RapidFort has launched RapidFort Runtime, a real-time-based security solution that extends RapidFort’s SSCS functionalities into live production environments, creating an end-to-end continuous threat elimination solution. The system uses curated, independently malware-scanned open-source software before deployment to continuous CVE monitoring and tamper detection in live production environments.
RapidFort Runtime operates inside an organization’s production environment, continuously monitoring deployed software, detecting unauthorized or unexpected changes, and proactively tracking newly discovered CVEs. It notifies administrators and developers of relevant security impacts and provides actionable mitigation recommendations.
This capability delivers top-level visibility that distinguishes between first-party and third-party software, generates a precise Runtime Bill of Materials (RBOM®), and provides evidence of the software and processes executing in production. It integrates into existing CI/CD pipelines without requiring code changes to bridge the gap between pre-production security and live runtime protection.
Additional features include:
- Agent-Based Runtime Profiling: Uses BPF/ptrace instrumentation to map system calls, network/memory usage, and process execution, providing cryptographic evidence of what is truly running.
- Proactive Mitigation Recommendations: Beyond just detection, the platform notifies administrators of new relevant security impacts and offers actionable mitigation recommendations to fix them in live environments.
- Runtime Tamper Detection and Integrity Monitoring: Establishes a verifiable baseline of approved software and continuously detects changes to packages, binaries, libraries, processes, and runtime behavior, providing evidence of what changed and where the change occurred.
