What do Cycode and SplxAI sell?

Cycode sells Agentic Development Security Platform, Maestro, Context Intelligence Graph, Cycode SAST and ConnectorX. SplxAI sells Agentic Radar.

Are Cycode and SplxAI in the same category?

They share Static application security testing. Cycode's primary category is Application security posture management and SplxAI's is AI model and agent security.

When were Cycode and SplxAI founded?

Cycode was founded in 2019. SplxAI was founded in 2023.

Who owns Cycode and SplxAI?

SplxAI is owned by Zscaler, since 2025.

Who are Cycode and SplxAI sold to?

From its own pages, Cycode sells to large enterprises, with gaming platforms and financial institutions described among them. From its own pages, the company sells mainly to enterprises, saying the platform is built for enterprise scalability.

Vendor comparison · 2 companies

Cycode vs SplxAI

Cycode is the agentic development security platform that unifies visibility, prioritization, and remediation across the software development lifecycle. SplxAI, which uses the name SPLX, sells scalable red teaming, real-time threat protection, and automated AI compliance and governance for AI systems. CISO Tribune files both under Static application security testing. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Cycode
SplxAI

Add a company

Cycode vs SplxAI: Products, Customers and Funding Compared
What it sells
	CycodeCycode is the agentic development security platform that unifies visibility, prioritization, and remediation across the software development lifecycle.cycode.com	SplxAISplxAI, which uses the name SPLX, sells scalable red teaming, real-time threat protection, and automated AI compliance and governance for AI systems.splx.ai
What it sells	Agentic Development Security Platform^[3][5]Cycode's platform for finding and fixing risk before it reaches production. Maestro^[1][3][6]Cycode Maestro orchestrates AI Teammates that assess exposure, analyze exploitability, and generate fixes. Context Intelligence Graph^[6]A single shared graph that distills noisy alerts into risks that matter. Cycode SAST^[7]Static application security testing (SAST) for code, designed by developers, for developers. ConnectorX^[8]Cycode's click and connect ASPM integration platform.	Agentic Radar^[1][5]An open-source security scanner for agentic AI.
Categories
Categories	Application security posture management (primary category) Software supply chain security Static application security testing	AI model and agent security (primary category) AI governance AI firewalls and guardrails Static application security testing
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages
Founded
Founded	2019^[2]	2023^[2]
Ownership and funding
Ownership and funding	Not stated on its pages	Owned by Zscaler since 2025^[3]
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen November 3, 2026^[4] Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	From its own pages, Cycode sells to large enterprises, with gaming platforms and financial institutions described among them. Cycode also addresses automotive software development. Its pages speak to security and development teams that want to align on application security posture. Cycode offers deployment on public cloud, private cloud, and on-premises environments.	From its own pages, the company sells mainly to enterprises, saying the platform is built for enterprise scalability. Its asset management messaging speaks to organisations that want visibility and control over the AI assets used in the organisation. Its runtime messaging addresses teams with AI systems in production. Its governance messaging speaks to teams working with global AI security frameworks and internal risk policies.
Last verified
Last verified	September 27, 2026	September 30, 2026

Where they overlap

Cycode and SplxAI are both filed under Static application security testing.

Where they differ, field by field

Cycode's primary category is Application security posture management; SplxAI's is AI model and agent security.
Cycode is also filed under Software supply chain security. SplxAI is also filed under AI governance and AI firewalls and guardrails.
Cycode lists Agentic Development Security Platform, Maestro, Context Intelligence Graph, Cycode SAST and ConnectorX. SplxAI lists Agentic Radar.
Cycode was founded in 2019. SplxAI was founded in 2023.
SplxAI is owned by Zscaler, since 2025.

What it sells: Cycode

What Agentic Development Security Platform does^[3][5]: Cycode says it unifies control, context, and autonomy on a single platform. Cycode provides end-to-end controls for the AI layer of the software factory. Customers can deploy on public cloud, or on private cloud and on-premises environments through the Cycode Enterprise Server offering.
What Maestro does^[1][3][6]: Cycode says its specialized agents find and fix exploitable risks 17x faster. Cycode says teams can extend agent skills and implement controls with full audit trails.
What Cycode SAST does^[7]: Cycode SAST supports a wide range of programming languages and SCMs. Language support covers Java, C#, JavaScript, PHP, Python, Ruby, and Go. SCM support covers GitHub, GitLab, BitBucket, Azure DevOps, and Gerrit.

Questions about Cycode and SplxAI

What do Cycode and SplxAI sell?: Cycode sells Agentic Development Security Platform, Maestro, Context Intelligence Graph, Cycode SAST and ConnectorX. SplxAI sells Agentic Radar.
Are Cycode and SplxAI in the same category?: They share Static application security testing. Cycode's primary category is Application security posture management and SplxAI's is AI model and agent security.
When were Cycode and SplxAI founded?: Cycode was founded in 2019. SplxAI was founded in 2023.
Who owns Cycode and SplxAI?: SplxAI is owned by Zscaler, since 2025.
Who are Cycode and SplxAI sold to?: From its own pages, Cycode sells to large enterprises, with gaming platforms and financial institutions described among them. From its own pages, the company sells mainly to enterprises, saying the platform is built for enterprise scalability.

