Logo
Picture

ActiveState @ActiveState

ActiveState enables DevOps, InfoSec, and Development teams to improve their security posture while simultaneously increasing productivity and innovation. activestate.com Vancouver, BC Joined November 2008
  • Tweets
    15K
  • Followers
    4K
  • Following
    2K
  • Likes
    3K
ActiveState Profile Picture

ActiveState @ActiveState

3 days ago

Read more: buff.ly/IBgU7QC

ActiveState Profile Picture

ActiveState @ActiveState

3 days ago

Security debt touches 82% of organizations right now, and AI-generated code fails more often than the code your team writes by hand. That is a software supply chain problem, not a productivity story.

ActiveState Profile Picture

ActiveState @ActiveState

4 days ago

Employee Spotlight: Brandy Coulsey, our Brand and Communications Manager, keeps ActiveState's story in front of the right people at the right time. Her one word for the last 6 months? Invigorating. Happy to have you on the team, Brandy! #EmployeeSpotlight #TeamActiveState

ActiveState Profile Picture

ActiveState @ActiveState

4 days ago

The industry average time to remediate a critical CVE is upwards of 50+ days. That's not a gap. It's a documented exposure window your auditors and insurers can measure. Govern open source software at the point of ingestion so the clock never starts. read more: buff.ly/FTv3qpb #OpenSourceSecurity #SoftwareSupplyChain #CVE #CISO

ActiveState Profile Picture

ActiveState @ActiveState

5 days ago

Developers used to pick their own open source packages. Now Claude, Cursor, and Copilot pick for them. ActiveState CEO Abby Kearns on why that's rewritten the rules for the software supply chain, in FastForward: buff.ly/ffRMWb4 #SoftwareSupplyChain

ActiveState Profile Picture

ActiveState @ActiveState

6 days ago

Let's talk about the EU Cyber Resilience Act for a second. Your boss might say you've got runway. Your gut might say otherwise. Real prep starts with visibility: knowing what open source software and packages are running in your stack, having SBOMs on hand, and a plan for managing vulnerabilities as they come up. With ActiveState, you really do have runway. Talk with our team to learn how. #CyberResilienceAct #EUCRA #OpenSource #AppSec #SoftwareSupplyChain

ActiveState Profile Picture

ActiveState @ActiveState

6 days ago

FedRAMP auditors do not ask if you scanned. They ask where the software came from. Scan and pray does not answer that question. #OpenSourceSoftwareSecurity

ActiveState Profile Picture

ActiveState @ActiveState

7 days ago

@otnoxcom Exactly this. "Free" was never the same as "no obligations" and CRA formalizes what should've been true all along: every component gets an owner, evidence of what's in it, and a lifecycle someone is accountable for

ActiveState Profile Picture

ActiveState @ActiveState

2 weeks ago

Open source software is the largest liability most companies never put through a process. No procurement, no review, no signature. The obligation did not vanish. It compounded off the books, and the EU CRA clock starts September 2026. buff.ly/L7y8luk #SoftwareSupplyChain

ActiveState Profile Picture

ActiveState @ActiveState

7 days ago

“We had a scanner” is not a defensible decision. It describes a tool. After an incident, the question is who decided this component was allowed in, on what basis, and can you produce the record. buff.ly/L7y8luk #CISOAccountability #SoftwareSupplyChain

ActiveState Profile Picture

ActiveState @ActiveState

a week ago

The fix isn't a better meeting between security and engineering. It's governing open source at the point of ingestion, so the dependency an AI suggests is already vetted before it ships. #OpenSourceSoftwareSecurity

ActiveState Profile Picture

ActiveState @ActiveState

a week ago

Renaming your security program "cyber resilience" doesn't make it resilient. If you still find vulnerable open source software with a scanner after it's in your build, you rebranded the backlog. You didn't fix it. Resilience starts at ingestion, not incident response. read more: buff.ly/FTv3qpb #CyberResilience #OpenSourceSecurity #SoftwareSupplyChain #DevSecOps

ActiveState retweeted
TheHackersNews Profile Picture

The Hacker News @TheHackersNews

4 weeks ago

Your developers work across 20+ languages. Does your governance? Developers routinely work across more than 20 programming languages, each mapping to at least one package ecosystem, per the IDC Analyst Brief sponsored by @ActiveState. That is a software supply chain footprint too complex to govern reactively. See where the gaps form. Download the Brief: thn.news/securing-open-…

ActiveState retweeted
BleepinComputer Profile Picture

BleepingComputer @BleepinComputer

2 weeks ago

🟢 A green CI pipeline doesn't always mean it's secure. 🛡️ @ActiveState explains why GitHub Actions attack chains can remain exploitable despite passing CI security scans. ➡️ bleepingcomputer.com/news/security/… #cybersecurity #sponsored

ActiveState Profile Picture

ActiveState @ActiveState

2 weeks ago

Grateful to be named Best Open Source Security Platform by The Hacker News Cybersecurity Stars Awards 2026. The Open Source Security category recognizes companies demonstrating excellence in defending the software supply chain. The ActiveState Curated Catalog earned it for governing open source software at the point of ingestion, where AI coding assistants pull dependencies in a single keystroke with no provenance check. Scan and pray cannot keep pace. Curate and govern can. Thank you to The Hacker News for this recognition. Read the announcement: buff.ly/yEyO5MU #OpenSourceSecurity #SoftwareSupplyChain #Cybersecurity

