All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Founded in 2019, Cycode sells enterprise security teams an application security platform that scans source code, open-source dependencies, exposed credentials, and build pipelines and collects findings from other security tools. In 2026 it added ADLC Security, a product that identifies the AI coding assistants developers use and blocks sensitive data in their prompts to outside AI services. Cycode's named customers include UBS, Unity, Elastic, and StoneX. Insight Partners led its $56 million Series B in 2021, bringing its funding to $81 million. A customer leaving Cycode may have to reconnect the tool integrations it set up and rebuild Cycode's map linking its code to production. GitHub, which Cycode compares itself against, could bundle similar scanning into its developer platform.
| Description | Cycode sells an application security platform that combines code scanning, software supply chain security, and risk posture management with controls over the AI coding tools developers use. | [f1] |
|---|---|---|
| Founded | 2019 | [f2] |
| HQ | Tel Aviv, Israel | [f3] |
| Funding | $81M total | [f4] |
| Latest funding | Series B, $56M (2021) | [f4] |
| Deployment | SaaS, Self-hosted | [f5] |
| Product | What it does |
|---|---|
| Cycode | Cycode: Agentic development security that inventories AI models, MCP servers, and code assistants across repositories and applies IDE and CLI guardrails to AI coding agents. |
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Cycode is agentic development security that inventories AI models, MCP servers, and code assistants across repositories and applies IDE and CLI guardrails to AI coding agents. It is mapped to the AI Defense Matrix. [f6]
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Cycode provides application security posture management and software supply chain security. This conventional security is mapped to the Cyber Defense Matrix. [f7]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 4/5 | Cycode names its buyer as the security team that owns the code developers and AI coding tools produce. CTech quantified the pain with an EU cybersecurity agency projection of a 400% rise in supply chain attacks from 2020 to 2021 and a Gartner forecast that 45% of organizations would face them by 2025. IT Security Guru reported in June 2026 that Gartner created a dedicated Magic Quadrant for software supply chain security, and AppSec Santa frames the same buyer need. [s6, s27, s8] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 4/5 | Cycode documents native code, dependency, secrets, container, infrastructure-as-code, and pipeline scanning plus AI-tool guardrails on its product pages, and AppSec Santa independently describes the cross-file dataflow analysis in its SAST engine. The open-source Bearer CLI, from the company whose SAST engine Cycode acquired, is public on GitHub with 2.8k stars and 157 forks. The reduction of more than 94% in false positives versus selected alternatives comes from Cycode’s own benchmark run, so it does not count as independent validation. [s1, s2, s8, s26] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | IT Security Guru reported in June 2026 that Gartner's first Magic Quadrant for software supply chain security signals that analysts regard the field as a mature, standalone discipline, and that the EU Cyber Resilience Act now mandates software component transparency. Both signals rest on that one article, built around Black Duck's announcement, so buyer-side demand is documented by a single source. Cycode's own launch argues that AI agents now write and deploy code at machine speed, a credible enabler for its ADLC Security product. [s27, s16] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 | CTech identifies co-founders Lior Levy, a former Symantec solutions architect, and Ronen Slavin, a serial entrepreneur who serves as chief technology officer, and Cycode lists Dor Atias as a third co-founder and its chief product officer. That is verifiable in-domain experience, and no earlier product build or exit by a founder appears in the reviewed sources. [s6, s3, s5] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 4/5 | Cycode presents customer case studies from StoneX, Unity, Uphold, Kyriba, Zebra, and theScore, and AppSec Santa relays that Cycode names NielsenIQ, Cribl, UBS, and Elastic as customers. CTech reported Grubhub, Databricks, Copart, and Rapyd as customers in 2021, and Cycode displays a 2026 Leader placement in Gartner’s software supply chain security Magic Quadrant. CTech reported dozens of customers in 2021, but the more recent named references come from Cycode itself, so current customer scale is not independently corroborated. [s14, s8, s6, s17] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | Cycode raised $81 million through a 2021 Series B that Insight Partners led, and Tracxn lists that round as its latest. Cycode has kept shipping since that round, acquiring Bearer in 2024 and releasing ADLC Security in 2026, and that output separates it from a stale raise with no step forward. The funding appears proportionate to Cycode’s enterprise sales and product releases, while output per dollar remains unconfirmed in the cited sources. [s7, s21, s8, s16] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | AppSec Santa places Cycode among application security posture management platforms, and IT Security Guru reports that Gartner created a dedicated software supply chain security Magic Quadrant in 2026. Cycode’s Leader placements in that report and in IDC’s posture-management MarketScape appear on Cycode’s own pages. Cycode markets its platform as agentic development security, and the independent sources in the record place Cycode in the category without naming it a leader. [s8, s27, s1, s17] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Cycode’s native scanners, the ConnectorX integrations a customer sets up from a catalog of more than 100, and the context graph Cycode builds for each customer add friction to absorption. GitHub can bundle code scanning through GitHub Advanced Security, which Cycode lists as a comparison on its own site. [s8, s1, s26] |
Cycode sells to the enterprise security team that owns the code its developers ship, and it now frames that code as written by people and AI coding tools alike. The company scans source code, open-source dependencies, secrets, and build pipelines, and its ADLC Security product discovers the AI coding assistants, models, and MCP servers developers use and applies policy to them.
