Kubernetes and sigstore founders’ have raised an amount of $17.5M for launching Stacklok, a software supply chain startup in its series A funding. It will focus on creating software and services that will be focusing on the security of software development supply chain.
For building Stacklok, McLuckie partnered with Luke Hinds taking the position of CTO. Luke is the founder of sigstore which is an open-source software that is used by several supply chain stacks.
Both founders found out that open-source software there may be a lot of security concerns and data breaches might occur in the entire supply chain. Therefore, they wanted to create a software product that can provide complete transparency into the entire software development supply chain. For this purpose, they have launched cryptographic signature feature for data protection in this solution.
Further, sigstore also plays an important role in the development of a more secure solution with features like signing and verifying all the projects and libraries available in sigstore.
Most developers who want to write secure code only want to create software with trustworthy software. Therefore, Stacklok would deliver developers a type of solution that helps better in better learning about a product’s dependencies, operating preferences, etc. This will help them in adding all the produced data in a proper ledger to showcase their work.
Madrona’s MD, Tim Porter said, “We believe Stacklok is uniquely positioned to win given the team’s unique background and ability to create a novel platform solution that is both proactive and remediative across the entire DevSecOps process, providing an elegant and effective approach to CodeSec and naturally expanding over time to AppSec scenarios.