On October 14, Chainguard and Booz Allen announced a new partnership. Together, the companies aim to help U.S. government agencies and defense programs strengthen the security of their software supply chains while accelerating their ability to deliver on mission outcomes.
Government agencies face enormous pressure to modernize their software practices while keeping up with strict security and compliance requirements. From navigating long continuous authorization-to-operate (ATO) processes to addressing supply chain risks flagged in federal mandates, agencies need solutions that let them move faster while staying secure from the start.
By combining Booz Allen’s mission expertise with Chainguard’s secure-by-default open-source software, the partnership will help federal programs eliminate vulnerabilities, save engineering time, and accelerate compliance timelines, according to Chainguard.
This partnership is focused on four key areas:
- Joint go-to-market initiatives to better serve federal clients.
- Co-solutioning opportunities that embed trusted open-source software directly into mission-critical systems.
- Partner enablement to expand secure software adoption.
- Training and education for federal teams at scale.
In one defense-related program, Booz Allen engineers used Chainguard’s technology to accelerate an ATO process that had been stalled for nearly a year. With Chainguard’s hardened containers, they achieved approval in just eight weeks.
At the heart of this partnership is Chainguard Containers and its continuously updated catalog of over 1,700 zero-CVE container images. Each image is built from source in hardened infrastructure, comes with signed software bills of materials (SBOMs) and attestations, and is hardened with Federal Information Processing Standards (FIPS)-validated cryptography, the company said.
Source: Chainguard
Stay in the know with breaking news from across the IC and IC contracting landscape by becoming a paid subscriber to IC News. Your support makes our work possible.
By 
