Business Software for GitHub

We are excited to unveil our innovative automation platform, which features ready-to-use automations known as skills. These skills enable you to streamline repetitive and intricate tasks, such as replacing strings in projects, updating npm dependencies, conducting code quality scans, or even designing your own skill tailored to your specific needs. Teams leveraging Atomist enjoy the versatility of implementing these pre-built automations, referred to as skills, across all their repositories, development processes, and operational events. The activation of a skill occurs in response to an event-driven action that is crucial for your team, such as a commit, build, deployment, or the generation of an issue. This approach not only enhances productivity but also allows teams to focus on more strategic tasks.

Say goodbye to chaotic spreadsheets with user-friendly databases. Stackby combines the ease of spreadsheets with the robust functionality of databases, along with seamless integrations to leading business APIs, allowing you to tailor your work tools to suit your needs. There's no need for coding or technical expertise—it's as straightforward as using a spreadsheet, yet you can transform it into a dynamic relational database that your team will appreciate. Whether you want to import data from Excel or Google Sheets or create a unique template, you can do so in just a few minutes. With more than 25 distinctive column data types, six different data views, an array of powerups, a marketplace for apps, and continually expanding features, Stackby enables you to develop custom no-code solutions that accelerate your team's productivity. Explore valuable powerups, create personalized reporting dashboards, and enhance your workflows with versatile building blocks designed to help your team achieve new goals. Embrace the power of customization and watch your productivity soar.

Leah, formerly ContractPodAi, provides agentic AI solutions that harmonize workflows, empower teams, and unleash enterprise potential through automation and domain expertise across legal, procurement, finance, and beyond. Leah Legal streamlines legal processes with: AI-driven drafting, guided review, redlining, multi-document data extraction, intelligent repository search, real-time analytics, and an always-available legal helpdesk. Teams get processing efficiencies, clearer insights, and immediate access to accurate legal information, reducing effort, improving consistency, and enabling smarter, more efficient decision-making across the organization. Leah Agentic CLM unifies the entire contract lifecycle into one intelligent solution bringing together AI-powered authoring, automated workflows, advanced search, dynamic analytics, smart repository management, and conversational legal assistance. Teams gain end-to-end visibility, faster creation and review cycles, structured governance, and real-time insights. With integrated dashboards, automated redlining, intelligent task management, and centralized data, organizations work more efficiently, reduce risk, and make decisions with clarity and confidence. Leah Agentic OS is an enterprise operating system that enables organizations to design, deploy, and govern intelligent AI agents across the business. Leah Agentic OS gives enterprises the infrastructure to move beyond basic automation by powering agents that reason, decide, and act across departments like Legal, Finance, Procurement, HR, IT, and more.

OpenText Static Application Security Testing (SAST) provides precise identification and remediation of application security flaws directly within source code, helping organizations reduce risks early in development. The platform supports over 33 major programming languages and frameworks, enabling broad language coverage for diverse development environments. It integrates smoothly with widely used CI/CD pipelines and developer tools such as Jenkins, Atlassian Bamboo, Azure DevOps, and Microsoft Visual Studio, ensuring security fits naturally into existing workflows. AI-driven analysis prioritizes vulnerabilities and dramatically reduces false positives by customizing rules and scan depths, speeding up development cycles by up to 25%. OpenText SAST meets compliance benchmarks like OWASP 1.2b, offering developers detailed guidance to efficiently fix issues and improve code quality. Its flexible deployment options include multi-tenant SaaS, private cloud, and on-premises installations, allowing organizations to scale securely and according to their infrastructure needs. Backed by a dedicated Software Security Research team, the solution receives agile updates to stay current with emerging threats. Customers praise the tool for reducing manual code review efforts while increasing vulnerability detection accuracy.

