![](\"https:\/\/mms.businesswire.com\/media\/20260804251407\/en\/2867285\/22\/RapidFort_logoBWmain.jpg\")
<\/a>![](\"https:\/\/mms.businesswire.com\/media\/20260804251407\/en\/2867285\/21\/RapidFort_logoBWmain.jpg\")
<\/a>Unveiled in Black Hat booth No. 5704 and demonstrated publicly for the first time, RapidFort Runtime operates inside an organization\u2019s production environment continuously monitoring deployed software, detecting unauthorized or unexpected changes, and proactively tracking newly discovered CVEs. It notifies administrators and developers of relevant security impacts and provides actionable mitigation recommendations. This industry-first capability delivers top-level visibility that distinguishes between first-party and third-party software, generates a precise Runtime Bill of Materials (RBOM\u00ae), and provides evidence of the software and processes executing in production. It integrates into existing CI\/CD pipelines without requiring code changes, effectively bridging the gap between pre-production security and live runtime protection.<\/p>
Together with RapidFort curated open-source software catalog and hardened images validated through ReversingLabs deep-binary malware analysis, RapidFort Runtime enables organizations to verify both what enters production and whether deployed software remains intact once it is running.<\/p>
\u201cMaintaining an accurate, real-time inventory of what is actually executing in production has been a consistent audit and compliance hurdle,\u201d said Sangram Dash, CISO and VP of IT, Sisense. \u201cRapidFort Runtime\u2019s ability to generate a precise, dynamic RBOM provides us with undeniable evidence of our software\u2019s state. We can now verify integrity and confirm our compliance in real-time, which is a total game-changer for our security operations.\u201d<\/p>
RapidFort Runtime differentiating new capabilities include:<\/p>
- End-to-End Continuous Monitoring: Monitors live production environments to detect and address CVEs that emerge after software deployment, solving the \u201cproduction obsolescence\u201d problem where software is often \u201cborn outdated\u201d and immediately vulnerable when it hits production due to new CVE disclosures.<\/li>
- Agent-Based Runtime Profiling: Uses BPF\/ptrace instrumentation to map system calls, network\/memory usage, and process execution, providing cryptographic evidence of what is truly running.<\/li>
- Proactive Mitigation Recommendations: Beyond just detection, the platform notifies administrators of new relevant security impacts and offers actionable mitigation recommendations to fix them in live environments.<\/li>
- Automated Runtime Bills of Materials Generation: Continuously produces dynamic RBOMs for audit-ready compliance.<\/li>
- Curated, Independently Malware-Scanned Software: Integrates with the RapidFort extensive catalog of curated open-source libraries and hardened container images, validated through ReversingLabs deep-binary malware analysis, to reduce the risk of compromised or unverified software reaching production.<\/li>
- Runtime Tamper Detection and Integrity Monitoring: Establishes a verifiable baseline of approved software and continuously detects changes to packages, binaries, libraries, processes, and runtime behavior, providing evidence of what changed and where the change occurred.<\/li><\/ul>
\u201cWhile most software supply chain security tools stop at build-time or deployment, RapidFort continuously monitors live production environments for newly disclosed CVEs that impact deployed software,\u201d said Rajeev Thakur, CTO of RapidFort. \u201cBy automatically correlating new vulnerabilities with running workloads, RapidFort eliminates the manual effort of tracking CVEs and determining real production exposure, enabling organizations to respond faster and with greater confidence.\u201d<\/p>
RapidFort Runtime leverages lightweight agents that utilize BPF and ptrace technology to continuously monitor the software running in live production environments where threats and anomalies are most critical. Only RapidFort uses BPF\/ptrace to deliver true runtime intelligence and actual evidence of execution, which drastically reduces false positives and vulnerability noise over relying solely on static analysis or scanning.<\/p>
Unlike competitors that force migration to proprietary package managers or \u201cdistroless\u201d images, RapidFort provides zero-overhead integration with drop-in replacement that supports standard package managers (pip, npm, apk). It is fully aligned with BSI TR-03183 Part 2, NIS2 (enforcement Dec 2025), and EU Cyber Resilience Act (CRA) requirements; and supports CIS Benchmarks and STIG validation, ensuring suitability for defense and mission-critical cloud-native deployments.<\/p>
Availability<\/b><\/p>
RapidFort Runtime is currently generally available. For more information visit https:\/\/www.rapidfort.com\/platform\/runtime<\/a>.<\/p>
About RapidFort<\/b><\/p>
RapidFort leads the Software Supply Chain Security market with the largest distribution of curated, genuinely open-source software. Its platform enables organizations to eliminate risk at scale through hardened near-zero CVE container images, runtime profiling, attack surface management, and the industry's first independently malware-scanned open-source images \u2013 cutting CVE exposure by up to 99.9% without code changes or platform migration. RapidFort is recognized in the inaugural Gartner\u00ae Magic Quadrant\u2122 for Software Supply Chain Security, named a Gartner\u00ae Cool Vendor\u2122, and honored as a Nutanix .Next Partner of the Year. The company is backed by Blue Cloud Ventures and Forgepoint Capital and headquartered in Sunnyvale, Calif. Visit www.RapidFort.com<\/a>.<\/p>
RapidFort, RAPIDFORT, and RBOM are registered trademarks of RapidFort, Inc. All other marks and names mentioned herein may be trademarks of their respective companies.<\/p>