Addressing growing software supply chain threats with real-time insights and proactive risk mitigation to eliminate vulnerabilities and accelerate engineering velocity
KIRKLAND, Wash., March 25, 2025 /PRNewswire/ -- Chainguard, the secure foundation for software development and deployment, today announced a partnership with Datadog, Inc. (NASDAQ: DDOG), the monitoring and security platform for cloud applications. Together, Chainguard and Datadog will combine container observability with clear, prioritized actions to help engineering and security teams eliminate common vulnerabilities and exploits (CVEs), and improve software development velocity. Through a new Chainguard dashboard in Datadog, customers can gain real-time insights into container risks, receive clear remediation recommendations, and seamlessly transition to more secure alternatives — accelerating software delivery while reducing security threats.
Chainguard (PRNewsfoto/Chainguard)
Lack of visibility leads to increased exposure and decreased innovation
According to the World Economic Forum's Global Cybersecurity Outlook 2025 report, 54% of large organizations identified supply chain challenges as the biggest barrier to achieving cyber resilience. Although reducing software supply chain risk has become a board-level concern, ownership of this outcome is split between engineering and security teams, often resulting in gaps in visibility and accountability. Security leaders often struggle with a lack of comprehensive insight into their organization's container infrastructure, working across organizational silos to triage vulnerabilities based on deployment breadth and growing vulnerability backlogs. At the same time, engineering leaders face limited visibility into security risks, challenges in prioritizing container image replacements, and difficulty measuring the effectiveness of security measures. Without a unified view and path to vulnerability elimination, these challenges increase exposure to supply chain attacks and slow innovation.
A holistic view of container infrastructure, risk, and actionable insights
The integration between Chainguard and Datadog addresses these challenges by enhancing Datadog's core container observability with new visibility and associated risk remediation potential, surfaced in a dashboard. The Chainguard dashboard organizes container metrics to understand where Chainguard is being used today and identifies environments where a more secure base image is available.
The dashboard will be available to all Datadog customers, offering a holistic view of existing container infrastructure and associated CVE risks, including:
Containers built using Chainguard images;
Longest running container images;
Vulnerabilities in most widely-used images; and
Chainguard alternatives for insecure container images.
"Through our partnership with Datadog, we're combining leading observability with secure, minimal container solutions," said Kim Lewandowski, Chief Product Officer and Co-founder at Chainguard. "Chainguard is building the safe source for open source so customers can build more efficiently and securely from the start. Datadog is leading the way in observability and monitoring across cloud infrastructure. Together, we're empowering companies of all sizes to build software better."
"Tens of thousands of organizations rely on Datadog every day for real-time risk monitoring and visibility into the health and performance of their containerized environments," said Bharat Sajnani, Senior Vice President, Head of Corporate Development and Platform at Datadog. "With our integration with Chainguard, our customers can identify CVE risks within their container infrastructure, seamlessly pinpoint alternatives, and measure progress in implementing these minimal CVE container images. Together, we're helping companies make their container infrastructure more secure while making the most of their engineering resources."
Customers benefit from reduced risk and optimized engineering resources
With Chainguard and Datadog's integration, joint customers benefit from reduced risk across their application surface area. Now, security teams can move from reactive alerts to proactive risk reduction by identifying and prioritizing CVE remediation in their most widely deployed and high-risk containers. As a result, engineering teams will spend less time patching one-off containers, so organizations can redirect development resources and ship secure software faster.
Chainguard is the secure foundation for software development and deployment. By providing guarded open source software, built from source and updated continuously, Chainguard helps organizations eliminate threats in their software supply chains. Its customers include Fortune 500 enterprises and leading technology companies, including Anduril, Canva, Checkmarx, HPE, GitLab, Snowflake, and Wiz. Chainguard is venture-backed by leading investors, including Amplify, IVP, Lightspeed Venture Partners, Redpoint Ventures, Sequoia Capital, and Spark Capital. For more information, visit: https://www.chainguard.dev/
