#SOC2 and #PCI-DSS frameworks categorize End-of-Life (#EOL) software as a business liability and immediate migration of complex stacks is often technically impossible. Josh Bressers (Anchore) and Mike Morgan (HeroDevs) will d... https://go.anchore.com/solve-the-end-of-life-trap-herodevs-anchore.html

Stop chasing a "zero CVE" dashboard. In 2026, the real winners won't be the ones with the fewest vulnerabilities, they'll be the ones with the fastest upgrade engines. We break down the new playbook for supply chain security: https://anchore.com/blog/no-crystal-ball-but-2026-directions/

"Transparency is the path to minimizing risk." Whether it's a satellite or a financial app, you can't mitigate what you can't see. Kate Stewart (@linuxfoundation.org) breaks down the future of system-level visibility on the Anchore blog. https://anchore.com/blog/the-s-in-sbom-is-for-system/

We treat source code and containers as untrusted until explicitly verified. In a Zero Trust world, confidence isn't assumed, it's proven 🛡️ Read how Chadd Owen maps the 7 Pillars of Zero Trust to actionable security: https://anchore.com/blog/anchore-enterprise-powers-dow-zero-trust/ #ZeroTrust

False positives killing your team's productivity? 😵‍💫 Anchore Secure gives you signal, not noise 📡 https://anchore.com/platform/secure/ #SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps

Supply chain attacks ↗️ 742% in 2023 Your traditional security stack wasn't built for this fight. SBOM-first architecture changes everything ⚡ https://anchore.com/platform/ #SoftwareSupplyChain #SBOM #CyberSecurity

Shift-left compliance checking ⬅️ Catch violations before deployment, not during audits 🛡️ https://anchore.com/platform/enforce/ #SoftwareSupplyChain #SBOM #CyberSecurity #Compliance

FedRAMP compliance in weeks, not months ⚡ Ready-to-deploy policy packs for instant compliance feedback 📋 https://anchore.com/platform/enforce/ #SoftwareSupplyChain #SBOM #CyberSecurity #Compliance

Tired of compliance being a roadblock? Join us on Sept... #FedRAMP, #PCIDSS, #HIPAA, #SOC2 https://events.chainguard.dev/02c6031d-d65b-417d-b62d-858f53c144f5/?utm_medium=referral&utm_source=anchore&utm_campaign=FY26-GL-LW-ChainguardxAnchoreWebinar2025#FedRAMP#PCIDSS#HIPAA#SOC2#DevSecOps #Cybersecurity #SupplyChainSecurity

Zero-day investigations rely on historical SBOM data. Will you be ready when threats require next-gen SBOMs you never collected? Anchore Enterprise 5.20 = SPDX 3.0 storage now. ➡️ https://anchore.com/blog/anchore-enterprise-is-now-spdx-3-ready/ #SBOM #SupplyChainSecurity

Zero-day incidents like Log4Shell highlight the need for a better way to respond. This on-demand webinar explains how an SBOM-powered approach helps go from discovering a new vuln to creating a remediation list in minutes. https://go.anchore.com/rapid-incident-response-with-sboms/ #SBOM

How did Syft hit 50M downloads? By leading the curve on tech like AI security 🚀 New support for GGUF format means you can finally generate (S/AI)BOMs for LLMs. Dan Nurmi explains how we keep you at the forefront of the frontier. https://anchore.com/blog/syft-grype-grant-50mill-downloads/

"Source code is to build artifacts as data sets are to AI models." Kate Stewart (@linuxfoundation.org) explains why you can't trust your AI if you don't know what trained it. Read why the "S" in SBOM is standing for System: https://anchore.com/blog/the-s-in-sbom-is-for-system/

⚓ #WEST2026 starts tomorrow! See how Anchore drives DevSecOps velocity for Black Pearl (Navy) & Platform One. We automate NIST 800-53 checks to secure the software supply chain. 📅 Book a demo: https://schedule.qualified.com/9t8Te5B#WEST2026 Or visit @Carahsoft booth #2341 (Wed).

