NexaStack

A platform for security, governance, and pipeline integrity for all your development tools & infrastructure. Harden your source control management systems (SCM), find secrets, leaks and prevent code tampering. Scan your CI/CD settings and Infrastructure-as-Code (IaC) for security misconfiguration. Identify drift between production systems IaC configurations and prevent source code tampering. Stop developers from inadvertently exposing proprietary code in public repositories, fingerprint code assets and proactively identify exposure on public sites. Inventory assets, enforce security policies, and easily demonstrate compliance across all your DevOps tools and infrastructure, both in the cloud and on-premises. Scan IaC for security misconfigurations and ensure compliance between defined IaC configurations and production infrastructure. Scan every commit or pull/merge request for hard-coded secrets and prevent them from reaching the master branch across all SCMs and programming languages.

Cycloid is an internal developer portal and platform that platform teams customise instead of building from scratch. Branding, sidebar navigation, team and persona pages, resource tabs and concept names all adapt to the organisation. Platform teams set the guardrails once, with SSO, four-layer authorisation, predefined environment types, naming rules, approvals and one audit log. Published Blueprints on Terraform, OpenTofu, Ansible and Helm become golden paths, and developers can also compose their own environments inside the same rules. Developers deploy, run day-2 actions and promote infrastructure and application changes between environments from one portal. The software catalog tracks ownership, relations and DORA metrics, and scorecards rate services. Plugins connect GitHub, GitLab and the major clouds, and jobs run on the Native Runner or existing CI. AI assistants work inside the same checks. Deployment options are SaaS, self-hosted or air-gapped.