The supply chain problem has independent quantification. CTech cited an EU cybersecurity agency projection of a 400% rise in supply chain attacks from 2020 to 2021 and a Gartner forecast that 45% of organizations would face software supply chain attacks by 2025. IT Security Guru reported in June 2026 that the EU Cyber Resilience Act mandates software component transparency.
Cycode itself supplies the evidence for the AI-development problem. It argues in its March 2026 release that security built for human-paced development cannot protect an AI-driven software factory, and the independent figures above concern supply chain attacks in general. [s1, s2, s6, s27, s8]
Cycode pairs its own scanners with an integration layer. It runs native SAST, software composition analysis, secrets detection, container, and infrastructure-as-code scanning, and AppSec Santa reports that ConnectorX adds more than 100 integrations for third-party security and DevOps tools. AppSec Santa also describes the Context Intelligence Graph, which maps code-to-runtime context and answers natural-language questions.
The SAST engine came from Cycode’s 2024 acquisition of Bearer. AppSec Santa describes it as cross-file dataflow analysis, and Bearer’s open-source CLI remains public on GitHub, with Bearer Pro sold through Cycode. In Cycode’s own OWASP Benchmark run, the engine reported a 2.1% false-positive rate, and AppSec Santa notes that the figures are not an independent evaluation.
The AI-development layer adds discovery, policy, and real-time guardrails. Cycode intercepts prompts, file reads, and tool calls in developers’ code editors and command-line tools before sensitive data reaches external AI services. Workstation Protection evaluates npm and pip installs before package code runs. Maestro coordinates Cycode’s own agents across scanning, triage, investigation, and remediation. [s1, s2, s8, s22, s26, s16]
Cycode competes for the enterprise application-security budget against both scanner vendors and posture-management platforms. Its site lists comparisons against Snyk, Checkmarx, Veracode, and GitHub Advanced Security, and AppSec Santa names Apiiro, ArmorCode, Snyk AppRisk, and Aikido as alternatives that cover overlapping ground.
AppSec Santa places Cycode in the group that both runs its own scanners and aggregates findings from other tools, and it calls Cycode’s supply chain depth unusual among posture-management platforms. Cycode displays a 2026 Leader placement in Gartner’s first Magic Quadrant for software supply chain security, which assessed 18 vendors, and it displays a Leader placement in IDC’s posture-management MarketScape.
In AI-development security, Cycode builds on its established application-security business. Cycode markets its platform as agentic development security, and GitHub, which Cycode lists as a comparison, sells its own code-security product, GitHub Advanced Security. [s1, s8, s9, s17, s27, s26]
Cycode backs its sales with named customer references. Its customers page presents case studies from StoneX, Unity, Uphold, Kyriba, Zebra, and theScore, among others, and AppSec Santa relays that Cycode names NielsenIQ, Cribl, UBS, and Elastic as customers.
Earlier coverage dates the roster. CTech reported in 2021 that Cycode had signed dozens of customers since it began selling in 2020, including Grubhub, Databricks, Copart, and Rapyd, and SecurityWeek recorded the company’s claim that annual recurring revenue grew sevenfold over 2021’s first three quarters.
Cycode sells through demos and quotes. AppSec Santa reports that every commercial tier sits behind a quote or demo form, and Cycode’s pricing page prices by active developer count and AI usage. Cycode displays a 2026 Leader placement in Gartner’s software supply chain security Magic Quadrant on its homepage. [s14, s8, s9, s6, s7, s1, s13]
Cycode’s founders have led the company since its 2019 founding. CTech identifies chief executive Lior Levy as a former Symantec solutions architect and chief technology officer Ronen Slavin as a serial entrepreneur, and Cycode lists Dor Atias as a third co-founder and its chief product officer.
