
Best DevSecOps Solution
For solutions that embed application security directly into the development workflow rather than bolting it on afterward — including secure coding practices, policy-as-code enforcement, secrets detection and management, and vulnerability identification integrated into the developer's existing tools and pipelines. Judges will look for how seamlessly security is woven into everyday development activity and how effectively the solution reduces friction between developers and security teams.
7 finalists
-
Teleport Infrastructure Identity Platform
TeleportThe Teleport Infrastructure Identity Platform improves engineering velocity and infrastructure resiliency by establishing a unified identity layer for humans, machines, workloads and AI agents that is cryptographically secured, grants ephemeral, just-in-time privileges with no standing access, and extends identity and access control to agents and MCP tooling through a trusted, ephemeral runtime, making every human, machine, and agentic action auditable and governed.
-
JFrog Self-Healing Supply Chain Security Solution
JFrogJFrog secures the AI-era software supply chain from network edge to production by curating every package developers and agents pull and automatically applying trusted fixes, cutting remediation time from days to hours.
-
Progress Chef 360
Progress SoftwareProgress Chef 360 is a unified DevSecOps platform for automating, orchestrating and governing infrastructure and compliance across hybrid, multi-cloud, on-premises and air-gapped environments.
-
Harness Autonomous SDLC platform, including the Harness Software Delivery Agent and the Harness Security Testing Agent
HarnessHarness’s Software Delivery Agent takes every code change safely to production, the Security Testing Agent finds and fixes risk before it ships, and one governed foundation makes security part of everyday delivery.
-
Cloud Native Application Protection Platform (CNAPP)
Orca SecurityOrca Security’s Cloud Native Application Protection Platform (CNAPP) is an AI-first, agentless-first platform that gives organizations a unified way to secure the applications they build and the cloud environments where those applications run by bringing together cloud workload protection, vulnerability management, application security, and risk visibility across configurations, identities, data, and AI systems.
-
Mend.io
Mend.io is an AI-native application security platform that secures modern software across code and AI from development through runtime, protecting proprietary code, open-source dependencies, containers, AI-generated code, models, agents, and system prompts while using contextual risk prioritization and AI-powered remediation to help security and development teams focus on critical risks, reduce remediation effort, and build, deploy, and operate AI-powered applications securely at scale.
-
Liquibase Secure
LiquibaseLiquibase Secure brings enterprise security and compliance into database change workflows, helping organizations enforce policies, prevent risky changes, and maintain proof of control throughout software delivery.