Cycode

ASPM with its own SAST, SCA, and pipeline scanners, plus a graph for AI-written code.

Proof of life. Named a Leader in Gartner's first Magic Quadrant for Software Supply Chain Security, June 2026

About Cycode

Cycode is the AppSec platform that also owns the scanners, rather than only aggregating someone else's SARIF. A Risk Intelligence Graph ties findings to owners, pipelines, and runtime, and ADLC Security adds guardrails for coding agents and MCP servers.

The company acquired Bearer in 2024 to deepen privacy-aware SAST.

Investors

Insight PartnersForgepoint CapitalYL Ventures

Work at Cycode? Link to this listing

Optional badge for your site or README. It changes nothing about the listing, its order or its review. Other formats and a dark version: press kit.

<a href="https://securitystartups.com/companies/cycode"><img src="https://securitystartups.com/badge/listed.svg" alt="Listed on Security Startups" width="184" height="44"></a>

Related companies

Aevral

Listed by Better ISMS (same rules as everyone)

Seed
Founded 2026

Security review, handled. Your AI agents keep shipping; Aevral, a security agent, reviews their changes for security problems and suggests the fix, on pull requests and whole-repo scans, live and self-serve. Open-source models, processed in the US today; an EU-only option is announced. By ISMS Copilot.

Live and self-serve at aevral.com, 2026-09-07

Application security Install the GitHub App

Aikido Security

Ghent, Belgium

Series B
$84M raised
Founded 2022

One platform that scans code, cloud, and runtime, then triages and auto-fixes what is actually reachable.

Raised $60M Series B at a $1B valuation, January 2026

Application security

Apiiro

New York, USA

Series B
$135M raised
Founded 2019

Code-to-runtime ASPM graph that ranks material application risk, not every scanner finding.

Joined Chainguard's Athena coalition and made AutoFix free for OSS maintainers, August 2026

Application security