Software Development Lifecycle (SDLC) Security

CS

Free

Software Development Lifecycle (SDLC) Security

Cider Security View Cider Security

Cider Security, now part of Palo Alto Networks, revolutionizes how security, development, and DevOps teams collaborate to embed security into the engineering lifecycle. Founded by seasoned security professionals, Cider addresses the inherent complexities and friction experienced by modern software delivery teams, enabling faster, more secure, and scalable application development.

Shift-left security integration

Automated security workflows

Developer-centric security solutions

CT

Free

Software Development Lifecycle (SDLC) Security

Cigniti Technologies View Cigniti Technologies

Cigniti Technologies offers comprehensive Independent Software Testing (IST) services with a specialized focus on robust software security testing. Their advanced security testing solutions are designed to identify vulnerabilities across web and mobile applications, products, cloud environments, and web services. By providing detailed security code reviews and network security assessments, Cigniti empowers organizations to proactively defend against evolving cyber threats and ensure the integrity of their digital assets.

Web Application Penetration Testing

Mobile Application Security Testing

Product Security Testing

C

Free

Software Development Lifecycle (SDLC) Security

CircleCI View CircleCI

CircleCI is a powerful CI/CD platform designed to accelerate software delivery for web and mobile applications. It automates the entire build, test, and deploy pipeline, enabling development teams to quickly release high-quality code and proactively identify and resolve bugs before they impact users. Trusted by leading global organizations, CircleCI empowers developers to focus on innovation and drive business value by streamlining their release process.

Continuous Integration and Continuous Delivery (CI/CD)

Automated build and test processes

Streamlined deployment workflows

C

Free

Software Development Lifecycle (SDLC) Security

Clearvision View Clearvision

Clearvision, an Atlassian Platinum Solution Partner, empowers UK and US teams with custom SDLC solutions built on the Atlassian stack, Git, and open-source tools. We integrate best-in-class Atlassian products with tailored third-party applications to optimize your development workflows for superior business outcomes. From licensing and training to cloud migrations and expert contracting, we provide comprehensive services to address your unique challenges and enhance your Atlassian experience.

Atlassian Platinum Solution Partner expertise

Custom SDLC solution development

Atlassian product integration and optimization

CF

Free

Software Development Lifecycle (SDLC) Security

Cloud Foundry Foundation (CFF) View Cloud Foundry Foundation (CFF)

The Cloud Foundry Foundation (CFF) is a non-profit organization dedicated to advancing Cloud Foundry as the premier open-source, cloud-native application platform worldwide. It empowers organizations to manage the complete application development lifecycle, from initial development and rigorous testing to streamlined deployment. CFF champions robust security through features like Software Vulnerability Management, secure application artifact handling, and comprehensive security event logging and auditing.

Comprehensive Application Lifecycle Management

Secure Software Vulnerability Management

Security for Application Artifacts

C

Free

Software Development Lifecycle (SDLC) Security

CloudBees View CloudBees

CloudBees empowers organizations to build, secure, and deliver software faster by providing the world's first end-to-end automated software delivery system. Integrating seamlessly with your existing toolchain, CloudBees uniquely enables DevSecOps practices from development to production, ensuring code security, controlled delivery, and continuous protection in live environments. Experience enhanced developer productivity and robust application security with CloudBees's hardened delivery pipelines and advanced deployment strategies.

End-to-end automated software delivery

Integrated DevSecOps across the toolchain

Hardened, immutable delivery pipelines

C

Free

Software Development Lifecycle (SDLC) Security

Cloudsmith View Cloudsmith

Cloudsmith is the premier cloud-native, global, and universal platform for artifact management, engineered for secure and accelerated software development and distribution. Its robust Dependency Firewall safeguards your software supply chain by proxying and caching open-source dependencies, enabling proactive threat assessment and blocking malicious packages. Empower your enterprise with granular control over access and authentication through a flexible permissions system integrated with your identity provider, ensuring comprehensive security and compliance.

Cloud-Native Global Platform

Universal Artifact Management

Secure Software Distribution

CS

Free

Software Development Lifecycle (SDLC) Security

CMD+CTRL Security View CMD+CTRL Security

CMD+CTRL Security empowers organizations to build secure software by delivering expert-led, hands-on training. Leveraging decades of experience with Fortune 100 clients, our comprehensive suite of role-based modules, skill labs, and cyber ranges ensures every software stakeholder gains essential security expertise for resilient development.

Industry-leading software security training solutions

Role-based training modules for all software stakeholders

Hands-on skill labs for practical experience

C

Free

Software Development Lifecycle (SDLC) Security

Coana View Coana

Coana revolutionizes Software Composition Analysis (SCA) by intelligently filtering the alert noise generated by traditional tools. Leveraging sophisticated reachability analysis, Coana dramatically reduces false positives (over 80%), enabling development teams to reclaim valuable engineering hours without compromising security posture. Founded by leading static analysis experts, including Professor Anders Møller, and now part of Socket, Coana's deep technical expertise ensures scalable and effective security solutions for diverse programming languages.

