Aikido Security
Aikido is the all-in-one security platform for development teams to secure their complete stack, from code to cloud. Aikido centralizes all code and cloud security scanners in one place.
Aikido offers a range of powerful scanners including static code analysis (SAST), dynamic application security testing (DAST), container image scanning, and infrastructure-as-code (IaC) scanning.
Aikido integrates AI-powered auto-fixing features, reducing manual work by automatically generating pull requests to resolve vulnerabilities and security issues. It also provides customizable alerts, real-time vulnerability monitoring, and runtime protection, enabling teams to secure their applications and infrastructure seamlessly.
Learn more
ZeroPath
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with deep program analysis to deliver intelligent security testing that finds real vulnerabilities while dramatically reducing false positives.
Unlike traditional SAST tools that rely on pattern matching, ZeroPath understands code context, business logic, and developer intent. This enables identification of sophisticated security issues including business logic flaws, broken authentication, authorization bypasses, and complex dependency vulnerabilities.
Our comprehensive security suite covers the application security lifecycle:
1. AI-powered SAST
2. Software Composition Analysis with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code scanning
5. Automated PR reviews
6. Automated patch generation
and more...
ZeroPath integrates seamlessly with GitHub, GitLab, Bitbucket, Azure DevOps and many more. The platform handles codebases with millions of lines across Python, JavaScript, TypeScript, Java, Go, Ruby, Rust, PHP, Kotlin and more.
Our research team has been successful in finding vulnerabilities like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more
Ellipsis
Ellipsis can analyze, compose, and respond to inquiries regarding your source code. It leverages advanced language models to provide insightful code reviews, concise summaries, and suggestions that are easy to implement while adhering to your style guide. By simply opening an issue and assigning it to Ellipsis, you can automate the process of fixing bugs and making straightforward modifications. Speed up your development cycle as Ellipsis tackles comments made on pull requests by interpreting them and generating reliable, tested code solutions. Importantly, Ellipsis does not store or learn from your source code and will never make changes to your default branch without your explicit permission, only adding commits or initiating new pull requests when instructed. Furthermore, it enables the creation of multi-file code adjustments based on natural language inputs, including bug reports or feature requests, and assists in answering questions about the codebase throughout the onboarding process, development phases, and during bug triage. This makes it an invaluable tool for enhancing productivity and ensuring code quality in collaborative environments.
Learn more
Squire AI
Step away from the hassle of writing essays, as Squire effortlessly generates pull request descriptions on your behalf. This tool ensures your team remains aligned through concise descriptions and comprehensive changelogs. With an efficient workflow, Squire engages your team in reviewing PRs while providing them with complete context from your codebase. It excels at identifying various issues, including significant breaking changes, security vulnerabilities, and even minor typographical errors. By enhancing code quality, Squire facilitates a smoother transition of your PRs into production. As a context-sensitive agent, Squire collaborates with you to craft descriptions, evaluate PRs, and adapt to your preferred review style. It not only understands your team's reviewing habits but also customizes its approach through explicit settings and by learning from your team's interactions. Furthermore, it helps to delineate and organize ownership and accountability throughout your entire engineering infrastructure, while ensuring compliance by implementing and upholding regulations on your engineering elements. Ultimately, Squire is your partner in achieving a more streamlined and efficient development process.
Learn more