Cycode has added leaders beyond the founders. Cycode lists Seth Robbins as president and chief revenue officer, and TechCrunch reported in 2021 that the company had just under 60 employees.
No earlier founder exit or named prior product build appears in the reviewed sources, which places the team at verifiable operating experience. Insight Partners led the 2021 round with YL Ventures participating. [s6, s3, s5, s20]
Cycode publishes the attestations an enterprise code-security buyer expects, which matters because the product reads source code, secrets, pipelines, and AI tool configurations. Its trust page reports a completed third-party SOC 2 Type II audit, ISO 27001 certification by a third party, a CSA STAR Level 1 self-assessment attestation, GDPR commitments, and a bug bounty program.
The trust page also sets out data-handling terms. Enterprise SaaS customers choose EU or US data residency on AWS or Google Cloud, any customer can sign a data processing addendum, and Cycode retains customer data for the contract term plus a limited retrieval period. Customers who need more control can run Cycode Enterprise Server on a private cloud or on premises.
An NVD keyword search for Cycode returns no CVE records. That search is insufficient to rule out vulnerabilities in acquired components or issues without CVE records. [s4, s12]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Snyk | competes with | Cycode’s site lists a comparison against Snyk, and AppSec Santa names Snyk AppRisk as an alternative to Cycode. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| Checkmarx | competes with | Cycode’s site lists a comparison against Checkmarx for the same application-security buyer. | |
| Veracode | competes with | Cycode’s site lists a comparison against Veracode for the same application-security buyer. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| Apiiro | competes with | AppSec Santa names Apiiro as an alternative posture-management platform to Cycode. | |
| Aikido Security | competes with | AppSec Santa names Aikido as an alternative to Cycode for smaller teams that want published pricing. | |
| ArmorCode | competes with | AppSec Santa names ArmorCode as an alternative to Cycode for teams that want correlation without native scanning. | |
| Semgrep | competes with | Competes for the enterprise buyer of static code scanning that Cycode’s SAST engine also serves. | |
| Salt Security | adjacent | Adjacent vendor competing for the broader application-security budget. | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
| GitHub | adjacent | Cycode’s site lists a comparison against GitHub Advanced Security, the code-security product of the developer platform. |
Add analyzed competitors to compare them side by side with Cycode.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
reinforce or reposition
A customer that has connected Cycode’s scanners and integrations across its repositories and pipelines may have to rebuild that coverage, and the context Cycode’s graph holds for it, in order to leave. A funded rival can also earn its SOC 2 Type II and ISO 27001 attestations. Cycode runs its own proprietary scanning engines. It does not disclose a dataset that accumulates across its customers. GitHub could bundle comparable code scanning into its developer platform.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Cycode sells software that customers’ security teams configure, from scanning policies to AI-tool allowlists. Cycode hosts it as SaaS or customers run Enterprise Server themselves, which is the software-product level of delivery. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Leaving Cycode means reconnecting its scanners and whichever ConnectorX integrations the customer set up from a catalog of more than 100. The customer would also rebuild the code-to-runtime context Cycode’s graph holds for it, which is meaningful friction. Its guardrails sit in developers’ prompt, tool-call, and package-install paths, and the cited record does not size what migrating them would take. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 | Cycode’s trust page lists SOC 2 Type II, ISO 27001, a CSA STAR Level 1 self-assessment attestation, and GDPR commitments, assurance a funded rival can obtain through ordinary enterprise preparation. No federal authorization or product-specific mandate appears on that page. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | AppSec Santa describes Cycode’s SAST engine as cross-file dataflow analysis, and Cycode runs it beside dependency, secrets, container, and pipeline scanning, a code-to-runtime graph, and guardrails that inspect AI prompts and tool calls in real time. Building that stack takes years of program-analysis and security engineering. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Cycode’s case studies include StoneX and Kyriba, and AppSec Santa relays UBS among the customers Cycode names. Cycode describes giving Kyriba visibility to meet rigorous compliance standards. Those financial-sector enterprises buy through quotes and demos, which places Cycode’s buyer class at regulated enterprises. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 | Cycode is a platform with application features that scans code and pipelines and reports posture outside the path of production traffic. Its AI guardrails and Workstation Protection act on prompts, tool calls, and package installs, and the cited record shows no customer deployment of those optional components, so they do not make the platform infrastructure. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 | The cited record names no retained dataset, licensed content, or granted patent that Cycode accumulates. Its Context Intelligence Graph maps each customer’s code-to-runtime context without any record of accumulating across customers. The Bearer scanner is public open source. Cycode describes a malicious-package feed for Workstation Protection without identifying its data sources in the cited pages. |
Cycode sells to the enterprise security team that owns application code. Its case studies include StoneX, Kyriba, Uphold, Unity, Zebra, and theScore, and AppSec Santa relays UBS, NielsenIQ, Cribl, and Elastic among the customers Cycode names.
