ASPM Marketplace

AppSec is a Team Sport, Meet Our Partners on Cycode’s ASPM Marketplace

Welcome to the future of AppSec, where we bring together the world’s best security and developer tools in the industry’s only Complete ASPM Platform.

AI Coding Assistants

Amazon Q Dev

type: AI Coding Assistants

category: Integration

Learn More AI coding assistant integrated with AWS services

Claude

type: AI Coding Assistants

category: Integration

Learn More AI coding assistant by Anthropic

Continue

type: AI Coding Assistants

category: Integration

Learn More Open-source extension to connect external LLMs to your IDE

Cursor

type: AI Coding Assistants

category: Integration

Learn More AI coding assistant built into Cursor's code editor

Gemini

type: AI Coding Assistants

category: Integration

Learn More Google's AI assistant for code

GitHub Copilot

type: AI Coding Assistants

category: Integration

Learn More GitHub's AI pair programmer

Qodo

type: AI Coding Assistants

category: Integration

Learn More AI platform specialized in automated test generation and code integrity

Tabby

type: AI Coding Assistants

category: Integration

Learn More Self-hosted, open-source AI coding assistant

Tabnine

type: AI Coding Assistants

category: Integration

Learn More AI coding assistant with private and secure deployment options

Windsurf

type: AI Coding Assistants

category: Integration

Learn More Collaborative AI code assistant by Codeium

API Security

Akamai (NoName)

type: API Security

category: Connector

Learn More API security platform preventing vulnerabilities and attacks

Cloudflare

type: API Security

category: Connector

Learn More CDN and reverse proxy for website performance and security

SALT Security

type: API Security

category: Connector

Learn More API security protecting against evolving attack patterns.

Traceable

type: API Security

category: Connector

Learn More AI-driven API security to stop advanced threats.

Artifact Registries

Amazon ECR

type: Artifact Registries

category: Integration

Learn More Managed Docker container registry by AWS.

Azure Container Registry

type: Artifact Registries

category: Integration

Learn More Microsoft's managed Docker registry service.

Bitbucket

type: Artifact Registries

category: Integration

Learn More Git repository hosting for collaborative software development

Bitbucket Packages

type: Artifact Registries

category: Integration

Learn More Hosts your packages and artifacts.

DockerHub

type: Artifact Registries

category: Integration

Learn More Cloud-based registry service for Docker containers.

GitHub Container Registry

type: Artifact Registries

category: Integration

Learn More Manages Docker and OCI images on GitHub.

GitLab Container Registry

type: Artifact Registries

category: Integration

Learn More Package management and dependency resolution.

Google Container Registry

type: Artifact Registries

category: Integration

Learn More Fast, scalable Docker container registry.

JFrog Artifactory

type: Artifact Registries

category: Integration

Learn More Artifact repository for binaries and containers.

Nexus Repository

type: Artifact Registries

category: Integration

Learn More Repository manager for storing and distributing artifact.

Quay

type: Artifact Registries

category: Integration

Learn More Storage, distribution, and governance of containers and cloud-native artifacts

Asset Inventory

ServiceNow

type: Asset Inventory

category: Integration

Learn More IT service management and operations

Bug Bounty

HackerOne

type: Bug Bounty

category: Connector

Learn More Hacker-powered security testing and bug bounty platform.

CI/CD

Azure DevOps Pipelines

type: CI/CD

category: Integration

Learn More CI/CD that integrates with most languages.

Azure Pipelines

type: CI/CD

category: Integration

Learn More Automated CI/CD for continuous delivery in Azure

Bamboo

type: CI/CD

category: Integration

Learn More Build, deploy, test automation.

Bitbucket Pipelines

type: CI/CD

category: Integration

Learn More CI/CD specifically for Bitbucket.

CircleCI

type: CI/CD

category: Integration

Learn More Automation and CI/CD with integration options.

GitHub Actions

type: CI/CD

category: Integration

Learn More Automates workflows within GitHub.

