CodeLock provides a platform that establishes a forensic chain of custody for software from development through deployment. It ensures code authenticity and integrity by linking every change to its developer, offering tamper-proof records. This solution enhances security visibility, streamlines compliance reporting, and automates Software Bill of Materials (SBOM) generation.
Funding
$6.7M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
VIFounders
Product
Problem
Software development pipelines are vulnerable to unauthorized code changes, malware threats, and insider threats, which can compromise software integrity and lead to security breaches. Traditional Abstract Syntax Trees (ASTs) are insufficient for detecting the vast majority of known and emerging malware. Meeting stringent regulatory compliance requirements adds further complexity and costs to the software development lifecycle.
Solution
CodeLock provides a platform that ensures software integrity and simplifies compliance by creating a forensic chain of custody for code changes, linking each modification to its developer. The platform integrates with IDEs and repositories to provide continuous visibility across the development pipeline, ensuring code authenticity and integrity from development to deployment. CodeLock enhances application security testing (AST) by safeguarding against malware that breaches the firewall, offering real-time alerts and precise change identification to streamline incident management. The platform also automates the generation of Software Bill of Materials (SBOM), providing insights into software components for transparency, security, and compliance.
Target Audience
CodeLock targets software development teams, security professionals, and compliance officers concerned with software supply chain security, regulatory adherence, and protection against insider and external threats.
Features
- Forensic chain of custody that links every code change to its developer, creating a transparent, tamper-proof record.
- Real-time alerts and precise change identification to enhance AST and streamline incident management.
- Automated Software Bill of Materials (SBOM) generation for comprehensive insights into software components.
- Continuous developer authentication and nonrepudiation features to prevent unauthorized changes and mitigate insider threats.
- Detailed audit trails and historical data for rapid identification of the root cause of security incidents and streamlined forensic investigations.
- Third-party software component monitoring to ensure compliance with organizational security standards.
- DevSecOps integration to embed security into DevOps processes, fostering collaboration between development, security, and operations teams.
- Thin-client SaaS architecture for frictionless, zero-latency integration without extensive IT knowledge or dedicated SysAdmin.