About Cycode

Cycode is the agentic development security platform that unifies visibility, prioritization, and remediation across the software development lifecycle. Cycode says it unifies control, context, and autonomy on a single platform to find and fix risk before it reaches production. Cycode provides end-to-end controls for the AI layer of the software factory.^[5][10]

Cycode says its AI code security combines deterministic rules with AI detection and reasoning. Cycode offers proprietary Application Security Testing tools, including SAST, SCA, and IaC scanning, built natively into the platform. Cycode SAST supports a wide range of programming languages and SCMs. Language support covers Java, C#, JavaScript, PHP, Python, Ruby, and Go. SCM support covers GitHub, GitLab, BitBucket, Azure DevOps, and Gerrit. Cycode catches misconfigurations across Terraform, Kubernetes, Helm, and CloudFormation. Cycode finds container vulnerabilities and correlates them back to the root cause in code.^[5][7]

On the software supply chain side, Cycode says it scans, detects, and blocks secret exposure in code, pipelines, productivity tools, and AI assistants. Cycode says it identifies misconfigured pipelines and prevents supply chain attacks with runtime eBPF monitoring. Cycode says it detects proprietary source code exposed to the public. Cycode can ingest, generate, and manage a software bill of materials. Cycode says it auto-discovers shadow AI, coding assistants, and MCP servers across the development environment. Cycode says it enforces policy-driven control over AI tools with full AIBOM coverage.

Cycode describes the Context Intelligence Graph as a single shared graph that distills noisy alerts into risks that matter. Cycode Maestro orchestrates AI Teammates that assess exposure, analyze exploitability, and generate fixes. Cycode says its specialized agents find and fix exploitable risks 17x faster. Cycode says it combines security understanding with code-to-runtime context to determine what attackers can actually exploit. Cycode says it unifies visibility and correlates risk across the ADLC into a single, queryable view. Cycode's risk posture module integrates 120+ tools across SCMs, CI/CD, cloud, ticketing, and security tools. Cycode says teams can create dashboards aligned with their business and stakeholders.^[1][8]

The RIG is the ASPM engine behind Cycode's native security solutions and ConnectorX, providing code to cloud traceability and automating vulnerability discovery, prioritization and remediation. ConnectorX is Cycode's click and connect ASPM integration platform that lets companies use Cycode's native ASPM tools or maximize their investments in their existing AppSec tools.^[8]

Cycode customers can deploy on public cloud, or on private cloud and on-premises environments through the Cycode Enterprise Server offering. Cycode offers enterprise SaaS customers a choice between EU data residency and Global (US) data residency.

Unity replaced fragmented scanning with Cycode's converged platform and gained unified visibility across thousands of repos. Uphold standardized on Cycode to bring AST, SSCS, and ASPM under a single graph. Cycode says Solaris cut critical-vulnerability MTTR by 99.4% and triage time by 99% after deploying Cycode. theScore is a Cycode customer that uses one platform dedicated to developer security. Cycode says it helps enterprises like UBS and Elastic prove compliance and keep shipping software securely. For automotive software teams, Cycode says it supports alignment with ISO/SAE 21434 and UNECE WP.29 lifecycle requirements through automated evidence collection and real-time posture reporting.^[5][8][10]

Cycode holds ISO27001 certification and ISO/IEC 42001 certification. Cycode has completed a SOC 2 Type II audit and a CSA STAR Level 1 attestation. Lior Levy is Co-founder and CEO of Cycode. Cycode is backed by Insight Partners and YL Ventures, and the series-B company has raised $80M. Cycode lists ION Crossover Partners among its backers.^[1][8][11]

Cycode on the record

About SplxAI

SplxAI, which uses the name SPLX, sells scalable red teaming, real-time threat protection, and automated AI compliance and governance for AI systems. SPLX delivers security tooling for red teaming, runtime security, governance and remediation to build, deploy and scale AI systems. SPLX helps global enterprises secure AI systems end-to-end. SPLX describes security teams as lacking the tools to continuously map, monitor, or validate dynamic LLM behavior and vulnerabilities.^{[4][5][7][9][11]}

SPLX builds an AI-BOM, uncovers vulnerabilities, and helps users stay aligned with compliance frameworks. SPLX detects LLMs used across an organization and shows benchmark scores for each. SPLX lets users approve or block usage of the LLMs it detects. SPLX scans code repos to visualize every agent, tool, and MCP server in AI workflows. SPLX discovers MCP servers in an environment and scans for exploitable vulnerabilities in orchestration layers. SPLX connects to cloud platforms, code repos, ML and AI platforms for a unified inventory of AI assets in an organization.^[5][8]