SD Elements helps AppSec teams cope with fast-growing development demands by spelling out which security controls each project needs at the design stage. It follows a Security by Design approach, meaning it looks at architecture, data use, and compliance needs early, identifies relevant risks, and turns them into concrete requirements while changes are still cheap and low-friction. Many teams see security review time drop by 30–50% and fewer late surprises before release. The platform generates project-specific requirements mapped to standards such as NIST, OWASP, PCI, and ISO, and pairs them with concise implementation guidance developers can act on. This lets small AppSec groups support security for portfolios of 100+ applications without adding headcount, while driving consistent, policy-aligned expectations across teams and products instead of ad hoc checklists. SD Elements connects to Jira, CI/CD pipelines, and other engineering tools so security work is delivered and tracked in the same systems developers already use. Traceability is a core capability: every requirement is linked to its underlying risk, relevant standards, and evidence of implementation. AppSec leaders and directors get clear views of coverage, posture, and progress across applications, making it easier to reduce risk, support audits, and report meaningful security metrics to senior leadership.

Ensure that crashes from apps, devices, or games do not hinder your exceptional user experience. Backtrace simplifies cross-platform crash and exception management, allowing you to concentrate on product delivery. It offers seamless aggregation and monitoring of callstacks and events across various platforms. You can manage errors arising from panics, core dumps, minidumps, and runtime issues within a unified system. With Backtrace, structured and searchable error reports are generated from your data effortlessly. The automated analysis feature significantly reduces resolution time by highlighting crucial signals that guide engineers toward identifying the root causes of crashes. You can rely on rich integrations with dashboards, notifications, and workflow systems to ensure no detail is overlooked. Utilize Backtrace’s advanced query engine to address the inquiries that matter most to your team. Gain insights through a comprehensive overview of error frequency, prioritization, and trends across all your projects while also being able to sift through key data points and your custom information associated with each error. This streamlined approach enhances your efficiency in managing and resolving issues promptly.

Make your customers happy. We will give you the tools you need. Your customers will be satisfied with personalized and prompt answers. Zammad makes it easy to manage your team and tickets. This will make your customer service shine brightly. When dealing with customers, it is important to keep track of everything. The dashboard provides a clear overview of the current situation, regardless of whether you are an agent or manager. You (and only you!) can see how well your performance is as an agent. One is no longer only reachable by phone when you are an organisation. Zammad allows you to connect with customers via different communication channels, such as telephone, email, SMS, or Twitter. Zammad can be audited. This is why Zammad is so popular in banks. It is possible to see who modified which attribute and which value by looking at the ticket history. Zammad allows you to easily create individual fields, such as a deadline.

SCANOSS believes that now is the right time to reinvent Software Composition Analysis. With a goal of "start left" and a focus on the foundation of reliable SCA (the SBOM), An SBOM that is easy to use and does not require a large army of auditors. SCANOSS offers an SBOM that is 'always-on'. SCANOSS has released the first Open Source SCA software platform for Open Source Inventorying. It was specifically designed for modern development environments (DevOps). SCANOSS also released the first Open OSS Knowledge Base.

Enhancing Code Quality and Security for Salesforce Developers. Specifically designed for the Salesforce ecosystem, CodeScan's code analysis tools offer complete insight into your code's integrity. It stands out as the most thorough static code analysis solution that accommodates Salesforce languages and metadata. Self-hosted options are available. Evaluate your code for both security and quality using the most expansive database tailored for the Salesforce platform. The cloud version allows you to enjoy all the advantages of our self-hosted service without the burden of managing servers or internal infrastructure. With editor plugins, you can seamlessly integrate CodeScan into your preferred coding environment for immediate feedback as you write. Establish coding standards to uphold the quality of your code based on industry best practices. Manage code quality effectively by enforcing your coding standards and reducing complexity throughout the development lifecycle. By tracking your technical debt, you can enhance both code quality and efficiency. Ultimately, this approach can significantly boost your development productivity, leading to more streamlined project workflows.

