Application Security

Synopsys is an American electronic design automation company that focuses on silicon design and verification, silicon intellectual property and software security and quality.

Doppler is a SecretOps platform for securing and syncing developer secrets throughout your infrastructure.

Socket is a cybersecurity platform that protects companies from software supply chain attacks. They provide visibility, defense in depth, and proactive supply chain protection for JavaScript, Python, and Go dependencies. Socket helps developers use ope...

The most proven application security methods redesigned for DevOps environments.

Cobalt is modernizing traditional pentesting. It leverage global talent and a SaaS platform to deliver a better pentest via Pentest as a Service (PtaaS).

Obsidian Security is a comprehensive SaaS security and compliance solution that helps manage excessive privileges, prevent configuration drift, automate compliance, and detect threats among other uses. It is designed to reduce third-party SaaS integration risk, stop SaaS threats pre-exfiltration of data, and achieve SaaS compliance in minutes, not months.

Fix critical risks in your cloud-native apps such as secrets, IaC, API & OSS vulnerabilities across the software supply chain.

Detectify is a website vulnerability scanner that performs tests to identify security issues on your website. Let us find vulnerabilities for you before hackers do.

Bridging the gap between manual and automated security testing.

Suridata offers an intelligent SaaS security posture management solution designed to unify and automate security across corporate SaaS applications. With Suridata’s unique approach, security teams can focus on the highest risks first, and respond in a timely manner.

Data Theorem is a leading provider in modern application security. Its core mission is to analyze and secure any modern application anytime, anywhere.

Opticca Security is a comprehensive cybersecurity solution, offering best-in-class technologies and rigorous processes to protect your data, particularly focusing on application security. Their services range from web application firewall, zero trust security, cloud security compliance, to various application security testing, ensuring your apps are secure and resilient.

Learn how GitGuardian helps development and security teams detect secrets like API keys and other credentials leaked on GitHub or exposed in internal repositories.

Reco is an identity-centric SaaS security platform enabling organizations to understand, control, and protect their SaaS environment for secure collaboration at the speed of business.

Tromzo's Product Security Operating Platform (PSOP) is designed to control and secure the software delivery pipeline end-to-end.

We empower you to be a secure developer Open source is awesome for boosting your productivity. However, taking code written by others, often with little to no vetting of its security pedigree, can put your application at risk. Snyk enables you to find, and more importantly fix known vulnerabilities in your open source. And it’s built by the best developers and security researchers in the space.

Mend.io provides you with all the necessary tools to establish a mature, proactive AppSec program that effectively mitigates application risk. The application security landscape is in a state of flux as organizations transition from a fragmented ecosystem of point solutions to a unified platform like the Mend AppSec Platform, empowering them to take control of their security measures. The platform merges a developer-centric repo-centric approach with prioritized, actionable insights seamlessly integrated into existing processes. It offers significant benefits such as up to 75% fewer findings that require remediation, relieving you of the burden of managing numerous security issues, streamlined cross-product workflows, and a consolidated data model that enhances security posture. Mend is licensed based on the number of Contributing Developers with a $15,000 minimum purchase.

Aikido is a developer-centric software security platform. It offers a central system that shows you what matters and how to fix it from code to cloud.

PortSwigger offers tools for web application security, testing, & scanning. Choose from a range of security tools, & identify the very latest vulnerabilities.

Veracode is an application security company based in Burlington, Massachusetts.

Checkmarx is a provider of state-of-the-art application security solution: static code analysis software, seamlessly integrated into development process.

The WhiteHat Application Security Platform provides all of the services required to secure the entire software development lifecycle.

Signal Sciences is a growing web application security company in the world.

Get accurate, automated application security testing that scales like no other solution. Secure 1000s of web assets with less manual effort. Reduce your risk with the only…

Wallarm reveals security flaws in web apps and APIs and provides real-time protection for them