Continuous Assurance aims to dispel the software supply chain’s blind spot. It involves collecting signed evidence about every event in the development life cycle that may affect the security of the final software product, including product build and deployment. Today, enterprises use a variety of security tools to make their software products more secure. However, they rarely establish a policy for consistent use of these tools.Continuous Assurance ensures that software products were not tampered with during development and that security-related tests were performed.