TENGU is a Data orchestration platform that serves as a central workspace for all data profiles to work more efficiently and enhance collaboration. Allowing you to get the most out of your data, faster. It allows complete control over your data environment in an innovative graph view for intuitive monitoring. Connecting all necessary tools in one workspace. It enables self-service, monitoring and automation, supporting all data roles and operations from integration to transformation.

Teamplify is a productivity tool that software development teams can use. Team Analytics allows you to track the pulse of your team. Smart Daily Standup saves you valuable meeting time. Effortless Time Tracking allows you to track how long it takes to complete tasks. Time Off management makes it easy to plan ahead. Uses your existing team tools - GitHub Jira, Slack Zoom, Google and others - 12 integrations available.

Deploy the open-source buildkite-agent within your own environment for optimal speed, enhanced control, and robust security. This agent is responsible for checking out your source code, executing tailored hooks and overrides, and subsequently carrying out your build tasks, ensuring that your source code remains securely on your own infrastructure. You can easily install the agent via a variety of packages and binaries compatible with numerous platforms and architectures, such as Ubuntu, Debian, Mac, Windows, Docker, and many others. With its artifact and metadata storage capabilities, the agent facilitates share-nothing, state-free build jobs that can be effortlessly distributed and scaled across multiple agents. You have the flexibility to run as many build agents as you require (up to 10,000 connected per account), all while maintaining smooth operations. The open-source Elastic CI Stack for AWS provides a straightforward method to maintain a scalable CI stack that adapts to your needs within your own AWS account. Alternatively, if you prefer a more personalized approach, you have the option to leverage the tools with which you are already familiar in your production environments, such as Packer and Terraform, allowing for a seamless integration of your existing workflows. This adaptability ensures that your CI/CD processes can evolve alongside your project requirements.

Form.io is an enterprise-class platform that combines form and API data management platforms for developers who want to build complex form-based business processes. Our platform is used worldwide by companies from startups to large enterprises. Our unique "serverless" architecture allows forms and APIs to be seamlessly integrated into both the server and front-end of platform applications. This makes it possible to solve complex business process requirements.

StackStorm seamlessly integrates your applications, services, and workflows into a cohesive system. Whether you're implementing straightforward if/then rules or designing intricate workflows, StackStorm empowers you to tailor your DevOps automation to meet your specific needs. There's no requirement to alter your current processes, as StackStorm works with the tools you already utilize. The strength of a product is often amplified by its community, and StackStorm boasts a vibrant user base worldwide, ensuring you always have access to support and resources. This platform is capable of automating and optimizing almost every aspect of your organization, with several popular use cases. In instances of system failures, StackStorm can serve as your initial support tier, diagnosing issues, resolving known errors, and escalating to human intervention when necessary. Managing continuous deployment can become increasingly intricate, surpassing what Jenkins or other specialized tools offer, but StackStorm allows you to automate sophisticated CI/CD pipelines according to your preferences. Additionally, ChatOps merges automation with teamwork, enhancing the productivity and efficiency of DevOps teams while adding a touch of style to their workflow. Ultimately, StackStorm is designed to evolve with your organization’s needs, fostering innovation and efficiency at every turn.

Configuration as code allows for pipelines to be set up using a straightforward and legible file that can be committed to your git repository. Each step in the pipeline runs within a dedicated Docker container, which is automatically retrieved at the time of execution. Drone is compatible with various source code management systems, effortlessly integrating with platforms like GitHub, GitHubEnterprise, Bitbucket, and GitLab. It supports a wide range of operating systems and architectures, including Linux x64, ARM, ARM64, and Windows x64. Additionally, Drone is flexible with programming languages, functioning seamlessly with any language, database, or service that operates in a Docker container, offering the choice of utilizing thousands of public Docker images or providing custom ones. The platform also facilitates the creation and sharing of plugins by leveraging containers to insert pre-configured steps into your pipeline, allowing users to select from hundreds of available plugins or develop their own. Furthermore, Drone simplifies advanced customization options, enabling users to implement tailored access controls, establish approval workflows, manage secrets, extend YAML syntax, and much more. This flexibility ensures that teams can optimize their workflows according to their specific needs and preferences.

