Get the Spectra Assure Community Plugin for JFrog Artifactory
Package managers auto-pull the latest OSS version — malware included. Protect your pipelines with this free plugin.
Dave Ferguson
Dave helps build new features, capabilities, and integrations for Spectra Assure, RL’s software supply chain security solution. After beginning his career as an engineer and developer, he transitioned into application security, where he has worked in a variety of roles over the last 19 years. Dave was the original author of the OWASP Forgot Password Cheat Sheet, contributed to the OWASP Proactive Controls for Developers, and holds CISSP and CSSLP certifications.
Posts from Dave Ferguson
Get the Spectra Assure Community Plugin for JFrog Artifactory
Make Your SBOMs Actionable with PURLs
Learn how Package URLs improve vulnerability matching, which reduces alert fatigue and simplifies compliance.
Leveraging Spectra Assure and EDR to Mitigate Third-Party Software Risk
Here’s how to create a compensating control in Crowdstrike to mitigate specific risks in a commercial software package.
How Spectra Assure's SaaSBOM Delivers Software Transparency
RL's SAFE report delivers insights into the APIs and services in your software, further enhancing transparency beyond a typical SBOM.
How to Assess VMs Prior to Deployment with Spectra Assure
Leveraging binary analysis, Spectra Assure uses a pre-deployment, static approach for virtual machine security, which is faster and more thorough. Here's how it works.
Spectra Assure Artifactory Integration: Securing Software Development
ReversingLabs integration with JFrog Artifactory provides a seamless way to scan all software artifact types, protecting critical software supply chains.