The buyer is an enterprise security team that purchases through quotes and demos. AppSec Santa reports that every commercial tier sits behind a quote or demo form, and it describes Cycode’s best fit as security teams that need supply chain protection alongside posture management, especially for pipelines and secrets.
The AI-development line reaches the same buyer. Cycode prices ADLC Security as its own plan for visibility, governance, and guardrails over AI coding tools, and lists that plan alongside its scanning and posture plans.
Cycode’s deepest capability is its own scanning stack. AppSec Santa describes Cycode’s source-code scanner, acquired with Bearer in 2024, as tracking data flows across files. Cycode also runs dependency, secrets, container, and infrastructure-as-code scans. Bearer’s open-source command-line tool is public on GitHub with 2.8k stars.
The AI-development controls work inside developers’ tools. Cycode intercepts prompts, file reads, and tool calls in code editors and command-line tools before sensitive data reaches external AI services. Security teams can inventory AI assistants and models and set allowlists and approval workflows. Workstation Protection checks npm and pip installs against a feed of known-malicious packages before package code runs.
Cycode also applies AI to its own security work. Maestro orchestrates Cycode agents to identify, triage, and remediate exploitable vulnerabilities. AppSec Santa reports that the Context Intelligence Graph answers natural-language questions about security posture. The reduction of more than 94% in false positives versus selected alternatives Cycode publishes comes from its own OWASP Benchmark run, so it carries no outside validation.
Cycode runs a demo-led enterprise sale with a free trial available. AppSec Santa reports that Cycode publishes a self-serve trial of the full platform while every commercial tier sits behind a quote or demo form.
Cycode publishes customer case studies from StoneX, Unity, Uphold, Kyriba, Zebra, and theScore. AppSec Santa relays that Cycode names NielsenIQ, Cribl, UBS, and Elastic as customers. CTech reported Grubhub, Databricks, Copart, and Rapyd as customers in 2021.
Cycode markets analyst recognition alongside its customers. It displays a 2026 Leader placement in Gartner’s first Magic Quadrant for software supply chain security, and its own blog cites the June 2026 Gartner report by name.
Cycode prices by active developer count and AI usage, and it publishes no dollar amounts. Its pricing page lists plans for ADLC Security, code security, software supply chain security, posture management, and a combined Cycode Complete plan, each available by quote. Cycode also lists usage-based pricing for its AI agents.
A buyer can start with one area and expand. A team can buy software supply chain security or ADLC Security alone, and Cycode Complete bundles all four areas with Cycode AI Pro. AppSec Santa reports that Cycode offers a free trial and a standalone source-code leakage module.
Cycode delivers software that the customer’s security team configures and operates. The team sets scanning policies, AI-tool allowlists, and approval workflows, while Cycode hosts the platform as SaaS or the customer runs Cycode Enterprise Server on a private cloud or on premises.
Some controls run in developers’ own tools. Cycode’s hooks and MCP server act inside the IDE and command line before prompts and tool calls reach external AI services. Teams deploy Workstation Protection through device management to evaluate package installs on developer machines.
AppSec Santa describes getting started as installing the Cycode command-line tool, connecting repositories, and adding ConnectorX integrations, steps the customer’s own team performs.
Cycode publishes the attestation set enterprise code-security buyers expect, which matters because the product reads source code, secrets, pipelines, and AI tool configurations. Its trust page reports a completed SOC 2 Type II audit, ISO 27001 certification by a third party, a CSA STAR Level 1 self-assessment attestation, GDPR commitments, and a bug bounty program.
The same page sets out data-handling terms a reviewer can check. SaaS customers choose EU or US data residency on AWS or Google Cloud, every customer can sign a data processing addendum, retention runs for the contract plus a limited retrieval period, and Enterprise Server supports private-cloud and on-premises deployment.
