RapidFort has launched Runtime, a new platform that continuously monitors deployed open-source software for newly disclosed CVEs, tampering, and runtime changes, closing the security gap between software deployment and production.
RapidFort has introduced RapidFort Runtime at Black Hat USA 2026, expanding software supply chain security beyond deployment by continuously monitoring open-source software running in live production environments. The company says it is the industry’s first end-to-end continuous threat elimination solution, combining pre-deployment software verification with ongoing runtime protection.
The platform continuously tracks newly disclosed CVEs affecting deployed software, detects runtime tampering and unexpected changes, and provides proactive mitigation recommendations. It also generates a dynamic Runtime Bill of Materials (RBOM®), giving organisations real-time evidence of the software and processes executing in production while distinguishing between first-party and third-party components for improved compliance and audit readiness.
RapidFort Runtime integrates with existing CI/CD pipelines without requiring code changes. It uses agent-based runtime profiling with BPF/ptrace instrumentation to map system calls, process execution, memory usage, and network activity. Runtime integrity monitoring establishes a trusted software baseline and continuously detects unauthorised changes to binaries, packages, libraries, processes, and runtime behaviour.
The platform also integrates with RapidFort’s curated catalogue of open-source libraries and hardened container images, which are validated through ReversingLabs deep-binary malware analysis to help prevent compromised software from reaching production.
Sangram Dash, CISO and VP of IT, Sisense, said, “Maintaining an accurate, real-time inventory of what is actually executing in production has been a consistent audit and compliance hurdle. RapidFort Runtime’s ability to generate a precise, dynamic RBOM provides us with undeniable evidence of our software’s state. We can now verify integrity and confirm our compliance in real-time, which is a total game-changer for our security operations.”
