RapidFort Software Supply Chain Security

RapidFort is a software supply chain security company with an address in Sunnyvale, California. In February 2026 it announced a US$42 million Series A led by Blue Cloud Ventures and Forgepoint Capital, with Felicis Ventures participating. It targets vulnerability noise and bloated container images.

The platform analyses container images across CI/CD, registries and Kubernetes, profiles which components actually run, and removes unused ones. It also offers over 35,000 curated near-zero-CVE images and malware-scanned open-source libraries, and generates SBOMs, runtime BOMs and compliance reports.

• Analyzer: scans container images across CI/CD, registries and Kubernetes.
• Profiler: identifies which components execute at runtime.
• Curated Images: over 35,000 near-zero-CVE images for LTS Linux distributions.
• Optimizer: removes unused components and rebuilds hardened images every 24 hours.
• Curated Libraries: open-source libraries scanned for malware.
• CART: checks images against security benchmarks and produces compliance reports.

A Vietnamese bank running Kubernetes could shrink container vulnerability backlogs before audits. A software outsourcing exporter could ship SBOMs to EU clients. A cloud team could standardise hardened base images.

The site claims up to 99.9% CVE elimination and up to 90% attack surface reduction (vendor claims). Hardened images are rebuilt every 24 hours. No code, OS or pipeline changes are required. Benchmark checks support STIG and CIS reporting.

Software supply chain attacks and regulations such as NIS 2 and the EU Cyber Resilience Act push vendors to produce SBOMs and cut vulnerable components. Vietnamese software exporters and cloud-native teams serving EU or US customers face the same questionnaires.

Address: 440 North Wolfe Road, Sunnyvale, CA (site). Series A of US$42 million announced 4 February 2026. Site references 2026 Gartner Magic Quadrant for Software Supply Chain Security.