SPLX runs automated red teaming that continuously uncovers vulnerabilities in AI systems. SPLX red teaming runs high-scale vulnerability assessments and simulates domain-specific attacks on AI systems from build to runtime. SPLX red teaming tests malicious prompts from adversarial and regular user personas. SPLX red teaming covers prompt injections, off-topic, hallucinations, and social engineering. SPLX lets users create custom AI assessments to test for specific risk scenarios and security criteria. SPLX lets users upload predefined datasets tailored to their threat models for red teaming. SPLX red teaming simulates attack scenarios with different input types for multi-modal AI assistants. The SplxAI platform integrates into the CI/CD pipeline.^{[1][4][5][7][9]}

SPLX generates hardened system prompts and applies targeted remediation steps based on red teaming insights. SPLX hardens a system prompt and applies dynamic remediation strategies. SPLX enforces input and output guardrails during live deployments to detect malicious behavior, prevent prompt injections, and stop sensitive data leakage in real time. SPLX lets users define off-topic rules and risk boundaries through natural language. SPLX provides detailed logs of blocked prompts and flagged outputs. SPLX scans LLM logs to detect jailbreaks, prompt injections, and malicious queries in near real time. SPLX lets users select risk scanners and upload LLM logs for threat discovery.^{[1][4][5][7][10][12]}

The SPLX Platform maps an AI risk surface to global and industry-specific frameworks to help identify compliance gaps. SPLX automatically maps test results to AI frameworks to spot gaps and eliminate manual tracking. SPLX lets users set custom governance rules or import JSON policies to enforce internal security standards. SPLX stress-tests open-source and commercial language models with thousands of attacks. SPLX model testing shows how models perform with no prompt, a basic prompt, and a hardened prompt.^{[1][4][5][6][13]}

SPLX offers API integration that allows for connections to any type of endpoint. Agentic Radar is an open-source security scanner for agentic AI. Agentic Radar visualizes workflows, surfaces attack patterns and tool-level vulnerabilities, and provides hardening recommendations for each agent.^[1][4][5]

SPLX says it has put controls in place to meet the compliance needs of highly regulated industries. SPLX describes itself as a remote-first team.^{[1][4][5][6][7][9][10][11][14][15]}

SplxAI on the record

Sources

Cycode full record

[1]cycode.comCycode · cycode.com · undated page, accessed September 27, 2026 · Tier A
[2]About usCycode · cycode.com · undated page, accessed September 27, 2026 · Tier A
[3]Cycode | Agentic Development Security PlatformCycode · undated page, accessed October 24, 2026 · Tier A
[4]Cycode Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 24, 2026 · Tier C
[5]Cycode ReviewsCycode · undated page, accessed November 3, 2026 · Tier A
[6]Agentic Development Security Platform (ADSP) | CycodeCycode · undated page, accessed November 3, 2026 · Tier A
[7]SAST Tool - Static Application Security TestingCycode · undated page, accessed November 3, 2026 · Tier A
[8]Cycode Introduces a Complete Approach to ASPMCycode · published November 14, 2023 · Tier A
[9]Cycode Security & TrustCycode · undated page, accessed November 3, 2026 · Tier A
[10]Automotive Software Security | CycodeCycode · undated page, accessed November 3, 2026 · Tier A
[11]Cycode | About UsCycode · undated page, accessed November 3, 2026 · Tier A

SplxAI full record

[1]splx.aiSplxAI · splx.ai · undated page, accessed September 30, 2026 · Tier A
[2]SplxAI Closes $7M Seed Funding Round to Help Organizations Secure Agentic AI SystemsBusiness Wire · businesswire.com · published March 26, 2025 · Tier A
[3]Zscaler acquires splxSplxAI · splx.ai · published November 3, 2025 · Tier A
[4]SPLX Platform | End-to-End Security for the AI LifecycleSPLX · undated page, accessed October 31, 2026 · Tier A
[5]SPLX | End-to-End Security for AISPLX · undated page, accessed October 31, 2026 · Tier A
[6]AI Governance & Compliance | Stay Aligned with AI PoliciesSPLX · undated page, accessed October 31, 2026 · Tier A
[7]Remediation | Harden your LLM system prompts to mitigate risksSPLX · undated page, accessed October 31, 2026 · Tier A
[8]AI Asset Management | Unified Inventory & Security for Enterprise AISPLX · undated page, accessed October 31, 2026 · Tier A
[9]Probe | Automated & Continuous Red Teaming for Conversational AISPLX · undated page, accessed October 31, 2026 · Tier A
[10]AI Runtime Protection | Real-Time AI Threat DetectionSPLX · undated page, accessed October 31, 2026 · Tier A
[11]SplxAI | The future of automated AI Red TeamingSPLX · undated page, accessed November 10, 2026 · Tier A
[12]Monitoring | Analyze LLM Logs to proactively identify malicious user activitySPLX · undated page, accessed November 10, 2026 · Tier A
[13]LLM Benchmarks | Compare and Evaluate the Security of Leading AI ModelsSPLX · undated page, accessed November 10, 2026 · Tier A
[14]Security and TrustSPLX · undated page, accessed November 10, 2026 · Tier A
[15]Pricing & PlansSPLX · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.