devsecops
(143)
Kumar Chivukula and the Work After the Code
At Adobe and Symantec, Kumar Chivukula learned how much work stands between writing software and shipping it. At Opsera, he is building a business around that stubborn distance - and watching AI make it matter all over again.
Veracode and the art of fixing what you find
Finding a software flaw is easy to celebrate. Getting it fixed is the harder business Veracode has spent two decades learning to sell.
Aretum knows where the paperwork goes
A federal contractor built through acquisitions has a revealing idea about AI: start with the people who know why the paperwork gets stuck.
The military has a connection problem. Sigma builds the missing links.
A sensor can see everything and still tell the wrong person nothing. Sigma Defense builds the software and networks that help military information reach the people who need it.
Sysdig watches what happens next.
A cloud can look perfectly safe on paper. Sysdig built its business around the trouble that starts when the software runs.
REI Systems makes the paperwork move
A grant is a promise. Getting it to the right people takes software, patience, and a surprising amount of plumbing. REI Systems has built a business around that gap.
Comtrade 360 makes the difficult part work
A Windows drive at CERN. Half a million documents at HPE. Comtrade 360 builds its business where software meets the awkward details of real life.
Synergy’s big idea: borrow what works.
Government software has a habit of outliving its welcome. Synergy helps federal agencies replace it by adapting proven platforms, connecting the awkward parts, and bringing users along.
Data Intensity makes the cloud decision less cloudy
For companies running Oracle, the expensive question is what to keep, what to move, and who will answer when it breaks. Data Intensity has built a business around all three.
GRSi keeps the science running
Behind a research breakthrough sits a less glamorous achievement: technology that works. GRSi built a federal contracting business around that problem. DLH paid $185 million to bring it inside.
Defense Unicorns makes software work off the grid
A fighter jet can carry modern software and still be hard to update. Defense Unicorns is building the delivery system for the places the internet cannot follow.
Catalyst Campus makes the Pentagon a little easier to meet
Inside a former railroad depot in Colorado Springs, small technology companies get closer to the people who might actually use their inventions. The hard part comes after the introduction.
Second Front sells the government a shorter wait
Useful software can spend longer waiting for permission than being built. Second Front turns that queue into a business, with an accredited platform that helped one Air Force supplier get through in 58 days.
Cycode and the art of fixing the right problem
A security alert is easy to produce and surprisingly hard to act on. Cycode has built its business around the missing connections between vulnerable code, the people who own it, and the software that actually runs.
Seal Security fixes the flaw. You keep the software.
A vulnerable dependency can turn a tiny security fix into a sprawling migration. Seal Security sells a way to patch the code you already run, while leaving the grand renovation for another day.
Innovative Defense and the art of testing again
A Navy software update can be ready long before the fleet can use it. Innovative Defense Technologies has built a business around shortening the distance between working code and proven capability.
ReversingLabs asks the awkward question: what’s inside your software?
A trusted vendor can still ship an untrustworthy file. ReversingLabs takes finished software apart, giving buyers and builders a way to inspect the bargain before they run it.
Progress Chef: Why 10,000 servers need a recipe
The hard part of running a fleet of computers is getting them to agree. Progress Chef turns configuration and compliance into code - and makes a business of checking whether the machines obey.
Seezo wants to catch the flaw before you write the code
Software teams can ship faster than security teams can read. Seezo turns the plans they already write into security reviews - and gives humans a way to challenge the machine.
Invicti and the expensive art of being believed
A security scanner can find a flaw. Getting someone to fix it is another business entirely. Invicti has built its application security platform around the evidence that travels between the two.
Parasoft and the Art of Not Waiting
A bank loses five days a month waiting to test its software. Parasoft’s answer is to build a convincing substitute for the system everyone is waiting for - and get on with the work.
ArmorCode and the Trouble with Finding Everything
Security tools are excellent at finding trouble. ArmorCode has built a business around the awkward next question: who is going to fix it?
Armory and the art of the uneventful release
Armory made a business of helping companies ship software without holding their breath. Its journey from a Belmont garage to a Harness asset deal reveals why safe deployments need more than a faster button.
Apiiro and the Case of the Missing Context
The scanner found the flaw. The hard part was finding the person, the production path and the reason to act. Apiiro built its business around that missing context.
The Security Alert That Never Needed Fixing
Endor Labs built a business around a costly question: does the vulnerable code ever run? As AI agents start writing and installing software, that question has moved from the backlog to the developer’s desk.
The Security Scanner That Learned to Follow the Plot
Escape began by asking a narrow question about GraphQL security. Six years later, it is betting that a scanner must understand the story an application tells - and catch the moment one user starts reading another user's chapter.
The App Was Already Inside the Phone
Quokka began by finding trouble in mobile apps. Now it checks the software already installed before a device reaches its owner - a revealing expansion of what mobile security has to mean.
The Phone Wasn't the Problem. The App Was.
Blue Cedar made a bet that companies cannot control every phone carrying their data. Its answer is to put the guardrails inside the mobile app - then make the release process repeatable.
Doppler and the Tiny File That Became Everyone's Problem
A developer's nuisance grew into a company with a large ambition: make the credentials behind modern software easy to find, change, and govern before one forgotten key causes a very public mess.
The Security Scanner That Wants to Finish the Job
Lineaje began with a small heresy: finding vulnerable code is the easy part. Its larger bet is to trace every ingredient, judge the real risk, and send back a repair that does not wreck the build.