Norma

Norma

Quality Clouds
SecureCodingHub

SecureCodingHub

Secure Coding Hub
+
+

Related Products

  • Gemini Enterprise Agent Platform
    999 Ratings
    Visit Website
  • JetBrains Junie
    12 Ratings
    Visit Website
  • Feroot
    32 Ratings
    Visit Website
  • Aikido Security
    239 Ratings
    Visit Website
  • Airlock Digital
    35 Ratings
    Visit Website
  • DataHub
    10 Ratings
    Visit Website
  • BAND
    3 Ratings
    Visit Website
  • Source Defense
    7 Ratings
    Visit Website
  • FrameworkLTC
    48 Ratings
    Visit Website
  • Apify
    1,441 Ratings
    Visit Website

About

Norma checks AI-generated code against a governed rule library and returns the same verdict every time. It runs in two places. Livecheck evaluates a file or snippet on demand, called from an MCP-capable editor such as Cursor, Claude Code, Windsurf or VS Code. Full Scan audits a whole GitHub or Bitbucket repository, detecting the stack and frameworks without a configuration file, and returns findings ranked by severity with the context needed to fix them. Rules are evaluated by static analysis, so a result does not move between runs. Rule content comes from SOLID design principles and per-stack conventions, and each rule can be switched off where it does not apply. Coverage spans JavaScript, TypeScript, Python, PHP, Java, Node, React and Supabase. The MCP server exposes link_repository, get_rulesets, get_rules_for_ruleset, live_check, get_open_issues and register_applied_actions, with OAuth and is on the Official MCP Registry

About

SecureCodingHub is an interactive secure coding training platform for AppSec teams and engineering organizations. It offers Code Review Challenges — a two-phase find-and-fix flow across 185+ vulnerability types — and Guided Attack Scenarios with 67 step-by-step walkthroughs simulating full attack chains. Challenges are written in production-realistic code across 15 languages and frameworks including JavaScript, TypeScript, Python, Java, C#, Go, React, Vue, Angular, Swift, and Kotlin. Coverage spans OWASP Web, API, Mobile, and Client-Side Top 10. Compliance evidence builds automatically, mapped to PCI DSS 4.0.1, ISO 27001:2022, and EU CRA. Enterprise features include SAML 2.0/OIDC SSO, SCIM 2.0, SCORM 1.2/2004 LMS integration, multi-tenant hierarchy, assignment workflows, and an immutable audit log for QSA, SOC 2, and ISO audits.

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Audience

Engineering, platform and security teams using AI coding agents, and regulated organizations that need an audit record of how generated code was checked.

Audience

Software developers, application security teams, engineering managers, CISOs, compliance officers, and organizations requiring PCI DSS 4.0, ISO 27001, or EU CRA compliance training for their development teams.

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

API

Offers API

API

Offers API

Screenshots and Videos

Screenshots and Videos

Pricing

$199/month
Free Version
Free Trial

Pricing

Contact us
Please contact the vendor for pricing details
Free Version
Free Trial

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Company Information

Quality Clouds
Founded: 1986
United Kingdom
qualityclouds.ai/norma

Company Information

Secure Coding Hub
Founded: 2025
United States
www.securecodinghub.com

Alternatives

Alternatives

Kontra

Kontra

Security Compass
Snort

Snort

Cisco
Bugbot

Bugbot

Cursor
WebStorm

WebStorm

JetBrains

Categories

Categories

Integrations

Azure-AD-External-Identities
Claude Code
Cursor
Google Workspace
Lovable
Model Context Protocol (MCP)
Moodle
Okta
OneLogin
Replit
SAP SuccessFactors

Integrations

Azure-AD-External-Identities
Claude Code
Cursor
Google Workspace
Lovable
Model Context Protocol (MCP)
Moodle
Okta
OneLogin
Replit
SAP SuccessFactors
Claim Norma and update features and information
Claim Norma and update features and information
Claim SecureCodingHub and update features and information
Claim SecureCodingHub and update features and information