Checkmarx provides a platform for securing application development from code to cloud across various sectors. The company's offerings include static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and tools for API security, container security, infrastructure as code security, and malicious package protection. Checkmarx serves a range of industries, with an aim to integrate security within the software development lifecycle. It was founded in 2006 and is based in Paramus, New Jersey.

Veracode provides application security solutions across sectors, including government, financial services, software, technology, retail, and healthcare. The company offers services for the software development life cycle, including vulnerability detection, static and dynamic application security testing, software composition analysis, container security, application security posture management, and penetration testing. Veracode's platform integrates into development processes, providing feedback and remediation supported by artificial intelligence to improve developer efficiency and security. It was founded in 2006 and is based in Burlington, Massachusetts.

Mend focuses on application security within the cybersecurity industry. Its main offerings include a platform for managing application security risks, including tools for scanning source code, managing open source security, ensuring compliance, securing containerized applications, and analyzing artificial intelligence (AI) model risks. Mend's solutions serve developer and security teams, offering automated dependency updates, dynamic testing, and a framework for software supply chain security. Mend was formerly known as White Source. It was founded in 2011 and is based in Givatayim, Israel.

Aikido operates as a security platform that focuses on code and cloud security, offering tools for vulnerability detection and compliance automation. The company provides services such as static and dynamic application security testing, infrastructure as code scanning, and automated fixes for identified security issues. Aikido's solutions integrate into the development process, providing feedback and protection for applications and their underlying cloud infrastructure. It was founded in 2022 and is based in Ghent, Belgium.

Chainguard operates within the cybersecurity and software supply chain security sectors. The company offers hardened container images that aim to reduce vulnerabilities and integrate into security processes. Its solutions provide tools for vulnerability remediation, compliance, and risk mitigation, and the security of artificial intelligence and machine language workloads. It was founded in 2021 and is based in Kirkland, Washington.

Sonatype operates in software supply chain management and security within the technology sector. The company provides products that automate the software development lifecycle (SDLC), including tools for managing open-source components and ensuring compliance with security and legal standards. Sonatype serves sectors such as government, financial services, manufacturing, technology, and healthcare. It was founded in 2008 and is based in Fulton, Maryland.