About
Data Theorem is a leading provider in modern application security, specializing in Static Application Security Testing (SAST), Software Composition Analysis (SCA), and API security. Gartner ranks them #1 in Cloud Native Apps in the 2025 Critical Capabilities for Application Security Testing. They offer continuous discovery and inventory of mobile, web, APIs, and cloud assets, as well as automated hacking that includes SAST, DAST, IAST, and SCA. Their solutions help organizations discover, test, and protect all APIs, enhancing the security of applications for over 2.8 billion users, including seven of the largest banks.
Related Vendors
Codacy provides tools for monitoring and enforcing code quality, test coverage, and security standards within software development. With integrations across the software development lifecycle (SDLC) and support for 49 ecosystems, Codacy helps developers identify code issues early, providing AI-assisted solutions to fix them. Its aim is to maintain high-quality code and improve overall test coverage. This service enables organizations to raise the bar on code quality and reduce the risks associated with code breakdowns.
Kodem Security offers a runtime-powered application security platform that integrates static application security testing (SAST) with software composition analysis (SCA) and container security. This innovative platform utilizes the intelligence of running applications to provide comprehensive security across a variety of environments. With an emphasis on managing software supply chains, Kodem has positioned itself as a pivotal solution for enterprises looking to enhance their application security posture. The platform supports organizations in navigating the complexities of modern software development, ensuring robust protection against vulnerabilities.
Xygeni provides a comprehensive application security platform focused on software supply chain security. It offers automated fixes and vulnerability detection through integrations in CI/CD pipelines, thereby ensuring secure code delivery. Their solutions include Static Application Security Testing (SAST), which identifies vulnerabilities like injection flaws, and an Application Security Posture Management (ASPM) to unify security insights across teams. By integrating compliance frameworks like ISO 27001 and NIST into the development process, Xygeni equips organizations to tackle emerging threats effectively. Their emphasis on automation helps teams manage risks associated with open-source components and enhances collaboration between security and development teams.