Vendor Directory
Explore application security and software supply chain vendors.
we45
Secure apps from the start with We45
We45 helps organizations build apps securely by default. They provide threat modeling services that identify vulnerabilities early in the software development lifecycle (SDLC), potentially saving costs associated with late fixes. Their offerings include AI-driven risk coverage to address vulnerabilities that standard scanners overlook. We45's solutions are customized for cloud-native, containerized, or service-oriented architectures, with outputs refined by senior security engineers to deliver actionable insights. This makes them a trusted partner for companies looking to maintain security and fortification in their product development.
Qodo
Automate Code Reviews, Accelerate Quality Assurance
Qodo is an AI code review platform designed for engineering teams to enhance code quality without sacrificing speed. It provides over 15 agentic workflows that automate reviews directly within IDEs, including support for GitHub, GitLab, and CLI. Qodo detects issues, enforces compliance rules, and validates fixes in real-time before code reaches repositories. By integrating review agents, it helps teams address security risks and ensure compliance with coding standards from day one, enabling cleaner code and a more efficient development process.
CodeAnt AI
Secure code, seamless development journey
CodeAnt AI offers an AI-powered Code Health Platform designed for developers focused on security, quality, and compliance. Its solutions include intent-aware code reviews, automated security features like SAST, Infrastructure as Code (IaC) scanning, and management of secrets. The platform aims to unify code review, quality, and development metrics, enabling enterprises to fix review debt, improve code velocity, and ensure secure code deployments within their workflows. CodeAnt AI serves a wide range of developers, helping them enhance their coding practices and meet compliance requirements effectively.
Black Duck
Secure your software supply chain effortlessly
Black Duck provides powerful application security testing (AST) tools that help organizations secure their software supply chains. The Black Duck Polaris Platform offers automation for scanning and policy enforcement, allowing users to manage risk in real-time across their portfolios. With AI-powered insights, teams can ensure compliance while accelerating their development processes. The platform integrates seamlessly into various stages of the software development lifecycle (SDLC), enabling testing at any time based on application or project needs.
Codiga
Code smarter, secure faster with Codiga
Codiga offers a real-time static application security testing (SAST) solution designed to optimize developer productivity. The platform allows teams to automate code reviews and analysis by utilizing customizable rules from the Codiga Hub. With the ability to save hours in software development time, Codiga enables developers to share smart code snippets within their Integrated Development Environment (IDE), streamlining collaboration and enhancing code quality. This is crucial for teams looking to improve security and compliance in their development processes.
Waratek
Automate security, protect your applications seamlessly
Waratek provides an enterprise Java security platform designed for application and API security. It automates the manual process of fixing code vulnerabilities, delivering a turnkey solution that helps secure both modern and legacy applications. With a focus on compliance, Waratek allows enterprises to scale security measures effectively and efficiently, ensuring protection against exploits while improving application performance. The platform integrates compliance processes, making it easier for organizations to meet regulatory standards such as the Sarbanes-Oxley Act (SOX). Experience robust security without the common pitfalls of traditional methods.
devTools
Transforming enterprises through seamless DevSecOps integration
DevTools offers end-to-end ServiceNow services and DevSecOps solutions aimed at accelerating digital transformation for enterprises. Leveraging a strong understanding of software delivery and maintenance, DevTools integrates governance, risk management, and compliance (GRC) capabilities into their platform. Their SAST tools enable organizations to implement Shift Left security practices, enhancing code quality and security as part of the development lifecycle. With a focus on full-stack automation and security, DevTools serves as a vital partner for enterprises looking to optimize their workflows and maintain compliance in an evolving digital landscape.
GrammaTech
Securing the software that powers your mission
GrammaTech has over 35 years of experience delivering cutting-edge cyber security technologies and software assurance solutions focused on mission-critical environments. Their expertise in software analysis and binary transformation has been utilized by U.S. government bodies and leading organizations. As a provider of Static Application Security Testing (SAST), GrammaTech is dedicated to securing the software that powers essential devices, tackling complex software challenges that affect security, safety, and resilience.
ZeroPath
Intelligent security for modern code challenges
ZeroPath is the first truly intelligent code security suite designed for large organizations. It automates the detection and remediation of vulnerabilities, ensuring compliance with standards such as SOC 2, ISO 27001, and PCI DSS. The platform features advanced security management, including team-based access control, compliance reporting, and audit capabilities. ZeroPath works seamlessly with enterprise authentication providers such as Okta and Azure AD, processes multiple repositories in parallel, and generates detailed reports for security assessments. Its unique AI-native approach provides superior vulnerability detection and significantly reduces false positives, making it an essential tool for modern DevOps teams.
Veracode
Secure your code, accelerate your innovation
Veracode offers an Application Risk Management platform to secure the software development life cycle (SDLC). It provides tools that help identify, prioritize, and mitigate application risks efficiently through AI-driven insights. The platform allows for the integration and automation of security within the development pipeline. Veracode has decades of leadership in software security expertise and has been recognized in the Gartner Magic Quadrant for Application Security Testing. Its services support organizations in managing application security risks and in maintaining software velocity while addressing vulnerabilities effectively.