An NVD keyword search for Cycode returns no CVE records. That search is insufficient to rule out vulnerabilities in acquired components or issues without CVE records. No federal authorization appears on the trust page.
Cycode positions itself as one platform for application security, software supply chain security, posture management, and AI-development security. Cycode describes those areas in its May 2026 release as unified under a single graph and agent engine, and its homepage frames the scanners as converged across testing, supply chain, posture, and AI-development controls.
The platform reaches outward through integrations. AppSec Santa reports more than 100 ConnectorX integrations for third-party scanners and DevOps tools, and Cycode’s AI controls connect to IDEs, the command line, and MCP servers.
A customer that consolidates its application-security work on Cycode raises its own cost of leaving. Cycode connects to GitHub repositories, and GitHub sells its own code-security product, GitHub Advanced Security, which Cycode lists as a comparison, so a GitHub customer can weigh that product against Cycode.
Cycode’s co-founders have run the company since 2019. CTech identifies chief executive Lior Levy as a former Symantec solutions architect and chief technology officer Ronen Slavin as a serial entrepreneur, and Cycode lists Dor Atias as a third co-founder and chief product officer.
The company added commercial leadership as it grew. Cycode names Seth Robbins as president and chief revenue officer, and TechCrunch reported just under 60 employees at the 2021 Series B, which Insight Partners led with YL Ventures participating.
No earlier founder exit or named prior product build appears in the reviewed sources, which document in-domain operating experience.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Cycode: ADLC Security general availability press release | official | 2026-10-23 |
| f2 | CTech (Calcalist) on Cycode founding and Series B | press | 2026-10-23 |
| f3 | Tracxn: Cycode company profile | research | 2026-10-23 |
| f4 | SecurityWeek on Cycode Series B | press | 2026-10-23 |
| f5 | AI Defense Matrix Catalog entry | other | 2026-06-10 |
| f6 | AI Defense Matrix Catalog mapping | other | 2026-06-23 |
| f7 | Cycode platform | official | 2026-06-14 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Cycode: homepage “The leader in agentic development security” | official | 2026-10-23 |
| s2 | Cycode: ADLC Security product page “Discover AI code assistants, models, infrastructure, MCP servers, packages, secrets, rule files, and skills across your software factory.” | official | 2026-10-23 |
| s3 | Cycode: About us page “Lior Levy Co-Founder & CEO Ronen Slavin Co-Founder & CTO Dor Atias Co-Founder & CPO Seth Robbins President & CRO” | official | 2026-10-23 |
| s4 | Cycode: Security and trust page “Cycode has completed a full third-party SOC 2 Type II audit. An independent auditor has evaluated our product, infrastructure, and policies to certify that Cycode complies with their stringent requirements.” | official | 2026-10-23 |
| s5 | Cycode: Agentic Development Security Platform press release “SAN FRANCISCO — March 23, 2026” | official | 2026-10-23 |
| s6 | CTech (Calcalist): Cycode Series B article “Cycode was founded in 2019 by CEO Lior Levy, a former Solutions Architect at Symantec, and serial entrepreneur Ronen Slavin, who serves as the company’s CTO.” | press | 2026-10-23 |
| s7 | SecurityWeek: Cycode Series B article “Cycode, a startup that specializes in source code security, on Tuesday announced raising $56 million in a Series B funding round.” | press | 2026-10-23 |
| s8 | AppSec Santa: Cycode review “Updated August 21, 2026” | press | 2026-10-23 |
| s9 | AppSec Santa: Cycode review, pricing and alternatives sections “Cycode does not publish list pricing on cycode.com — every commercial tier sits behind a “request a quote” or “book a demo” form, which is typical for enterprise ASPM.” | press | 2026-10-23 |
| s12 | National Vulnerability Database: CVE API keyword search for Cycode “"resultsPerPage":0,"startIndex":0,"totalResults":0” | research | 2026-10-23 |
| s13 | Cycode: Pricing page “Pricing is based on your active developer count and AI usage to deliver predictability with the flexibility to scale.” | official | 2026-10-23 |
| s14 | Cycode: Customers page “Join the leaders that trust Cycode See how our customers use Cycode to build and deliver secure applications” | official | 2026-10-23 |
