Blog Posts

Florian Lukavsky

When attackers use signing services: breaking the attack chain earlier

Blog header graphic for ‘SLSA in Enterprise Environments: Implementation and Real-World Constraints,’ showing a secure software supply chain with a conveyor belt, glowing code artifact, shield, attestation document, and CI/CD pipeline in a dark blue enterprise security style.

Paul Savoie

SLSA in Enterprise Environments: Implementation and Real-World Constraints

Florian Lukavsky

OWASP Top 10 2025: What changes – and how signed, verifiable supply chains close the gap

Kai Bulau

When AI writes the code: Why software integrity matters more than ever

Stefan Wenig

SignPath Raises €5M to Strengthen Software Supply Chain Security

Paul Savoie

Building Trusted Software for macOS: A how-to guide for digital signing

Paul Savoie

From Implicit to Explicit: Why Code Signing is the Missing Link in DevSecOps

Stefan Wenig

Cybernews interview with our CEO: supply chains and code signing

Marc Nimmerrichter

DP API Encryption Ineffective in Windows Containers

Daniel Ostovary

Experiences with Security Report Handling: The Good and the Bad

Stefan Wenig

Evaluating the Sunburst Hack: Causes and Future Prevention

Daniel Ostovary

Unfulfilled Expectations: Revoked Certificates in JAR Signing

Daniel Ostovary

On the Importance of Trust Validation: Microsoft's Dangerous Mistake

Daniel Ostovary

A White Hat Story: Analysis of Secure Variables in AppVeyor

GET STARTED TODAY

Experience how SignPath simplifies secure software development.

Request a Demo

Follow us

Quick links

Home

Company

Support

Contact us

Request a Demo

Platform

SignPath Software Integrity Platform

Semantic Code Signing

Pipeline Integrity

Software Attestation

Code Governance

Solutions

For Security Teams

For DevOps & Developers

For Compliance & Risk Management

Open Source Community

Contact

info@signpath.io

Status

© 2026 SignPath. All Rights Reserved.

Imprint

|

Privacy statement

|

Terms of service

Follow us

Quick links

Home

Company

Support

Contact us

Request a Demo

Platform

SignPath Software Integrity Platform

Semantic Code Signing

Pipeline Integrity

Software Attestation

Code Governance

Solutions

For Security Teams

For DevOps & Developers

For Compliance & Risk Management

Open Source Community

Contact

info@signpath.io

Status

© 2026 SignPath. All Rights Reserved.

Imprint

|

Privacy statement

|

Terms of service

Follow us

Quick links

Home

Company

Support

Contact us

Request a Demo

Platform

SignPath Software Integrity Platform

Semantic Code Signing

Pipeline Integrity

Software Attestation

Code Governance

Solutions

For Security Teams

For DevOps & Developers

For Compliance & Risk Management

Open Source Community

Contact

info@signpath.io

Status

© 2026 SignPath. All Rights Reserved.

Imprint

|

Privacy statement

|

Terms of service