Fortanix and Sectigo Forge Partnership for Enhanced Security
Fortanix, Inc., a leader in data-first cybersecurity and a pioneer in Confidential Computing, has joined forces with Sectigo, a renowned name in certificate lifecycle management (CLM) and WebPKI solutions. This partnership aims to significantly bolster software supply chain security for enterprises by automating the issuance of code signing certificates. Through this collaboration, both companies are facilitating a fast and scalable solution that meets the increasing demands of enterprises to create, track, and secure private key processes, all while maintaining smooth developer workflows.
Challenges in Software Development
As businesses strive for agile development, securing their continuous integration and continuous delivery (CI/CD) pipelines remains a critical challenge. The use of public key infrastructure (PKI) and digital signatures is essential to verify code integrity and origin throughout development stages. However, these processes can be cumbersome and often lead to workflow interruptions, hindering innovation. The partnership between Fortanix and Sectigo directly responds to this challenge by enabling enterprises to automate their digital supply chain security in a way that aligns with modern operational needs.
Key Advantages of the Partnership
Proven Secure Key Management
One of the standout features of this partnership is Sectigo’s acceptance of Fortanix key provenance attestations alongside code signing requests. This initiative ensures that private keys are created and securely stored within a hardware security module (HSM), a critical requirement emphasized by the Certificate Authority/Browser Forum as of 2023. This integration not only increases security but also simplifies the compliance process.
Transforming Developer Workflows
“At Fortanix, we believe that automation is key for enterprises to truly scale and secure their CI/CD pipelines,” stated Anand Kashyap, CEO and co-founder of Fortanix. He highlighted that this partnership places a significant emphasis on the dual importance of security and speed, which are essential for developers to excel in a competitive landscape. Nick France, chief technology officer at Sectigo, also expressed enthusiasm about the collaboration, noting that the ability to cryptographically verify the use of a FIPS-validated HSM for private keys represents a transformative addition to the software development lifecycle.
Comprehensive Benefits for Enterprises
This strategic alliance offers several benefits:
- Verifiable Trust: Certificates issued by Sectigo can be confirmed through secure digital signatures, creating a trustworthy system when private keys are managed properly.
- Enhanced Security Compliance: The partnership ensures that private keys are generated, stored, and managed in accordance with FIPS 140-2 Level 3 standards, providing customers with peace of mind.
- Automated Certificate Management: The Fortanix unified data security platform is designed to protect and manage sensitive organizational data while integrating capabilities from the Sectigo Certificate Manager to automate attestation and certificate issuance processes.
About Fortanix
Fortanix is at the forefront of data security, offering comprehensive solutions powered by Confidential Computing technology. Their unified platform simplifies the process of identifying, assessing, and addressing cybersecurity risks. Fortanix’s products, including post-quantum-ready cryptographic solutions, enable enterprises to navigate the complexities of cloud security, protecting against data breaches while facilitating secure innovation. Fortanix is trusted by numerous top brands and government agencies, ensuring organizations can safeguard their most confidential data throughout its lifecycle.
Frequently Asked Questions
What is the focus of the Fortanix and Sectigo partnership?
The partnership focuses on enhancing software supply chain security through the automation of code signing certificate issuance, benefiting enterprise developers.
How does this partnership improve CI/CD pipelines?
It simplifies and automates key management and security processes, allowing developers to focus on innovation without workflow disruptions.
What security standards does the partnership adhere to?
The partnership emphasizes compliance with FIPS 140-2 Level 3 standards for private key management and storage.
Who leads Fortanix?
Anand Kashyap serves as the CEO and co-founder of Fortanix, emphasizing the importance of security and automation.
What services does Fortanix offer?
Fortanix provides data security solutions, including advanced cryptographic technologies designed for cloud environments and regulations compliance.
