Cycode
A platform for security, governance, and pipeline integrity for all your development tools & infrastructure. Harden your source control management systems (SCM), find secrets, leaks and prevent code tampering. Scan your CI/CD settings and Infrastructure-as-Code (IaC) for security misconfiguration. Identify drift between production systems IaC configurations and prevent source code tampering. Stop developers from inadvertently exposing proprietary code in public repositories, fingerprint code assets and proactively identify exposure on public sites. Inventory assets, enforce security policies, and easily demonstrate compliance across all your DevOps tools and infrastructure, both in the cloud and on-premises. Scan IaC for security misconfigurations and ensure compliance between defined IaC configurations and production infrastructure. Scan every commit or pull/merge request for hard-coded secrets and prevent them from reaching the master branch across all SCMs and programming languages.
Learn more
Serpent
Serpent is a Salesforce DevOps platform that removes bottlenecks and accelerates release cycles for Salesforce teams. Its task-based workflow gives a simple, visual interface that needs no Git expertise, so teams can plan, track and deploy features and fixes confidently. Org management is streamlined with instant access to scratch orgs, sandboxes and production environments. Serpent automates deployments of metadata and data in one flow, removing the need for complex scripts or command line tools, and includes built-in version control, audit trails and rollback. It also runs a native MCP server, so AI clients such as Claude and Cursor can plan deploys and open pull requests. Used by 60+ Salesforce teams. Serpent is built by Tekunda (tekunda.com), a Salesforce consulting, ISV and PDO partner that runs Serpent on its own client engagements.
Learn more
CodeCargo
CodeCargo is a GitHub-native control plane for enterprises operating GitHub at scale. It automates what GitHub Actions does not handle on its own. Administration centralizes organization and repository management with role-based access control and a service catalog. Migration moves CI/CD onto GitHub Actions from Jenkins, GitLab CI, CircleCI, Azure DevOps, Bamboo, and Bitbucket, with bulk migration pull requests across hundreds of repositories. Compliance runs a scan on every workflow-file edit, surfaces violations on the pull request, scores each workflow from 0 to 100, detects drift, keeps audit-ready evidence, and opens automated remediation pull requests. CargoWall, an eBPF kernel-level egress firewall for GitHub Actions runners, controls network egress per workflow, per repository, and organization-wide with DNS interception. Chargeback attributes GitHub Actions spend to teams, and developer self-service provides compliant-by-default golden-path pipelines.
Learn more
Versionveil
Versionveil is a realtime vendor change intelligence platform for engineering teams.
It monitors vendors like OpenAI, Stripe, Vercel, Supabase, Anthropic, and Cloudflare, tracking API, pricing, SDK, and infrastructure changes that are usually scattered across changelogs, docs, and status pages.
Versionveil turns these updates into structured alerts with severity, clear summaries, and AI-generated impact analysis explaining what changed and why it matters.
Alerts are routed to Slack, Discord, or email, so the right teams see the right changes fast. Everything is also stored in a searchable history of vendor changes.
It helps teams reduce dependency risk and avoid production surprises from third-party changes.
Learn more