Stop checking boxes and start building trust. 🛡️ "Establishing trust starts with verifying the provenance of OSS code and validating supplier SBOMs." At enterprise scale, you can't trust what you can't verify. https://anchore.com/blog/the-death-of-manual-sbom-management-and-an-automated-future/

Anchore SBOM Score = CVSS + EPSS + KEV status 📊 Because not all vulnerabilities are created equal ⚠️ https://anchore.com/platform/sbom/ #SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps

MCP is having a moment. @josh.bressers.name wanted to know: what are we actually shipping? 9,000 vulns 263 critical findings 36K+ NPM packages Outdated base images Not fear-mongering—just data-driven real... https://anchore.com/blog/analyzing-the-top-mcp-docker-containers/ #MCP #ContainerSecurity

Scale-out architecture for web-scale environments 📈 Because your containers don't wait for security scans ⏱️ https://anchore.com/platform/secure/ #SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps

For security engineering leaders: A detailed guide to the FedRAMP authorization process. Learn about the framework, roles, & a structured approach to achieving compliance. Essential for SaaS/PaaS/IaaS providers targeting the public sector. https://get.anchore.com/unlocking-the-federal-market/

@josh.bressers.name scanned 161 MCP containers. Found 9k vulnerabilities. 263 were critical. "Software ages like milk, not wine." His analysis breaks down what's actually being deployed in the MCP ecosystem and what to do about it. https://anchore.com/blog/analyzing-the-top-mcp-docker-containers/

"Bring Your Own SBOM" sounds simple... Until you try to manage thousands of them 📊 Scale is everything 📈 https://anchore.com/platform/sbom/ #SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps

Stop guessing what "GPL-ish" means. Grant groups licenses by risk so you can approve/deny in seconds. One list, not fifty rules. 👉 https://anchore.com/blog/grants-release-0-3-0-smarter-policies-faster-scans-and-simpler-compliance/ #OpenSource #SupplyChainSecurity #Compliance #DevSecOps

"Trust" is a vulnerability 🚫 That's why we verify every single component against strict policy-as-code before it touches the network. See how Anchore Enterprise powers the DoW's Zero Trust strategy. https://anchore.com/blog/anchore-enterprise-powers-dow-zero-trust/ #ZeroTrust #DoD

The door to DoD contracts is open, but the price of admission is transparency. 🚪🔐 If you don't have the compliance artifacts, you don't get the invite. Read the full analysis by @jonoberg.com: https://anchore.com/blog/dod-swft-initiative-and-promise-of-cato-fulfilled/

50 MILLION downloads and counting! 📈 Dan Nurmi, Anchore Co-founder & Chief Research Officer, dives into what this milestone means for the Anchore OSS community and the future of Syft, Grype, and Grant. Read the full story: https://anchore.com/blog/syft-grype-grant-50mill-downloads/

Why guard the castle gates if the threat is already inside? 🏰 Stop focusing solely on the perimeter. It's time to secure the workload itself. Anchore's Chadd Owen breaks down how to protect the software layer. https://anchore.com/blog/anchore-enterprise-powers-dow-zero-trust/ #ZeroTrust #DoD

🚨 Final call for #WEST2026 meetings! We're at @Carahsoft Booth #2341 (Wednesday only) demoing air-gapped security & automated compliance. Don't let manual RMF checks slow down the mission. Secure your 1:1 slot: https://schedule.qualified.com/9t8Te5B

Don't fall for the CMMC trap. 🚫 Securing your office network won't save you if your product fails SWFT validation. You need both to win the contract. @jonoberg.com: clarifies the critical difference in our latest blog. https://anchore.com/blog/dod-swft-initiative-and-promise-of-cato-fulfilled/

@josh.bressers.name cuts through the complexity: "Your infrastructure could be a container image... how do you even start to understand what's inside?" Stop guessing. Start using SBOMs. 💡 https://anchore.com/blog/sbom-is-an-investment-in-the-future/

CRA demands SBOMs stored for 10 years. PCI-DSS 4 requires scans every 3 months minimum. Compliance isn't annual anymore—it's continuous. @josh.bressers.name explains why your DevOps team already knows how to solve this problem: https://anchore.com/blog/compliance-isnt-an-annual-ritual-anymore/

If you write code, buy software, or run apps (so... everyone in 2025), everything you know about software development is changing. The "move fast and break things" era is now "move fast and document everything." What's your compli... https://anchore.com/blog/navigating-the-new-compliance-frontier/

SBOM-first isn't just a buzzword—it's the architecture that makes continuous security actually possible 🔄 Feel the difference ⚡ https://anchore.com/platform/ #SBOM #CRA #SoftwareSupplyChain #Compliance

Still relying on Excel spreadsheets for compliance? The DoD has moved the goalposts from static checklists to continuous, automated security evidence. @jonoberg.com breaks down the new operational necessity of SWFT. https://anchore.com/blog/dod-swft-initiative-and-promise-of-cato-fulfilled/