The Fastest Code Analysis. 40X faster scan speeds so developers don't have to wait long for results after submitting a pull request. The Most Accurate Result. Qwiet AI is the only AI with the highest OWASP benchmark score. This is more than triple the commercial average, and more than twice the second highest score. Developer-Centric Security Processes. 96% of developers say that disconnected security and developer workflows hinder their productivity. Implementing developer-centric AppSec workflows decreases mean-time-to-remediation (MTTR), typically by 5X - enhancing both security and developer productivity. Automated Business Logic Flaws in Dev. Identify vulnerabilities unique to your codebase before they reach production. Achieve compliance. Maintain and demonstrate compliance with privacy and security regulations such as SOC 2 PCI-DSS GDPR and CCPA.

Brakeman serves as a security assessment tool tailored for Ruby on Rails applications. In contrast to several typical web security scanners, Brakeman analyzes the actual source code of your application rather than requiring a full application stack setup. After scanning the application code, it generates a comprehensive report detailing all identified security vulnerabilities. Installation is straightforward, with Brakeman needing no additional setup or configuration—simply launch it. Since it operates solely on the source code, Brakeman can be executed at any phase of development; for instance, you can create a new application with "rails new" and promptly evaluate it using Brakeman. By not depending on spidering techniques to explore site pages, Brakeman ensures a more thorough assessment of an application, including those pages that may be under development and not yet publicly accessible. This capability allows Brakeman to potentially identify security weaknesses before they can be exploited by malicious actors. As a tool specifically designed for Ruby on Rails applications, Brakeman adeptly verifies configuration settings against established best practices, thereby enhancing overall application security. Its efficiency and ease of use make it an invaluable resource for developers focusing on secure coding practices.

Centralize, transform, and store your data seamlessly. Logstash serves as a free and open-source data processing pipeline on the server side, capable of ingesting data from numerous sources, transforming it, and then directing it to your preferred storage solution. It efficiently handles the ingestion, transformation, and delivery of data, accommodating various formats and levels of complexity. Utilize grok to extract structure from unstructured data, interpret geographic coordinates from IP addresses, and manage sensitive information by anonymizing or excluding specific fields to simplify processing. Data is frequently dispersed across multiple systems and formats, creating silos that can hinder analysis. Logstash accommodates a wide range of inputs, enabling the simultaneous collection of events from diverse and common sources. Effortlessly collect data from logs, metrics, web applications, data repositories, and a variety of AWS services, all in a continuous streaming manner. With its robust capabilities, Logstash empowers organizations to unify their data landscape effectively.

Modern development teams are empowered to identify, fix, and prevent vulnerabilities in source code, open-source libraries, secret management, cloud configuration, and other areas. Modern development teams are empowered to identify, fix, and prevent security flaws in their applications. Continuous security scanning speeds up feature shipping and reduces cycle time. Our expert system reduces false alarms and only informs you about security issues that are relevant. Software that is consistently scanned across all product lines will be more secure. GuardRails integrates seamlessly with modern Version Control Systems such as GitLab and Github. GuardRails automatically selects the appropriate security engines to run based upon the languages found in a repository. Each rule is carefully curated to determine whether it has a high level security impact issue. This results in less noise. A system has been developed that detects false positives and is constantly improved to make it more accurate.

RapidAPI for Mac is a full-featured API development tool that provides developers with everything they need to test, document, and manage APIs efficiently. Built exclusively for macOS, it offers a visually rich HTTP client that allows users to send requests, analyze responses, and refine APIs in real time. The platform supports API description standards such as JSON Schema, Swagger, RAML, and API Blueprint, making it easy to create and maintain structured API documentation. Developers can visually define parameters, constraints, and request details, improving clarity and accuracy. With built-in code generation and export capabilities, it simplifies sharing and integrating APIs across different environments. RapidAPI for Teams enhances collaboration by enabling synchronized projects, real-time updates, and version control-like workflows. Teams can work on separate branches and merge changes seamlessly, ensuring smooth collaboration. The tool combines testing, documentation, and teamwork into one unified platform. It is ideal for developers looking to accelerate API development and maintain consistency across projects.