ActiveState Profile Picture

ActiveState @ActiveState

2 weeks ago

Security holds the line on risk. Engineering holds the line on the roadmap. Neither team chose the open source dependency that started the argument. AI did. #SoftwareSupplyChain

ActiveState Profile Picture

ActiveState @ActiveState

2 weeks ago

Gartner published its Magic Quadrant for Software Supply Chain Security. 🔹ActiveState has been named a Niche Player.🔹 We govern open source at the point of ingestion: built from source, SLSA Level 3, contractual remediation SLAs. Read the release: buff.ly/6eB2Ea8

ActiveState Profile Picture

ActiveState @ActiveState

2 weeks ago

@kaikuro_iso Quick version: it's a tamper-proof receipt for your code, proof of where it came from and how it got built, that nobody can secretly edit later. Coffee first, provenance later. ☕️

ActiveState Profile Picture

ActiveState @ActiveState

3 weeks ago

"The governance gap is not a resourcing problem. It's an architectural mismatch between how security tools were built and how code is actually being written today." Built-from-source. Immutable provenance. Managed remediation SLAs. These aren't best practices. They're requirements. buff.ly/CN6bylV #SoftwareSupplyChain #CISO #DevSecOps

ActiveState Profile Picture

ActiveState @ActiveState

3 weeks ago

Anthropic suspending Fable showed how fast access to a dependency you built on can vanish. A CFO calls that concentration risk. Every ungoverned open source package is the same unpriced bet.

ActiveState Profile Picture

ActiveState @ActiveState

3 weeks ago

The EU CRA just turned your SBOM from a best practice into a product requirement with a date on it. A document you skip is a gap. One you are required to produce and cannot is a finding with your name on it. buff.ly/yRMeTZP

Trends for United States

#GrandConcert
#Umamusume
#HOTD
Rodri
#HouseOfTheDragon
#BaddiesUSA
Mihono Bourbon
Fania
Agnes Tachyon
Logano
Criston Cole
Smart Falcon
Alicent
Yaxel
Paredes
Giant Eagle
Syuen
King of the Hill
Aemond
Argentinos

You might like

Inderscience publishes c400 international research journals. Follow us for open access papers and announcements. We will respond to queries as soon as possible.
Inderscience Publishe...
@Inderscience
4K Followers
Mastering Vim, one step at a time. Tweets by @jovica, author of Mastering Vim Quickly. Best Vim newsletter: https://t.co/JYLmoH7ftf
Mastering Vim
@MasteringVim
27K Followers
Doctor, NYT op-ed writer, TED speaker / NYT bestselling author of
Sandeep Jauhar
@sjauhar
8K Followers
SWE | Elixir 💕 | Founder @kidsgetgeeky | Elixir/BEAM Ke & Africa |
Orawo🦋
@gettyorawo
1K Followers
Joseph George is Director of AI for Science, Sovereign AI and Supercomputing at @AMD, a trailblazer in the field of #AI, #cloud, #hpc and more.
Joseph B George (JBG)
@jbgeorge
2K Followers
Cofounder Co-CEO SiliconANGLE theCUBE; Leading #Enterprise Analyst, events, media, cloud, reporting, digital TV; #SiliconValley #EnterpriseTech
John Furrier
@furrier
25K Followers
Extra dry Canadian product manager. Amateur sous chef. Like platforms, containers, football, wine, Maggy’s Mamma, the Oxford comma, and long walks in the cloud.
Brent Smithurst
@brentsmi
2K Followers
Husband & Dad |Love to teach, travel & write | Writer & conference speaker on AI, cybersecurity, ERP, and zero trust | Love baseball
LouisColumbus
@LouisColumbus
29K Followers
Bringing application platforms to the next level. Automating data services to make developers' jobs easier. That's what we do. Join us: https://t.co/oBxvOMMbFr
anynines
@anynines
1K Followers
RICKATRON. I work @Veeam in the Office of the CTO ► Backup, vSphere, Hyper-V, Windows Server, Azure, AWS + more. Father, Husband. Work in Progress. Fly @Delta
Rick Vanover
@RickVanover
14K Followers
🇫🇷 former Founder of https://t.co/bJs78UHxxL 👨‍💻👩‍💻 https://t.co/Ns6XEuJPto 📰 🗞️ https://t.co/79DLjbT2s7 📨🐧
carlchenet
@carl_chenet
4K Followers
Christ follower. Love simplicity, UX, Clojure, haiku, whisk(e)y & bacon.
Dave Roberts
@sandhillstrat
5K Followers
Vice chair @LibreSpace_Fnd making open-source space technologies, Operator at @hackerspacegr, @UoAofficial sleep technologist, @Lytra_Eleni's husband, father.
Eleftherios Kosmas
@elkos
3K Followers
#CITPrep IS A ONLINE COMPUTER INFORMATION TECHNOLOGY TRAINING COMPANY. OPENING 🚧 2027🔧
CITPrep
@CITPrep
21K Followers
We test. Better.
testanic
@_testanic
218 Followers