Top industry supply chain security experts Cory Scott and Trevor Rosen join Slim.AI's mission to help developers build secure containers faster.
LAS VEGAS, Aug. 8, 2022 /PRNewswire-PRWeb/ -- Slim.AI, the Boston-based software supply chain security company, welcomes the addition of two industry leaders in supply chain security to their board of advisors, bringing their expertise to Slim.AI's mission to help developers create, build, deploy and run their cloud-native applications more efficiently and securely.
New advisory board member Cory Scott is the chief information security officer (CISO) at Confluent where he leads the InfoSec, security engineering and data governance engineering teams for Confluent's event-streaming platform and cloud products, which include the ultra-popular Confluent Kafka software. Prior to joining Confluent, Scott served as head of security and product privacy for Google's devices and services division, and as CISO at LinkedIn. Scott has also held technical and consulting positions in the areas of vulnerability research and strategic security architecture.
"For producers of containerized software being used at any scale, there is a clear benefit from and need for a tool that would minimize the possible risk surface of containers before they're shipped to customers," explains Scott. "Vulnerability scans performed by enterprises often end up being false positives, or the fixes for the bugs get lost in the documentation. Slim.AI offers the possibility of reducing the thrash between dev and SecOps teams, both internally and between software providers and their customers. The ability to communicate what's in containers from the start and proactively address security issues is something I'm excited to work toward with Slim.AI."
New advisory board member Trevor Rosen is a staff engineering manager at GitHub, where his focus is on improving supply chain security practices and tooling for GitHub products and the open source ecosystem. He has extensive experience in DevOps and the development of penetration and offensive security tools, with a particular focus on microservices, CI/CD and the security of distributed systems. He has architected comprehensive supply chain security solutions based on Kubernetes and other cloud native tech, which are directly relevant to the Slim.AI solution. A veteran of the SolarWinds SUNBURST attack and subsequent response, Rosen is a frequent speaker at supply chain security conferences and a member of the Technical Steering Committee for the OpenSSF's popular container signing project, sigstore.
"Open Source is ubiquitous in today's world and at this point constitutes the bulk of code shipped in almost any software artifact. It must be trustworthy, and vulnerabilities need to be addressed at the earliest point in the supply chain," says Rosen. "I'm excited about Slim.AI's efforts to improve the tools available to organizations using open source, and to be a part of a future where teams can be sure they are only shipping what they need to production."
Slim.AI is a sponsor of this week's Black Hat USA in Las Vegas, where the company is sharing its supply chain security solutions with CISOs and other InfoSec executives that are interested in enterprise best practices for the highest level of security. They can be found at Booth IC84.
"The addition of Cory and Trevor to the Slim.AI advisory board is an indication of our commitment to solving the challenges of software supply chain security that every developer, security team and CISO faces," says John Amaral, CEO and co-founder of Slim.AI. "We recognize that there are challenges at each level of the software supply chain, and so we're building a team of advisors that bring top-notch expertise to the table so the use of Slim.AI is seen as an industry best practice."
About Slim.AI
Slim.AI is a developer-first solution to software supply chain security for containers. The startup helps developers create, build, deploy and run their cloud-native applications more efficiently and securely. The unique approach used by Slim.AI moves the focus on container optimization upstream in the DevOps lifecycle, giving developers the tools they need to author, manage and ship production-ready containers more effectively. More information at https://slim.ai and @SlimDevOps.
###
Media Contact
Cristin Connelly Zegers, Cathey Communications for Slim.AI, 404-931-6752, [email protected]
SOURCE Slim.AI
Share this article