SolarWinds Becomes First Software Provider to Align With New CISA Secure Software Development Guidance

SolarWinds (NYSE:SWI), a leading provider of simple, powerful, secure observability and IT management software, today announced it has submitted its Secure Software Development self-attestation in alignment with Cybersecurity and Infrastructure Security Agency (CISA) and Office of Management and Budget (OMB) requirements. In submitting its form to the Repository for Software Attestation and Artifacts (RSAA), SolarWinds is the first software provider to publish CISA self-attestation in alignment with U.S. government requirements of all software providers.

Endorsed by the White House and released by CISA this month, the Secure Software Development Attestation Form is part of a comprehensive Department of Homeland Security (DHS) strategy to fortify the software supply chain, promote transparent information-sharing between the public and private sectors, and encourage a proactive community approach to cyber threats to safeguard the nation's digital infrastructure.

SolarWinds has taken a significant step in promoting secure software practices by submitting this attestation that its products are designed with security as a foundational element, in line with not only NIST Secure Software Development Framework (SSDF) guidelines but the framework provided by the Office of Management and Budget's directive (M-22-18). Furthermore, submitting this attestation further underscores SolarWinds' capability to provide a clear and digitally accessible Software Bill of Materials (SBOM) with detailed insights across all of a digital ecosystem's components and interdependencies.

"In a landscape where cybersecurity threats are ever-evolving, public-private partnerships remain absolutely paramount for creating a secure and resilient digital infrastructure for our nation,” said Chip Daniels, Vice President of Government Affairs at SolarWinds. “By working hand in hand, we can ensure that our cybersecurity measures are not just reactive but proactively designed to anticipate and mitigate threats. This collaboration across sectors is necessary to support CISA, create unified best practices for information-sharing between companies and government agencies, and develop shared threat intelligence for a more resilient and secure supply chain, nation—and future.”