static application security testing (SAST)

Apona offers four security products for teams that build software, embedded systems, and SMB clients: Labrador (SAST, SCA, and supply-chain security), Penzzer (dynamic fuzzing for medical devices, IoT firmware, and CAN bus/embedded targets), Safe Intelligence (agentless EASM and dark-web credential monitoring for SMBs), and Safe Password (shared-account credential management). Products are sold through a partner channel for MSSPs, AppSec consultancies, security VARs, and GSIs.

dark-web credential monitoringdynamic fuzzingexternal attack surface management (EASM)partner/channel programSBOM generationshared-account credential managementsoftware composition analysis (SCA)supply chain security

Codee is a software development tool designed to help Fortran, C, and C++ developers deliver complex simulation software that is correct, secure, maintainable, and fast. It features Deep Static Analysis capabilities for Fortran code and helps teams automate code reviews, enforce compliance with industry standards, and reduce the risk of security vulnerabilities. Codee began as Appentra Solutions, a spin-off from the University of A Coruña, founded in 2012.

AutoFixCI/CD automationcode coverageCode FormattingCode portability analysisCoding guidelines enforcementDeep Static Analysislegacy code modernizationPerformance optimization analysis

Black Duck is an application security company that delivers True Scale Application Security, unifying SAST, SCA, DAST, IAST, and AI-powered analysis in a unified SaaS platform. It helps security and development teams detect vulnerabilities, manage open source license risk, and secure the software supply chain. Black Duck was formerly the Synopsys Software Integrity Group (SIG) and became an independent company in October 2024 after being sold to Clearlake Capital Group and Francisco Partners.

AI-powered application securityapplication security posture management (ASPM)CI/CD integrationdynamic application security testing (DAST)fuzz testinginteractive application security testing (IAST)on-premises, SaaS, and hybrid deploymentopen source and security auditsSBOM generation and managementsoftware composition analysis (SCA)

Checkmarx provides an agentic application security testing software platform. Its Checkmarx One platform combines hybrid scanning, AI-powered agents, and unified risk intelligence across every attack surface, helping enterprises secure every stage of the SDLC. The company states it scans trillions of lines of code each year and is trusted by security teams at 1,600+ enterprise customers.

AI-powered security agentsAPI securityapplication security posture management (ASPM)container securityDASThybrid scanningIaC securitysecrets detectionsoftware composition analysis (SCA)

Fenitech, established in 2015, helps small and mid-sized businesses bridge the gap between IT security and business strategy. It provides advanced risk assessments and compliance audits that align security posture with business goals, from Zero Trust architecture reviews to DevSecOps integration, ensuring organizations are secure by design.

compliance auditsDevSecOps integrationdynamic application security testing (DAST)external attack surface analysispenetration testingrisk assessmentsZero Trust architecture reviews