Reduces SCA false alerts by over 80% through advanced reachability analysis.

Frees up significant engineering time by eliminating alert fatigue.

Enhances overall security posture without sacrificing development velocity.

CL

Free

Software Development Lifecycle (SDLC) Security

Cobalt Labs View Cobalt Labs

Cobalt Labs offers Pen Testing as a Service specifically designed for modern SaaS businesses, integrating serious hacker-like testing directly into your development lifecycle. By leveraging a powerful combination of data, advanced technology, and expert talent, Cobalt addresses the complex security challenges of web and mobile applications with intelligent, efficient solutions. Our platform, featuring the Cobalt Central vulnerability dashboard and Cobalt Insights for comprehensive program overviews, ensures continuous security posture improvement.

Pen Testing as a Service (PTaaS) for SaaS

Hacker-like security testing

Integration into development cycles

CD

Free

Software Development Lifecycle (SDLC) Security

Code Dx View Code Dx

Code Dx by Synopsys is a comprehensive software vulnerability correlation and management system designed to unify and normalize security findings from diverse sources. It integrates results from Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) tools, and manual code reviews to provide a single, actionable view of an organization's software risk. Developed with initial support from the Department of Homeland Security (DHS) S&T Directorate, Code Dx is engineered to enhance software assurance for critical infrastructure and secure the global software supply chain.

Vulnerability Correlation and Aggregation

Support for SAST, DAST, and Manual Reviews

Normalized Vulnerability Data

CI

Free

Software Development Lifecycle (SDLC) Security

Code Intelligence View Code Intelligence

Code Intelligence provides an automated software security testing platform designed to empower developers with robust and secure application development. Our core offering, CI Fuzz, integrates seamlessly into your CI/CD workflow, automating feedback-based fuzz testing to identify and fix bugs early in the development lifecycle. By democratizing advanced security testing, we enable teams to significanty reduce development costs and time while enhancing overall software resilience.

Automated Software Security Testing

Feedback-Based Fuzz Testing

CI/CD Workflow Integration

C

Free

Software Development Lifecycle (SDLC) Security

Codean View Codean

Codean's Review Environment revolutionizes software analysis by automating repetitive tasks, empowering security experts to concentrate on critical vulnerability discovery. In an era of escalating software complexity and sophisticated cyber threats, Codean bridges the gap where automated tools fall short, providing indispensable human expertise with enhanced efficiency. We are dedicated to making the digital world safer by building a review environment that security analysts worldwide not only use but truly love.

Automated mundane software analysis tasks

Focus security experts on vulnerability discovery

Enhance human software security expertise

C

Free

Software Development Lifecycle (SDLC) Security

CodeLock View CodeLock

CodeLock offers advanced, patent-pending software security directly at the code level, continuously monitoring and protecting against incursion attacks within milliseconds. Beyond robust security, it delivers sophisticated management insights through performance metrics and data analytics, enabling enhanced developer productivity assessments and accountability for remote teams. Seamlessly integrated throughout the entire Software Development Life Cycle (SDLC), CodeLock provides unparalleled visibility into both your code and your developers' work.

Real-time, code-level security monitoring

Instantaneous detection and pinpointing of insertion attacks

Advanced developer performance metrics and analytics

C

Free

Software Development Lifecycle (SDLC) Security

Codenotary View Codenotary

Codenotary empowers organizations to achieve end-to-end software integrity and trustworthiness with a leading platform for Trusted CI/CD, tamperproof SBOMs, and artifact protection. Our revolutionary immudb ledger technology underpins Codenotary Cloud, enabling immutable storage and cryptographic verification of software artifacts at scale, while also providing secure tracking of sensitive data changes. Seamlessly integrate Codenotary into your DevOps pipeline to rapidly identify and neutralize unwanted artifacts, ensuring the security and compliance of your software throughout its entire lifecycle.

Trusted CI/CD Pipeline Security

Tamperproof Software Bill of Materials (SBOM)

Immutable Artifact Protection and Verification

C

Free

Software Development Lifecycle (SDLC) Security

CodeOne View CodeOne

CodeOne delivers robust security solutions for websites and web applications, focusing on proactive vulnerability hardening and continuous monitoring. Its SafeCode Web Application Vulnerability hardening Solution integrates secure libraries for efficient vulnerability remediation and management software for real-time application status oversight. Backed by expertise in enterprise security from leaders like XYPRO and innovative web access control from Authentic8, CodeOne empowers organizations to safeguard their digital assets and maintain compliance.

