How NetRise Extended Software Supply Chain Security Principles into AI with HiddenLayer

Customer Overview

NetRise is a leader in software supply chain security, helping organizations gain visibility into firmware, software components, and third-party dependencies. Through advanced binary analysis and Software Bill of Materials (SBOM) capabilities, NetRise enables organizations to identify vulnerabilities, manage risk, and improve trust across complex software ecosystems.

As enterprise adoption of AI accelerated, NetRise recognized that the same principles used to secure software needed to extend beyond traditional assets to encompass AI models, GenAI applications, and AI-enabled workflows.

Challenge

NetRise had mature visibility into software components, firmware, and third-party dependencies. However, AI introduced new assets, workflows, and attack vectors that traditional application security and software supply chain controls were not designed to evaluate.

The organization needed a way to understand where AI systems had been deployed, assess AI-specific vulnerabilities before deployment, and continuously monitor AI once it was operational. Key challenges included:

• Limited visibility into AI models, applications, and related assets
• New risks associated with GenAI applications, AI agents, prompt injection, jailbreaks, and model manipulation
• The need to evaluate AI systems before production deployment
• Customer expectations for secure, governed, and trustworthy AI adoption
• A rapidly evolving AI threat landscape requiring specialized detection and expertise

NetRise needed a solution that could secure AI while complementing its existing security program.

Solution

NetRise selected the HiddenLayer AI Security Platform to extend its security strategy beyond traditional software protection and secure AI across its entire lifecycle. Rather than addressing AI risks at a single point in time, HiddenLayer provided capabilities that enabled NetRise to discover AI assets, assess risks before deployment, validate model resilience through adversarial testing, and continuously monitor AI systems in production.

This end-to-end approach allowed NetRise to integrate AI security into existing security operations while maintaining the governance and oversight needed to support responsible AI adoption.

AI Discovery

As AI adoption expanded, NetRise first needed a clear understanding of where AI systems had been deployed across the organization. HiddenLayer helped identify and inventory AI models, applications, and services, giving security teams the foundation needed to establish governance, prioritize assessments, and incorporate AI into existing security workflows.

AI Supply Chain Security

Building on that foundation, HiddenLayer enabled NetRise to evaluate AI models and related assets for vulnerabilities before deployment. By applying established software risk management principles to AI, NetRise identified potential weaknesses early and reduced exposure before systems reached production.

AI Attack Simulation

To validate the resilience of AI systems, NetRise leveraged HiddenLayer's AI Attack Simulation capabilities to simulate real-world attacks, including prompt injection, jailbreak attempts, model manipulation, and other adversarial techniques. These assessments provided actionable insights that strengthened AI systems before they entered production.

AI Runtime Security

HiddenLayer provided continuous monitoring and AI-specific detection capabilities that enabled NetRise to observe model behavior in production, identify suspicious activity, and respond to emerging threats targeting AI systems. Runtime protection helped ensure AI remained secure throughout ongoing operations.

Throughout the engagement, HiddenLayer worked closely with NetRise's security and engineering teams to align AI security with existing governance processes, creating a unified approach to managing risk across both software and AI.

Results

By implementing HiddenLayer's AI Security Platform, NetRise expanded its security program beyond traditional software protections to encompass AI from discovery through runtime. Rather than treating AI as a separate initiative, the organization integrated AI security into existing operations, creating a unified approach to managing technology risk.

The engagement established visibility across the AI lifecycle. Security teams gained a clearer understanding of where AI was being used, how AI-specific risks differed from traditional software vulnerabilities, and where additional safeguards were needed. This enabled more informed decision-making before AI systems entered production while maintaining continuous oversight after deployment.

The partnership also strengthened collaboration across security, engineering, and AI teams. By establishing a common framework for evaluating AI risk, NetRise incorporated AI security into development and deployment processes without creating unnecessary friction for innovation. Instead of introducing another security silo, AI security became a natural extension of the organization's existing cybersecurity strategy.

Most importantly, NetRise demonstrated that securing AI does not require reinventing security programs, but instead requires extending proven security principles to address the unique risks introduced by AI. By combining mature software risk management practices with end-to-end AI protection, NetRise strengthened its ability to innovate while maintaining the governance, resilience, and trust its customers expect.

"As organizations accelerate AI adoption, security must extend beyond software components to include the AI systems themselves. HiddenLayer helped us gain visibility into AI-specific risks while supporting our broader security objectives."

Key Takeaways

NetRise's experience reinforces that software security and AI security are complementary disciplines. As AI becomes embedded within enterprise applications and business processes, organizations must extend their security strategies beyond software components to include AI models, applications, and autonomous systems.

The engagement also demonstrated the value of securing AI throughout its lifecycle. Effective AI security begins with understanding where AI exists within the organization, continues through model validation and adversarial testing before deployment, and extends into continuous monitoring once systems are operating in production. Addressing only one stage leaves organizations exposed to unnecessary risk.

Perhaps most importantly, NetRise's approach illustrates that organizations do not need separate security programs for software and AI. By integrating AI security into established cybersecurity practices, enterprises can strengthen governance, improve operational efficiency, and accelerate AI adoption without compromising security.

Looking Ahead

As AI becomes increasingly embedded within enterprise applications, securing software alone is no longer sufficient to manage organizational risk. Enterprises need security strategies that provide continuous protection across the AI lifecycle, from discovering AI assets and validating models before deployment to monitoring AI systems throughout production.

Building on its partnership with HiddenLayer, NetRise is well-positioned to continue evolving its AI security strategy while maintaining its leadership in software supply chain security. Together, the organizations demonstrate how enterprises can extend trusted security practices into AI without disrupting innovation or operational efficiency.

The future of cybersecurity will require organizations to understand not only the software they deploy, but also the AI systems that influence decisions, automate processes, and power business operations. By embracing end-to-end AI security today, NetRise is helping define the future of trusted enterprise AI.

About HiddenLayer

HiddenLayer protects agentic, generative, and predictive AI applications across the entire AI lifecycle, from discovery and AI supply chain security to attack simulation and runtime protection. Backed by patented technology and industry-leading adversarial AI research, our platform is purpose-built to defend AI systems against evolving threats. HiddenLayer protects intellectual property, helps ensure regulatory compliance, and enables organizations to safely adopt and scale AI with confidence.

‍