.

• Remediate Now: Fixes security vulnerabilities as code is written and before deployment.

• Prevent Vulnerabilities: Consistently creates and governs policies to prevent vulnerabilities.

• Govern Risk: Offers a unified control pane for visibility into risks.

• Comply: Simplifies audit, governance, and compliance reporting across the software supply chain.

• Scale: Facilitates trust-building between developers and security for scalable DevSecOps.

Recent Developments

• Poutine Launch: On April 14, 2024, BoostSecurity announced the launch of ‘poutine’, an open-source security scanner CLI designed for Build Pipelines. This tool detects misconfigurations and vulnerabilities and tracks build-time dependencies.

• Supply Chain Security Initiatives:

• BoostSecurity has been involved in the disclosure of a potential vulnerability in Chainguard's GitHub Actions workflow.

• Participation in discussions around the Supply Chain Levels for Software Artifacts (SLSA) model, focusing on Source Control Management (SCM) systems.

• Security Research: BoostSecurity continues to explore insider threats in open source projects, highlighting risks around granting repository "Write" access.

• Funding: BoostSecurity emerged from stealth with $12 million in seed funding, intended to expand development features, hire more developers, and enhance business growth.

Conclusion

BoostSecurity aims to revolutionize DevSecOps by integrating security into the software delivery process, enhancing trust, and ensuring compliance across complex environments. Their focus on automation, early vulnerability detection, and maintaining the integrity of software supply chains positions them as a crucial player in cybersecurity for modern development teams.