Secure Library Integration for Vulnerability Remediation

Proactive Web Application Hardening

Real-time Vulnerability Monitoring Dashboard

C

Free

Software Development Lifecycle (SDLC) Security

CodeSecure View CodeSecure

CodeSecure delivers advanced Static Application Security Testing (SAST) solutions engineered to embed security and compliance directly into your software development lifecycle. By proactively identifying and remediating vulnerabilities early, CodeSecure empowers organizations to meet stringent assurance requirements for both embedded and enterprise systems, ensuring robust software integrity and reducing risk. With deep expertise forged in software security, CodeSecure is now part of AdaCore, further enhancing its capabilities in delivering high-assurance security solutions.

Industry-leading SAST capabilities

Early vulnerability detection and remediation

Deep expertise in software security and compliance

CS

Free

Software Development Lifecycle (SDLC) Security

Codified Security View Codified Security

Codified Security is a comprehensive mobile application testing platform designed to empower organizations in proactively identifying and remediating security vulnerabilities. Seamlessly integrating into your development lifecycle, our solution streamlines mobile security testing, ensuring compliance and protecting your organization. Experience fast, scalable, and reliable results with our programmatic approach, enabling confident code deployment.

Automated Mobile Application Security Testing

Vulnerability Detection and Remediation

Compliance Assurance

C

Free

Software Development Lifecycle (SDLC) Security

CoGuard View CoGuard

CoGuard leverages patented AI-driven automation for highly efficient white-box penetration testing and infrastructure audits. Seamlessly integrate CoGuard into your CI/CD pipeline to achieve continuous security across all infrastructure layers, including cloud environments (AWS, Azure, GCP), IaC tools, containers, and network services and their dependencies. Experience reduced downtime and accelerated deployment speeds, empowering your teams to innovate faster and more securely.

AI-driven automated white-box penetration testing

Comprehensive infrastructure audits and design services

CI/CD pipeline integration for continuous security

C

Free

Software Development Lifecycle (SDLC) Security

Comiq View Comiq

Comiq delivers comprehensive software quality assurance, testing, and project management services, with specialized expertise in cybersecurity. As pioneers in agile software development, we leverage automated tools and a deep understanding of customer experience and infrastructure management to ensure your projects' success. Our team offers flexible engagement models, allowing you to select dedicated professionals such as test managers, performance testers, automation testers, and cybersecurity specialists tailored to your unique requirements.

Agile Software Development Expertise

Comprehensive Software Quality Assurance

Specialized Security Testing and Consulting

C

Free

Software Development Lifecycle (SDLC) Security

Componolit View Componolit

Componolit provides advanced solutions for building trustworthy and secure IT systems, specializing in component-based architectures and formal verification to combat escalating software complexity and vulnerabilities. Our technology empowers organizations to isolate and harden critical functionalities into formally verified security components, ensuring robust protection for a connected world and mitigating risks associated with monolithic and complex systems.

Formally verified security components

Component-based architecture

Enhanced IT system security

C

Free

Software Development Lifecycle (SDLC) Security

Computest View Computest

Computest offers comprehensive security testing services, including mobile app security, vulnerability assessments, and attack & penetration testing, all designed to identify and mitigate exploitable weaknesses. Our methodology prioritizes understanding your specific business and infrastructure risks to deliver actionable insights and genuine value in protecting your systems and data from cyber threats.

Mobile Application Security Testing

Vulnerability Assessments

Attack and Penetration Testing

CS

Free

Software Development Lifecycle (SDLC) Security

Conseal Security View Conseal Security

Conseal Security is a leading provider of expert-led mobile application penetration testing services for iOS and Android platforms. Leveraging both DAST (Dynamic Application Security Testing) and SAST (Static Application Security Testing), we meticulously identify critical vulnerabilities by combining comprehensive OWASP methodologies with proprietary tools and deep technical expertise. Our rigorous black-box testing simulates real-world attacks by analyzing app behavior during execution, while our in-depth code reviews uncover complex, hard-to-find security flaws stemming from insecure coding practices.

Expert-led DAST and SAST for iOS and Android applications

Comprehensive analysis based on OWASP Top 10 vulnerabilities

Proprietary software and unique testing methodologies

CF

Free

Software Development Lifecycle (SDLC) Security

Consortium for Information & Software Quality (CISQ) View Consortium for Information & Software Quality (CISQ)

The Consortium for Information & Software Quality (CISQ) is dedicated to establishing international standards for automating software quality measurement. By developing industry-supported benchmarks for software size, structural integrity, and technical debt, CISQ empowers organizations to ensure the development and sustainment of secure, reliable, and trustworthy software applications. Their work is crucial for IT organizations, service providers, and vendors involved in the software lifecycle, from development and testing to acceptance and deployment.

Develops international standards for software quality automation

Measures software size and structural quality

Quantifies technical debt from source code