Arnica
Pipelineless SAST, SCA, secrets, and IaC that scans every push and talks to the developer in Slack.
Proof of life. Shipped PR secrets scanning and secrets-in-HEAD detection, June 2026
About Arnica
Arnica skips CI plugins. It watches every branch push, maps the owner, and sends a mitigation in Slack or Teams instead of another Jira pile.
Hybrid AI SAST looks for auth gaps and logic flaws, not only pattern matches, and agentic rules inject policy into Copilot, Cursor, and Claude Code at generation time.
Coverage is claimed on every repo from day one, including ones that never got a pipeline job.
Investors
Joule VenturesFirst Rays Venture Partners
Work at Arnica? Link to this listing
Optional badge for your site or README. It changes nothing about the listing, its order or its review. Other formats and a dark version: press kit.
<a href="https://securitystartups.com/companies/arnica"><img src="https://securitystartups.com/badge/listed.svg" alt="Listed on Security Startups" width="184" height="44"></a>