DigiCert Adds Secure Releases to Trust Manager
The new functionality enables organizations to monitor software release risks and enforce automated security policies.
Updated on Oct. 15, 2026 in Software
Live Poll
Should software companies be required to monitor and fix security vulnerabilities after their products are released?
DigiCert has integrated Secure Releases into its Software Trust Manager platform to help businesses track software vulnerabilities. This tool correlates security data and bills of materials to identify risks in software versions.
Why it matters
Organizations must continuously evaluate software risk both when a release is shipped and after new vulnerabilities are discovered over time. This automation ensures security requirements are met by blocking the signing of non-compliant software.
Secure Releases connects software bills of materials, vulnerability data, and security scan results into existing signing controls. The system is available across Essentials, Advanced, and Premium service versions.
The players
DigiCert
Based in Lehi, Utah, this company specializes in digital security solutions and software trust management for global enterprises.
The details
The platform allows users to monitor ongoing release risk by correlating software bill of materials data with changing vulnerability information. Premium versions further enhance this capability by providing specific suggestions for component updates alongside automated blocking features.
Timeline
October 15, 2026: DigiCert announced the new Secure Releases functionality.
The Tech Race
This functionality leverages established Software Bill of Materials (SBOM) standards to automate the identification of vulnerabilities within enterprise supply chains. It represents a broader industry shift toward embedding automated security checks directly into the continuous delivery pipeline.
Developers and IT managers can use these tools to reduce manual security auditing and prevent insecure software versions from reaching production. Organizations benefit from consistent policy enforcement across their software release cycle.
The takeaway
Automating security policy enforcement significantly reduces the risk of deploying vulnerable software components. Businesses should prioritize integrating real-time vulnerability monitoring into their signing processes to maintain supply chain integrity.
Further reading
For more on evolving cybersecurity tools, visit our Software section.
More information
Learn more about these features on the DigiCert Software Trust Manager information page.
Source note: This article includes information reported by The Manila times.
Live Poll
Should software companies be required to monitor and fix security vulnerabilities after their products are released?