GitLab CI

type: CI/CD

category: Integration

Learn More Integrated CI/CD for GitLab repositories.

GitLab Runner

type: CI/CD

category: Integration

Learn More Execution agent for GitLab CI/CD pipelines.

Harness

type: CI/CD

category: Integration

Learn More AI-Native Software Delivery Platform

Jenkins

type: CI/CD

category: Integration

Learn More Extensible server for automated CI/CD.

JFrog Pipelines

type: CI/CD

category: Integration

Learn More CI/CD automation platform

TeamCity

type: CI/CD

category: Integration

Learn More Continuous integration for DevOps.

Cloud Platform

Amazon EKS

type: Cloud Platform

category: Integration

Learn More Managed Kubernetes service by Amazon.

Amazon Web Services

type: Cloud Platform

category: Integration

Learn More Leading cloud computing platform by Amazon

Azure

type: Cloud Platform

category: Integration

Learn More Cloud computing platform by Microsoft

Google Cloud Platform

type: Cloud Platform

category: Integration

Learn More Cloud computing services by Google.

Kubernetes

type: Cloud Platform

category: Integration

Learn More Automates deployment, scaling, and management of containers.

Terraform Cloud

type: Cloud Platform

category: Integration

Learn More Cloud-based infrastructure automation and management platform.

Container Security

Anchore

type: Container Security

category: Connector

Learn More API-friendly scanner to identify vulnerabilities in container images

Crowdstrike

type: Container Security

category: Connector

Learn More Endpoint security and threat intelligence.

Dynatrace

type: Container Security

category: Connector

Learn More Unified observability platform

JFrog Xray

type: Container Security

category: Connector

Learn More Centralizes the storage and management of software artifacts, dependencies, and container images.

Orca

type: Container Security

category: Connector

Learn More Security and compliance for cloud platforms.

Palo Alto Prisma Cloud

type: Container Security

category: Connector

Learn More Continuous visibility, security and compliance across cloud environments

Sysdig

type: Container Security

category: Connector

Learn More Cloud-native security and monitoring platform/

Tenable

type: Container Security

category: Connector

Learn More Cyber exposure management solutions.

Upwind

type: Container Security

category: Connector

Learn More Cloud security runtime protection to identify and mitigate threats in real-time within cloud environments.

Wiz

type: Container Security

category: Connector

Learn More Cloud infrastructure security solutions.

DAST

BitSight

type: DAST

category: Connector

Learn More Security ratings platform for risk management assessment.

BlackDuck Continuous Dynamic DAST

type: DAST

category: Connector

Learn More DAST solution that detects vulnerabilities in running web applications

Bright Security

type: DAST

category: Connector

Learn More AI-driven DAST for apps and APIs

Burp Suite

type: DAST

category: Connector

Learn More Web vulnerability scanner and security testing tool.

Fortify DAST (WebInspect)

type: DAST

category: Connector

Learn More Dynamic web security testing tool for application assessment.

Invicti

type: DAST

category: Connector

Learn More Web App scanner that helps organizations identify and remediate web app vulnerabilities

Developer Risk Management

Immersive

type: Developer Risk Management

category: Integration

Learn More Immersive unifies Cyber Drills, Exercises, Sims, Ranges, and training into one single, adaptive platform

SecureCodeWarrior

type: Developer Risk Management

category: Integration

Learn More Secure Code Warrior helps you upskill developers to create secure code from the start.

