software composition analysis (SCA)

Apona offers four security products for teams that build software, embedded systems, and SMB clients: Labrador (SAST, SCA, and supply-chain security), Penzzer (dynamic fuzzing for medical devices, IoT firmware, and CAN bus/embedded targets), Safe Intelligence (agentless EASM and dark-web credential monitoring for SMBs), and Safe Password (shared-account credential management). Products are sold through a partner channel for MSSPs, AppSec consultancies, security VARs, and GSIs.

dark-web credential monitoringdynamic fuzzingexternal attack surface management (EASM)partner/channel programSBOM generationshared-account credential managementstatic application security testing (SAST)supply chain security

Black Duck is an application security company that delivers True Scale Application Security, unifying SAST, SCA, DAST, IAST, and AI-powered analysis in a unified SaaS platform. It helps security and development teams detect vulnerabilities, manage open source license risk, and secure the software supply chain. Black Duck was formerly the Synopsys Software Integrity Group (SIG) and became an independent company in October 2024 after being sold to Clearlake Capital Group and Francisco Partners.

AI-powered application securityapplication security posture management (ASPM)CI/CD integrationdynamic application security testing (DAST)fuzz testinginteractive application security testing (IAST)on-premises, SaaS, and hybrid deploymentopen source and security auditsSBOM generation and managementstatic application security testing (SAST)

Checkmarx provides an agentic application security testing software platform. Its Checkmarx One platform combines hybrid scanning, AI-powered agents, and unified risk intelligence across every attack surface, helping enterprises secure every stage of the SDLC. The company states it scans trillions of lines of code each year and is trusted by security teams at 1,600+ enterprise customers.

AI-powered security agentsAPI securityapplication security posture management (ASPM)container securityDASThybrid scanningIaC securitysecrets detectionstatic application security testing (SAST)