CISO Tribune

Vendor comparison · 2 companies

Archipelo vs Cycode

Archipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Cycode is the agentic development security platform that unifies visibility, prioritization, and remediation across the software development lifecycle. CISO Tribune files both under Software supply chain security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Archipelo
  • Cycode
Archipelo vs Cycode: Products, Customers and Funding Compared
ArchipeloArchipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage.archipelo.comCycodeCycode is the agentic development security platform that unifies visibility, prioritization, and remediation across the software development lifecycle.cycode.com
What it sells
  • Salmon[1][2][3][4][5]Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage.
  • Agentic Development Security Platform[3][5]Cycode's platform for finding and fixing risk before it reaches production.
  • Maestro[1][3][6]Cycode Maestro orchestrates AI Teammates that assess exposure, analyze exploitability, and generate fixes.
  • Context Intelligence Graph[6]A single shared graph that distills noisy alerts into risks that matter.
  • Cycode SAST[7]Static application security testing (SAST) for code, designed by developers, for developers.
  • ConnectorX[8]Cycode's click and connect ASPM integration platform.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
Not stated on its pages2019[2]
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 3, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Archipelo's Salmon addresses software in which autonomous agents, tools, runtimes, and controllers perform consequential actions. Archipelo describes incident investigation teams as needing to work backward from a consequential state change toward the execution associated with it. Archipelo names systems that investigate, evaluate, govern, and depend upon execution as the systems for which verifiable execution history matters.From its own pages, Cycode sells to large enterprises, with gaming platforms and financial institutions described among them. Cycode also addresses automotive software development. Its pages speak to security and development teams that want to align on application security posture. Cycode offers deployment on public cloud, private cloud, and on-premises environments.
Last verified
September 30, 2026September 27, 2026

Where they overlap

  • Archipelo and Cycode are both filed under Software supply chain security.

Where they differ, field by field

  • Archipelo's primary category is Software supply chain security; Cycode's is Application security posture management.
  • Archipelo is also filed under AI model and agent security and Insider risk management. Cycode is also filed under Static application security testing.
  • Archipelo lists Salmon. Cycode lists Agentic Development Security Platform, Maestro, Context Intelligence Graph, Cycode SAST and ConnectorX.
  • Cycode was founded in 2019.

What it sells: Archipelo

What Salmon does[1][2][3][4][5]
Salmon is Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Execution is represented as a cryptographically signed event with explicit context. Salmon captures execution as it occurs upstream within supported environments.

What it sells: Cycode

What Agentic Development Security Platform does[3][5]
Cycode says it unifies control, context, and autonomy on a single platform. Cycode provides end-to-end controls for the AI layer of the software factory. Customers can deploy on public cloud, or on private cloud and on-premises environments through the Cycode Enterprise Server offering.
What Maestro does[1][3][6]
Cycode says its specialized agents find and fix exploitable risks 17x faster. Cycode says teams can extend agent skills and implement controls with full audit trails.
What Cycode SAST does[7]
Cycode SAST supports a wide range of programming languages and SCMs. Language support covers Java, C#, JavaScript, PHP, Python, Ruby, and Go. SCM support covers GitHub, GitLab, BitBucket, Azure DevOps, and Gerrit.

Questions about Archipelo and Cycode

What do Archipelo and Cycode sell?
Archipelo sells Salmon. Cycode sells Agentic Development Security Platform, Maestro, Context Intelligence Graph, Cycode SAST and ConnectorX.
Are Archipelo and Cycode in the same category?
They share Software supply chain security. Archipelo's primary category is Software supply chain security and Cycode's is Application security posture management.
When were Archipelo and Cycode founded?
Cycode was founded in 2019.
Who are Archipelo and Cycode sold to?
From its own pages, Archipelo's Salmon addresses software in which autonomous agents, tools, runtimes, and controllers perform consequential actions. From its own pages, Cycode sells to large enterprises, with gaming platforms and financial institutions described among them.

About Archipelo

Archipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Archipelo builds Salmon for autonomous multi-actor software systems. Archipelo, Inc. is the company developing and stewarding Salmon.[1][3][4][5]

Archipelo states that autonomous agents, tools, runtimes, and controllers increasingly perform consequential actions themselves. Archipelo states that the resulting state alone cannot show which execution occurred, in what order, or how each state transition derived from the ones before it. Archipelo develops infrastructure that makes autonomous multi-actor software execution independently verifiable. Archipelo states that safe and reliable agents need verifiable evidence of their execution history.[4][5]

Archipelo points to Git as showing the value of persistent, linked source code history. Archipelo says Execution Verification Infrastructure addresses a different problem, which is establishing a verifiable record of state transitions and the resulting state.

Archipelo describes execution as represented by a cryptographically signed event with explicit context. Archipelo states that Salmon captures execution as it occurs upstream within supported environments, not downstream after the event has already taken place. Archipelo states that Salmon does not visually or structurally manufacture execution continuity when execution continuity has not been established.

Archipelo states that agent generated changes can involve delegated execution, tools, subprocesses and multiple state transitions. Archipelo states that execution history provides a durable record of supported execution relationships to verify outcomes. Archipelo states that during incident investigation, teams need to work backward from a consequential state change toward the execution associated with it, to determine what caused the outcome.

One principle is that downstream systems should not be forced to establish execution history solely through retrospective inference where it can be captured during supported execution. Archipelo states that what an actor was permitted or instructed to do is distinct from what it actually executed. Archipelo states that machine-speed software systems require execution evidence that other software systems can consume and verify. Archipelo describes identity, policy, observability, security, engineering, and governance systems as solving adjacent problems.[5]

Archipelo describes itself as a deep tech company building foundational infrastructure for verifiable autonomous systems.[1][3][4][5]

Archipelo on the record

Sources

Archipelo full record

  1. [1]archipelo.comArchipelo · archipelo.com · undated page, accessed September 30, 2026 · Tier A
  2. [2]Archipelo - Making Autonomous Software Execution VerifiableArchipelo · undated page, accessed October 30, 2026 · Tier A
  3. [3]Terms of Service — SalmonArchipelo, Inc. · published September 20, 2026 · Tier A
  4. [4]Archipelo - This page has been retiredArchipelo · undated page, accessed October 30, 2026 · Tier A
  5. [5]About — SalmonArchipelo · undated page, accessed November 10, 2026 · Tier A

Cycode full record

  1. [1]cycode.comCycode · cycode.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]About usCycode · cycode.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Cycode | Agentic Development Security PlatformCycode · undated page, accessed October 24, 2026 · Tier A
  4. [4]Cycode Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 24, 2026 · Tier C
  5. [5]Cycode ReviewsCycode · undated page, accessed November 3, 2026 · Tier A
  6. [6]Agentic Development Security Platform (ADSP) | CycodeCycode · undated page, accessed November 3, 2026 · Tier A
  7. [7]SAST Tool - Static Application Security TestingCycode · undated page, accessed November 3, 2026 · Tier A
  8. [8]Cycode Introduces a Complete Approach to ASPMCycode · published November 14, 2023 · Tier A
  9. [9]Cycode Security & TrustCycode · undated page, accessed November 3, 2026 · Tier A
  10. [10]Automotive Software Security | CycodeCycode · undated page, accessed November 3, 2026 · Tier A
  11. [11]Cycode | About UsCycode · undated page, accessed November 3, 2026 · Tier A

Spot a factual error? Request a correction.