IDE

CLion

type: IDE

category: Integration

Learn More IDE for C and C++

Cursor

type: IDE

category: Integration

Learn More AI-native code editor built on VS Code

DataGrip

type: IDE

category: Integration

Learn More IDE for multiple databases

DataSpell

type: IDE

category: Integration

Learn More AI-powered IDE for analyzing data and sharing insights

GoLand

type: IDE

category: Integration

Learn More IDE for Go

IntelliJ IDEA

type: IDE

category: Integration

Learn More IDE for Java and Kotlin

PhpStorm

type: IDE

category: Integration

Learn More IDE for PHP

PyCharm

type: IDE

category: Integration

Learn More IDE for Python

Rider

type: IDE

category: Integration

Learn More IDE for .NET and game developers

RubyMine

type: IDE

category: Integration

Learn More IDE for Rube and Rails

RustRover

type: IDE

category: Integration

Learn More IDE for Rust

Visual Studio

type: IDE

category: Integration

Learn More IDE for complex .NET and C++ applications

Visual Studio Code

type: IDE

category: Integration

Learn More Open-source IDE by Microsoft

WebStorm

type: IDE

category: Integration

Learn More IDE for JavaScript and TypeScript

Windsurf

type: IDE

category: Integration

Learn More Agentic IDE to create collaborative AI coding flows

SAST

Checkmarx CxSAST

type: SAST

category: Connector

Learn More Static application security testing.

CheckmarxOne (SaaS)

type: SAST

category: Connector

Learn More Unified platform for application security.

CodeQL

type: SAST

category: Connector

Learn More Static code analysis tool from GitHub

Fortify SAST

type: SAST

category: Connector

Learn More Static code analysis tool for security vulnerabilities.

Fortify SSC SAST

type: SAST

category: Connector

Learn More SAST to analyze application binary and source code

Github Code Scanning

type: SAST

category: Connector

Learn More Security scanning for GitHub repositories.

GitLab Application Security

type: SAST

category: Connector

Learn More Integrated security in GitLab CI/CD.

SARIF

type: SAST

category: Connector

Learn More Static Analysis Results Interchange Format (SARIF) defines a JSON-based file format for the output of static analysis tools.

Semgrep Enterprise

type: SAST

category: Connector

Learn More Code analysis tool for security and compliance.

Snyk Open Source

type: SAST

category: Connector

Learn More Tracks vulnerabilities in open-source software.

Snyk SAST

type: SAST

category: Connector

Learn More Static code analysis tool for security vulnerabilities.

SonarCloud

type: SAST

category: Connector

Learn More Automated cloud-based code analysis.

SonarQube

type: SAST

category: Connector

Learn More On-premises tool for continuous code quality.

Synopsys, Coverity on Polaris

type: SAST

category: Connector

Learn More Cloud-based static application security testing solution.

Synopsys, Coverity On Premise

type: SAST

category: Connector

Learn More Static application security testing tool for on-premises deployment.

Veracode SAST

type: SAST

category: Connector

Learn More Static code analysis tool for security vulnerabilities.

SCA

Black Duck SCA

type: SCA

category: Connector

Learn More Software composition analysis tool for code security.

Checkmarx CxSCA

type: SCA

category: Connector

Learn More Software composition analysis for vulnerabilities.

Contrast Security

type: SCA

category: Connector

Learn More Application security platform for modern software.

Dependabot

type: SCA

category: Connector

Learn More An automated tool that monitors and updates project dependencies

GitHub Dependabot

type: SCA

category: Connector

Learn More Dependency updates to reduce vulnerabilities.

GitLab Dependency Scanning

type: SCA

category: Connector

Learn More Automated dependency scanning in GitLab.

JFrog X-Ray

type: SCA

category: Connector

Learn More

Mend.io

type: SCA

category: Connector

Learn More Software composition analysis for vulnerabilities

Snyk SCA

type: SCA

category: Connector

Learn More Dependency analysis tool for software security assessment.

Sonatype Lifecycle

type: SCA

category: Connector

Learn More Manages software supply chain risks.

Veracode SCA

type: SCA

category: Connector

Learn More Software composition analysis tool for dependency security.

SIEM

Splunk

type: SIEM

category: Connector

Learn More Data analytics and monitoring platform for enterprises

Sumo Logic

type: SIEM

category: Connector

Learn More Cloud-based log management and analytics platform.

