Windsurf Editor
Windsurf is a cutting-edge IDE designed for developers to maintain focus and productivity through AI-driven assistance. At the heart of the platform is Cascade, an intelligent agent that not only fixes bugs and errors but also anticipates potential issues before they arise. With built-in features for real-time code previews, automatic linting, and seamless integrations with popular tools like GitHub and Slack, Windsurf streamlines the development process. Developers can also benefit from memory tracking, which helps Cascade recall past work, and smart suggestions that enhance code optimization. Windsurf’s unique capabilities ensure that developers can work faster and smarter, reducing onboarding time and accelerating project delivery.
Learn more
ZeroPath
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with deep program analysis to deliver intelligent security testing that finds real vulnerabilities while dramatically reducing false positives.
Unlike traditional SAST tools that rely on pattern matching, ZeroPath understands code context, business logic, and developer intent. This enables identification of sophisticated security issues including business logic flaws, broken authentication, authorization bypasses, and complex dependency vulnerabilities.
Our comprehensive security suite covers the application security lifecycle:
1. AI-powered SAST
2. Software Composition Analysis with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code scanning
5. Automated PR reviews
6. Automated patch generation
and more...
ZeroPath integrates seamlessly with GitHub, GitLab, Bitbucket, Azure DevOps and many more. The platform handles codebases with millions of lines across Python, JavaScript, TypeScript, Java, Go, Ruby, Rust, PHP, Kotlin and more.
Our research team has been successful in finding vulnerabilities like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more
Baz
Baz provides a comprehensive solution for efficiently reviewing, tracking, and approving code changes, instilling confidence in developers. By enhancing the code review and merging workflow, Baz offers immediate insights and suggestions that allow teams to concentrate on delivering high-quality software. Organizing pull requests into distinct Topics enables a streamlined review process with a well-defined structure. Furthermore, Baz identifies breaking changes across various elements such as APIs, endpoints, and parameters, ensuring a thorough understanding of how all components interconnect. Developers have the flexibility to review, comment, and propose changes wherever necessary, with transparency maintained on both GitHub and Baz. To accurately gauge the implications of a code change, structured impact analysis is essential. By leveraging AI alongside your development tools, Baz analyzes the codebase, maps out dependencies, and delivers actionable reviews that safeguard the stability of your code. You can easily plan your proposed changes and invite team members for their input while assigning relevant reviewers based on their prior contributions to the project. This collaborative approach fosters a more engaged and informed development environment, ultimately leading to better software outcomes.
Learn more
Ellipsis
Ellipsis can analyze, compose, and respond to inquiries regarding your source code. It leverages advanced language models to provide insightful code reviews, concise summaries, and suggestions that are easy to implement while adhering to your style guide. By simply opening an issue and assigning it to Ellipsis, you can automate the process of fixing bugs and making straightforward modifications. Speed up your development cycle as Ellipsis tackles comments made on pull requests by interpreting them and generating reliable, tested code solutions. Importantly, Ellipsis does not store or learn from your source code and will never make changes to your default branch without your explicit permission, only adding commits or initiating new pull requests when instructed. Furthermore, it enables the creation of multi-file code adjustments based on natural language inputs, including bug reports or feature requests, and assists in answering questions about the codebase throughout the onboarding process, development phases, and during bug triage. This makes it an invaluable tool for enhancing productivity and ensuring code quality in collaborative environments.
Learn more
