NetRise Launches Managed Software Supply Chain Risk Offering for Federal Agencies

NetRise announced in a press release a new partner-led managed software supply chain risk management offering for the federal market. The program is delivered through federal integrators and managed service providers and combines NetRise binary analysis of compiled software artifacts with its Provenance technology to give agencies a clearer view of software risk.

NetRise is partnering with Asc3nd Technologies Group as the strategic launch partner. The offering is designed to help partners deliver operational software supply chain risk management across acquisition, authorization, monitoring, and incident response processes. It supports federal requirements such as CISA Binding Operational Directive 26-04, the AI executive order on security, and the post-quantum cryptography executive order.

The solution enables agencies to validate vendor-provided software bills of materials against what is actually running, identify cryptographic components in software and firmware, and enrich software inventories with provenance data such as origin, maintainer, and repository health. These capabilities aim to improve prioritization and response to software vulnerabilities.

NetRise will continue to provide its binary-level analysis and provenance intelligence tools as it moves toward operating under Dragos following its pending acquisition by Accenture.