Secrets Detection for Productivity Tools

Confluence

type: Secrets Detection for Productivity Tools

category: Integration

Learn More Platform for seamless knowledge sharing and team collaboration

Confluence Data Center

type: Secrets Detection for Productivity Tools

category: Integration

Learn More Platform for seamless knowledge sharing and team collaboration

Jira Cloud

type: Secrets Detection for Productivity Tools

category: Integration

Learn More Platform for seamless knowledge sharing and team collaboration

Jira Data Center

type: Secrets Detection for Productivity Tools

category: Integration

Learn More Platform for seamless knowledge sharing and team collaboration

Microsoft SharePoint Online

type: Secrets Detection for Productivity Tools

category: Integration

Learn More Collaboration platform to manage documents, share information, and streamline workflows

Microsoft Teams

type: Secrets Detection for Productivity Tools

category: Integration

Learn More Unified communication and collaboration platform

Slack

type: Secrets Detection for Productivity Tools

category: Integration

Learn More Cloud-based messaging app and platform

Secure Code Management

Azure DevOps Cloud

type: Secure Code Management

category: Integration

Learn More Version control with project management tools.

Azure DevOps Server

type: Secure Code Management

category: Integration

Learn More Collaboration tools for software development.

Bitbucket Cloud

type: Secure Code Management

category: Integration

Learn More Git repository hosting in the cloud.

Bitbucket Server

type: Secure Code Management

category: Integration

Learn More On-premises source control with Git.

Gerrit

type: Secure Code Management

category: Integration

Learn More Code collaboration tool based on Git.

GitHub

type: Secure Code Management

category: Integration

Learn More Hosting for software development and version control.

GitHub Enterprise Server

type: Secure Code Management

category: Integration

Learn More Enterprise solution for on-premises hosting.

GitLab Cloud

type: Secure Code Management

category: Integration

Learn More Cloud-based version control and CI/CD.

GitLab Self-Managed

type: Secure Code Management

category: Integration

Learn More Self-hosted GitLab for on-premises deployment.

Helix Core Server

type: Secure Code Management

category: Integration

Learn More Version control for large scale development projects.

Unity Version Control

type: Secure Code Management

category: Integration

Learn More Scalable, engine-agnostic version control and source code management tool

Ticketing & Messaging

Asana

type: Ticketing & Messaging

category: Integration

Learn More Organize tasks, track work progress and collaborate effectively

Azure Boards

type: Ticketing & Messaging

category: Integration

Learn More Work tracking with Kanban boards.

ClickUp

type: Ticketing & Messaging

category: Integration

Learn More Collaboration and productivity platform for teams.

Confluence

type: Ticketing & Messaging

category: Integration

Learn More Team collaboration and documentation tool

Elasticsearch

type: Ticketing & Messaging

category: Integration

Learn More Open-source, distributed search and analytics engine

Email

type: Ticketing & Messaging

category: Integration

Learn More

Jira

type: Ticketing & Messaging

category: Integration

Learn More Work and issue tracking tool for teams.

Jira Server / Data Center

type: Ticketing & Messaging

category: Integration

Learn More Issue tracking and project management.

Microsoft Teams

type: Ticketing & Messaging

category: Integration

Learn More Unified communication and collaboration platform

Opsgenie

type: Ticketing & Messaging

category: Integration

Learn More Incident management and alerting platform.

PagerDuty

type: Ticketing & Messaging

category: Integration

Learn More Incident response and management platform.

Slack

type: Ticketing & Messaging

category: Integration

Learn More Messaging and collaboration for teams.

Webhook

type: Ticketing & Messaging

category: Integration

Learn More Customizable alerting and notifications.

Zendesk

type: Ticketing & Messaging

category: Integration

Learn More Customer service and engagement platform.

Vulnerability Management

Nucleus Security

type: Vulnerability Management

category: Integration

Learn More The only Risk-Based Vulnerability Management Platform purpose-built for the world’s most complex enterprises.