RSAC 2026 Innovation Sandbox | Crash Override: From Passive Scanning to Active Traceability, Reshaping the Software Supply Chain Security Foundation

Crash Override, founded by application security veterans John Viega and Mark Curphey, presents an Engineering Relationship Management (ERM) platform built around ‘Deep Build Inspection’ to provide cryptographically verifiable code-to-cloud traceability and Shadow AI governance; the company also maintains open-source projects Chalk (tracing) and Ocular (out-of-band scanning orchestration), secured significant seed funding and strategic contributions (including Blackstone code assets), and positions itself as a complement/bridge between SCA, CNAPP, and observability tools for improved supply-chain and CI/CD security.