StatusTicker enables you to keep track of and oversee the performance of your essential services from a single platform. You can display your Ticker on an office screen, while also receiving instant alerts through various channels such as email, SMS, Slack, and webhook for you and your team. This ensures that everyone stays informed and can respond promptly to any issues that may arise.

Platform engineering is revolutionizing how engineering organizations build and run their cloud-native setups. Humanitec is leading this revolution, providing enteprises with the fastest and most reliable way to build Internal Developer Platforms (IDPs). Humanitec is the leader in the platform engineering space. Named a 2022 Gartner® Cool Vendor, we drive developer productivity by radically simplifying how teams deliver software at scale. Our core product, the Humanitec Platform Orchestrator, is used by mid and large-size engineering organizations, from 100+ developer scale-ups all the way to Fortune 100s. Our OSS workload specification Score lets developers describe their workloads and dependencies as code. The Platform Orchestrator dynamically generates app and infra configurations with every new deployment, driving standardization across the entire software delivery lifecycle. This means no more ticket ops or waiting times for developers, resulting in 4x higher deployment frequency and 30% faster time to market. As a SaaS provider, Humanitec takes information security very seriously. We’re ISO 27001 certified and constantly strive to protect data while adhering to the industry’s best security practices.

Efficiently oversee your GitHub Issues and Pull Requests from various repositories within a single consolidated interface. With features like Kanban Boards, Epics, automated workflows, and detailed reporting, you can regain command over your projects. Codetree enhances the functionality of Issues and Pull Requests while ensuring complete synchronization with GitHub. Leverage Kanban boards that offer custom stages alongside our automation tools to seamlessly transition issues, or opt for a compact list view that displays your issues in a more information-rich format. Manage dependencies and categorize issues into Epics, allowing for better prioritization and sizing of tasks. Codetree empowers you to navigate through issues across multiple repositories all within a singular Codetree project. You can oversee as many repositories as you desire, keeping an eye on issue dependencies while utilizing our robust filtering system to identify blocked items. Easily address queries such as "Which issues need my input?" or "Which tasks are currently stalled?" to enhance your project's efficiency. This streamlined approach not only saves time but also bolsters team collaboration.

Ducalis.io serves as a quick and efficient platform for collaborative prioritization, allowing teams to gain a comprehensive view while assessing their collective understanding. By utilizing this tool, you can save significant time that would otherwise be spent in sync-up meetings, while also reducing redundant tasks. It actively engages team members in the decision-making process, leading to less time spent on prioritization and more focus on completing tasks. Dedicate just 20 minutes each week to maintain clarity in your priorities. Ducalis.io features a user-friendly interface that is reminiscent of spreadsheets but fine-tuned for evaluating issues, making it extremely fast. The design emphasizes key elements, ensuring that decision-making remains uninterrupted, with all vital information available on a single screen. This capability helps prevent countless hours of unproductive work and encourages healthy discussions by capturing the varied perspectives of your team. Additionally, it enhances meeting efficiency by allowing discussions to concentrate solely on essential topics. Teams will be able to identify areas of alignment and disagreement, and if developers have divergent views on development complexity, they will be prompted to address these discrepancies collaboratively. This way, Ducalis.io not only streamlines prioritization but also fosters a culture of open communication and shared understanding among team members.

Using your GitHub data to power engineering analytics, you can ship faster and improve team satisfaction. Analyze pull request data at the team level to identify "NorthStar" metrics such as cycle time, deployment frequency and change failure rate that will help you improve delivery. Find bottlenecks such as code review quickly, then experiment with smaller pull requests and automated tests to improve the outcome.