| s16 | Cycode: ADLC Security general availability press release “SAN FRANCISCO, May 12, 2026” | official | 2026-10-23 |
| s17 | Cycode: Blog post on the 2026 Gartner Magic Quadrant for Software Supply Chain Security “We’re proud to share that Cycode has been named a Leader in the Gartner® Magic Quadrant™ for Software Supply Chain Security (SSCS), 2026.” | official | 2026-10-23 |
| s20 | TechCrunch: Cycode Series B article “Cycode currently has just under 60 employees, with plans for doubling that by the middle of next year, including an expanded sales and marketing team in the U.S.” | press | 2026-10-23 |
| s21 | Tracxn: Cycode company profile “Cycode is a series B company based in Tel Aviv (Israel), founded in 2019 .” | research | 2026-10-23 |
| s22 | Cycode: Workstation Protection product page “Cycode Workstation Protection blocks malicious packages before developers or agents install them.” | official | 2026-10-23 |
| s26 | GitHub: Bearer repository “Bearer is a static application security testing (SAST) tool designed to scan your source code and analyze data flows to identify, filter, and prioritize security and privacy risks.” | official | 2026-10-23 |
| s27 | IT Security Guru: Article on the Gartner Magic Quadrant for Software Supply Chain Security “June 22, 2026” | press | 2026-10-23 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Cycode: homepage “The leader in agentic development security” | official | 2026-10-23 |
| s2 | Cycode: ADLC Security product page “Discover AI code assistants, models, infrastructure, MCP servers, packages, secrets, rule files, and skills across your software factory.” | official | 2026-10-23 |
| s3 | Cycode: About us page “Lior Levy Co-Founder & CEO Ronen Slavin Co-Founder & CTO Dor Atias Co-Founder & CPO Seth Robbins President & CRO” | official | 2026-10-23 |
| s4 | Cycode: Security and trust page “Cycode has completed a full third-party SOC 2 Type II audit. An independent auditor has evaluated our product, infrastructure, and policies to certify that Cycode complies with their stringent requirements.” | official | 2026-10-23 |
| s5 | Cycode: Agentic Development Security Platform press release “SAN FRANCISCO — March 23, 2026” | official | 2026-10-23 |
| s6 | CTech (Calcalist): Cycode Series B article “Cycode was founded in 2019 by CEO Lior Levy, a former Solutions Architect at Symantec, and serial entrepreneur Ronen Slavin, who serves as the company’s CTO.” | press | 2026-10-23 |
| s7 | SecurityWeek: Cycode Series B article “Cycode, a startup that specializes in source code security, on Tuesday announced raising $56 million in a Series B funding round.” | press | 2026-10-23 |
| s8 | AppSec Santa: Cycode review “Updated August 21, 2026” | press | 2026-10-23 |
| s9 | AppSec Santa: Cycode review, pricing and alternatives sections “Cycode does not publish list pricing on cycode.com — every commercial tier sits behind a “request a quote” or “book a demo” form, which is typical for enterprise ASPM.” | press | 2026-10-23 |
| s12 | National Vulnerability Database: CVE API keyword search for Cycode “"resultsPerPage":0,"startIndex":0,"totalResults":0” | research | 2026-10-23 |
| s13 | Cycode: Pricing page “Pricing is based on your active developer count and AI usage to deliver predictability with the flexibility to scale.” | official | 2026-10-23 |
| s14 | Cycode: Customers page “Join the leaders that trust Cycode See how our customers use Cycode to build and deliver secure applications” | official | 2026-10-23 |
| s16 | Cycode: ADLC Security general availability press release “SAN FRANCISCO, May 12, 2026” | official | 2026-10-23 |
| s17 | Cycode: Blog post on the 2026 Gartner Magic Quadrant for Software Supply Chain Security “We’re proud to share that Cycode has been named a Leader in the Gartner® Magic Quadrant™ for Software Supply Chain Security (SSCS), 2026.” | official | 2026-10-23 |
| s20 | TechCrunch: Cycode Series B article “Cycode currently has just under 60 employees, with plans for doubling that by the middle of next year, including an expanded sales and marketing team in the U.S.” | press | 2026-10-23 |
| s22 | Cycode: Workstation Protection product page “Cycode Workstation Protection blocks malicious packages before developers or agents install them.” | official | 2026-10-23 |
| s26 | GitHub: Bearer repository “Bearer is a static application security testing (SAST) tool designed to scan your source code and analyze data flows to identify, filter, and prioritize security and privacy risks.” | official | 2026-10-23 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.