Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

84 matching stories — announcement, in Policy Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

How we use Cerbos inside Cerbos: Authorizing MCP tool calls

A real internal MCP server authorization setup, from the team that builds Cerbos. See how we give every tool call a named person, separate the person from the workload acting for them, gate warehouse queries and web access in policy, and ship policy changes through Cerbos Hub without redeploying.

Announcement

AI coding agent authorization should not depend on who runs it

Coding agent permissions set by an approval prompt belong to one developer, on one machine, until someone turns the prompts off. Covers AI coding agent authorization decided centrally instead, what the COAZ draft formalizes, shell escapes a hook never sees, and the missing approval path.

Announcement

Carbide Mantle: Endpoint Visibility Tool

Your compliance platform already pulls most of your evidence without you. Cloud configuration, access reviews, policy sign-off, vendor records, all collected and mapped while you work on something else. Then the auditor asks you to show that the laptops your team works on are secure, and the automation stops. At that point you are usually […] The post Carbide Mantle: Endpoint Visibility Tool appeared first on Carbide.

Announcement

Do You Need a Full-Time Compliance Hire to Meet CPCSC Requirements?

For many small and midsize Canadian defense contractors, meeting CPCSC requirements raises an important resourcing question: does compliance justify hiring a full-time specialist? The work typically requires ongoing attention to cybersecurity controls, evidence, documentation, and remediation, but maintaining all of those responsibilities in-house can add considerable cost to a growing organization. A full-time hire is […] The post Do You Need a Full-Time Compliance Hire to Meet CPCSC Requ

Announcement

CPCSC Compliance: When to Move Off Spreadsheets (and What to Replace Them With)

Canada’s defense supply chain is changing quickly. With the Canadian Program for Cyber Security Certification (CPCSC) now appearing in select Department of National Defence and Public Services and Procurement Canada contracts, suppliers handling Specified Information must demonstrate their security posture rather than simply describe it. Most teams begin tracking that work in spreadsheets, and at […] The post CPCSC Compliance: When to Move Off Spreadsheets (and What to Replace Them With) a