Don't just pass your ATO today. Secure against the zero-day discovered tomorrow. 🛡️ Discover how the Navy uses Anchore for continuous SBOM-based rescanning to track risks in deployed code. ft. Brian Thomason & Michael Simmons https://anchore.com/blog/how-raise-2-0-is-transforming-navy-devsecops/

Secure your mission-critical software supply chains🛡️ At #WEST2026, we're showing the tech behind Platform One, Black Pearl & Iron Bank. We're booking private demos for our SBOM & vuln. scanning solution. Tues/Wed slots are filling up! 🗓️ Book a demo: https://schedule.qualified.com/9t8Te5B

Open source maintainers: drowning in a sea of "good first issues" that never get picked up? You're not alone. It's a contributor time-shortage problem. Our Dir of DevRel @popey.me wondered if an AI could help. So ... https://anchore.com/blog/can-an-llm-really-fix-a-bug-a-start-to-finish-case-study/

2 weeks or 18 months? ⏱️ The choice between the SWFT initiative and legacy RMF is about staying eligible for FY26 awards. @jonoberg.com explains why the SWFT is the only path forward for modern software vendors. https://anchore.com/blog/dod-swft-initiative-and-promise-of-cato-fulfilled/

Heading to #WEST2026? ⚓ Don't let compliance slow down the mission. See how we automate NIST & enable cATO for Black Pearl (Navy), Platform One & Iron Bank. Book a 1:1 with our experts to discuss securing your software factory: https://schedule.qualified.com/9t8Te5B

That SSH key you thought was safe? 🔑 "We also detect leaked secrets...not that anybody in your organization would do this…but companies have been known to." — Brian Thomason See how Anchore catches the mistakes ... https://anchore.com/blog/how-raise-2-0-is-transforming-navy-devsecops/ #DevSecOps

False positives killing your team's productivity? 😵‍💫 Anchore Secure gives you signal, not noise 📡 https://anchore.com/platform/secure/ #SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps

HUGE NEWS! 📣 The "father of SBOM," @allanfriedman.bsky.social, is joining Anchore as a Board Advisor! We sat down with him to discuss the future of #SoftwareSupplyChainSecurity and what comes after SBOM.... https://anchore.com/blog/anchore-welcomes-sbom-pioneer-dr-allan-friedman-as-board-advisor/

Supply chain attacks ↗️ 742% in 2023 Your traditional security stack wasn't built for this fight. SBOM-first architecture changes everything ⚡ https://anchore.com/platform/ #SoftwareSupplyChain #SBOM #CyberSecurity

"The format doesn't really matter... It's really about the content." We hosted @stevespringett.bsky.social, Chair of the CycloneDX WG, to discuss why the industry needs to stop fighting format wars and st... https://anchore.com/blog/4-lessons-on-future-of-software-transparency-with-steve-springett/

"Bring Your Own SBOM" sounds simple... Until you try to manage thousands of them 📊 Scale is everything 📈 https://anchore.com/platform/sbom/ #SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps

Stop waiting for your ATO. ⏱️ With RAISE 2.0, applications can inherit the authorization of the platform they run on. Michael Simmons and Brian Thomason explain how this shifts deployment times from months to days... https://anchore.com/blog/how-raise-2-0-is-transforming-navy-devsecops/ #DevSecOps

Tired of vague security alerts? 🛑 Knowing you have a vulnerability isn't enough. You need the version, the severity, and the fix. See how we deliver actionable intelligence (not just noise) in our latest p... https://anchore.com/blog/how-anchore-vulnerability-feeds-keep-you-secure/ #sbom #secops

"It's hard to know what to fix in your software…if you don't know what's in your software." 🛑 Brian Thomason explains why the US Navy prioritizes high-fidelity #SBOMs as the foundation of every security check. Read the full... https://anchore.com/blog/how-raise-2-0-is-transforming-navy-devsecops/

We ingest. We correlate. We curate. You remain secure. 🛡️ Your team shouldn't have to be data engineers to stay safe. Let us handle the heavy lifting. Read our deep dive into Anchore Data ... https://anchore.com/blog/how-anchore-vulnerability-feeds-keep-you-secure/ #vulnerabilitymanagement #sbom

"Automate or not?" is the wrong question. 🚫 The right question: "How can we make our pipeline set and forget?" Manual SBOM management is a dead end. See how to scale your security without scaling your headcount: https://anchore.com/blog/the-death-of-manual-sbom-management-and-an-automated-future/

Shift-left compliance checking ⬅️ Catch violations before deployment, not during audits 🛡️ https://anchore.com/platform/enforce/ #SoftwareSupplyChain #SBOM #CyberSecurity #Compliance