Corgea is an AI-native application security platform that scans source code, dependencies, infrastructure-as-code, and container images. It combines multiple security layers, including SAST, secrets detection, and dependency scanning, into a single control plane. The platform targets engineering and security teams that want fewer disconnected scanning tools. Corgea was built to reduce the operational burden that […]
code-review
12 tools selected.
Graphite is a code review and stacked pull request platform built on top of GitHub. It targets engineering teams whose review process slows down when developers must wait for large pull requests to be approved before continuing their work. Instead of one large diff, Graphite lets developers split a feature into a series of small, […]
Socket is a supply chain security platform built to detect and block malicious open-source packages before they reach developer machines, CI/CD pipelines, or production systems. It targets engineering, security, and DevOps teams that rely on npm, PyPI, Go, and RubyGems dependencies. Because modern applications can consist of up to 90% open-source code, Socket focuses on […]
Metabob is a static code analysis tool built to run alongside AI coding agents such as Gemini CLI, Claude Code, and Cursor. It plugs into developer workflows through the Model Context Protocol, known as MCP. The company describes it as an intelligence layer that reviews code while an AI assistant is still generating it. Metabob […]
Mintlify is a documentation platform for software products, APIs, and developer tools. It treats documentation as code, storing content in Git repositories and rendering it from Markdown and MDX files. Engineering and technical writing teams use it to build, host, and maintain developer-facing documentation sites alongside their codebases. The platform parses OpenAPI and Swagger specifications […]
Sweep is an AI coding assistant built specifically for JetBrains IDEs, including IntelliJ IDEA, PyCharm, Android Studio, WebStorm, PhpStorm, and Rider. It combines a next-edit autocomplete model with an in-editor AI agent that can carry out multi-file coding tasks directly inside the IDE. Sweep AI, Inc. originally launched Sweep through Y Combinator’s Summer 2023 batch […]
DeepSource is an automated code health, static analysis, and code security platform from DeepSource Inc. It connects to version control systems such as GitHub, GitLab, and Bitbucket to scan code during pull requests and commits. The tool targets a common problem in engineering teams: manual peer reviews are time consuming and often miss security flaws, […]
Sherlocks AI is a Site Reliability Engineering platform that positions itself as an autonomous on-call teammate. It monitors system alerts and runs root cause analysis across cloud infrastructure, application code, telemetry, and deployment pipelines. Findings are delivered directly into Slack and Microsoft Teams. The platform targets the manual triage work that slows down incident response. […]
Semgrep is an application security platform that combines static analysis, software composition analysis, and secrets detection for development teams. It is built for developers and security teams who need to catch vulnerabilities before code ships. The platform targets a common problem in AppSec tooling: traditional scanners generate too many false positives, which slows down pull […]
Greptile is an AI code review platform built by Tabnam, Inc. It reviews pull requests automatically and aims to catch bugs that slip past human reviewers and static analysis tools. The core mechanism is a graph index of the repository. Greptile maps files, functions, and dependencies, which lets it evaluate a change against the wider […]