ScanDog
Transforming vulnerabilities into actionable insights
ScanDog is a modern application security platform that leverages AI to streamline security posture management. It automatically prioritizes vulnerabilities, reduces false positives, and accelerates remediation. ScanDog orchestrates security findings into context-aware recommendations and provides language-aware rules for various modern stacks. The platform supports the deployment of multiple scanners, including SAST, DAST, and IaC Scanning, enabling organizations to centralize and visualize insights across their ecosystem. By focusing on real threats and what matters most, ScanDog aims to enhance threat response efficiency and overall application security.
Guardsquare
Fortify Your Mobile Apps with Confidence
Guardsquare provides multi-layered protection for mobile applications, focusing on Android and iOS security. Their solutions include code hardening and Runtime Application Self-Protection (RASP) to strengthen app integrity. With the capability to identify security issues within mobile app code and dependencies, Guardsquare offers actionable recommendations for remediation. Their real-time threat monitoring ensures ongoing security for mobile applications, and integration with ProGuard, their open-source shrinks tool, allows for an optimized code environment. Developers can leverage these tools for enhanced security without compromising user experience and performance.
Checkmarx
Code security redefined for modern development
Checkmarx offers a unified application security platform designed for comprehensive security throughout the software development lifecycle. Their solutions include developer-friendly static application security testing (SAST), software composition analysis (SCA), and application security posture management (APSM). The Checkmarx One platform empowers developers with AI-driven tools to identify and remediate vulnerabilities across various codebases, including legacy, open-source, and AI-generated code. With robust visibility into code repository health, the platform helps organizations protect their software supply chain from threats and ensures compliance with industry standards.
SoftSeq
Secure your code from the start
SoftSeq provides Security Engineering solutions to ensure robust application security throughout the Software Development Life Cycle (SDLC). By integrating skilled Security Engineers into the development team, SoftSeq addresses security proactively, which is more cost-effective than fixing issues at later stages. They focus on secure architecture decisions and educate developers in secure coding practices. Their unique in-house solutions are tailored to each organization’s needs, avoiding the limitations of generic security tools. This commitment to building Secure-by-Design software means that as startups secure funding and become targets for hackers, they can prioritize their security posture early in the development process to mitigate risks.
Amyris
Innovative security solutions for a safer world
At AMYRIS, we design trusted technology solutions that support corporate security teams and public authorities in the prevention and investigation of crime and terrorism, helping protect lives, infrastructures, and strategic interests globally. Our focus is on digital forensics and application security, delivering top-notch tools in the SAST category to enhance organizational security. We are committed to staying current with technology shifts and providing comprehensive solutions that prioritize outcomes over mere compliance scanning.
Sonar
Code smarter, secure every line
SonarQube is an AI-powered static analysis tool designed to enhance code quality and security. It automates code reviews by ensuring every line of code meets the highest standards by detecting vulnerabilities and providing fix suggestions. It integrates seamlessly into existing development workflows, allowing for real-time feedback across 35+ languages. Perfect for DevOps environments, SonarQube helps manage maintainability, reliability, and technical debt while allowing self-managed control. Trusted by over 7 million developers worldwide, it streamlines the process to track issues and minimize manual debugging.
wolfSSL
Secure Connections for Every Embedded Device
wolfSSL provides a lightweight, C-language-based SSL/TLS library designed for embedded and resource-constrained environments, supporting industry standards such as TLS 1.3. WolfSSL secures a wide range of applications, including automotive, IoT, cloud services, and more, with over 2 billion active connections. Its products are geared towards enhancing secure communication across diverse markets, including industrial automation, connected home, and smart grid applications. With security features rooted in advanced cryptography methodologies, wolfSSL helps to protect devices against various cyber threats.
Aptori
Proactive Security for Modern Applications
Aptori offers an AI-driven Application Security Platform designed to proactively identify and remediate vulnerabilities in code, APIs, and applications. It includes a unified dashboard that maps vulnerabilities to compliance standards such as NIST CSF, PCI DSS 4.0, HIPAA, and SOC 2, allowing for quick risk posture reporting. The platform features autonomous AI Agents that detect, triage, and fix vulnerabilities to reduce the approval cycle from weeks to hours. With auto-generated audit evidence and live reporting, Aptori ensures that security and development teams are aligned and always audit-ready.
CodeSecure, Inc.
Secure code, seamless development integration
CodeSecure offers comprehensive application security testing solutions, including Static Application Security Testing (SAST) and Binary Software Composition Analysis (BCA). Their products, CodeSonar and CodeSentry, enable development teams to identify security vulnerabilities and quality issues efficiently within their software development lifecycle. With decades of research backing their methodologies, CodeSecure is dedicated to securing complex software systems in DevSecOps environments, making security a fundamental component of development. Leading organizations rely on their tools to integrate security seamlessly into their workflows, ensuring high-quality code while maintaining delivery schedules.
CloudDefense.AI
From Code to Cloud, We Guard All
CloudDefense.AI is an industry-leading Cloud Native Application and Protection Platform (CNAPP) that ensures comprehensive security from code to cloud. With advanced AI technology, it merges Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), API security testing, and Software Composition Analysis into a single seamless workflow, ensuring accurate vulnerability detection and remediation. This platform not only reduces false positives but also provides comprehensive cloud infrastructure protection, compliance monitoring, and actionable security insights, effectively integrating into development processes without impeding deployments.
