Sigstore

Sysdig is a cloud-security platform that provides real-time visibility from runtime through development. It is described in the video context as a customer-side CVE-scanning tool that produces security reports; its website also presents capabilities for assessing cloud risk, prioritizing critical risks, detecting threats, and responding to them.

Chainguard is a software supply-chain security company that provides trusted open-source artifacts for containers, language libraries, VM images, CI/CD actions, and AI agent skills. Its artifacts are rebuilt from source, include verified manifests, provenance and software bills of materials, and are designed to replace vulnerable or malicious public packages. Chainguard also offers CVE backports, hardened actions and community skills, sandbox-based package analysis for suspicious behavior, Helm charts, and an agent called Guardener. Its container service includes rapid remediation commitments, including a one-day SLA for known exploited vulnerabilities; the videos also describe a minimal rolling Linux distribution with 1-, 7-, and 14-day remediation SLAs. The company is associated with the creators of Kubernetes, Sigstore, SLSA, and Google Distroless.

Safe{Wallet} is a multisignature smart wallet for secure self-custody, onchain treasury management, and organizational transactions. It distributes control across multiple owners using configurable N-of-M approvals, helping avoid a single point of failure; signers can include Ledger and Trezor hardware wallets. The wallet supports transaction simulation and risk scanning, spending limits and approval roles, multi-chain account management, DeFi and protocol interactions, and transaction bundling. Safe describes its contracts as open source and formally verified, and provides features including trustless recovery, transaction guards, and monitoring through Safe Shield.

Let's Seal is an open standard, reference implementation, and free service for proving that a file is unaltered, existed by a certain date, and was sealed by a specific certificate. It preserves native signature formats such as PAdES/X.509 signatures for PDFs and uses OpenTimestamps to anchor time to Bitcoin. Each seal is also recorded in an append-only transparency log with a Bitcoin-anchored root, allowing independent auditing. The project provides a hosted web app, the `sealbot` command-line tool, a REST API and SDKs, and a self-hosted engine with its own certificate authority; verification is available online or offline without an account. The repository states that the engine, SDKs, and standard are open source under the Apache-2.0 license.

Semgrep is an application security platform for static application security testing, open-source dependency analysis, secrets detection, and malware protection. Its analysis combines deterministic, rule-based scanning with AI reasoning about code context, naming, structure, and developer intent; findings can be surfaced and remediated through the CLI, CI/CD systems, IDEs, pull-request checks, APIs, webhooks, and supported AI-tool integrations. In the described workflow, Semgrep is used as a local verification gate alongside repository rules and pull-request review before a code change is considered complete.