Tools

Enterprise software composition analysis for supply chain security

Sonatype Lifecycle is an enterprise software composition analysis platform that identifies vulnerabilities, license risks, and quality issues in open-source dependencies throughout the development lifecycle. It integrates with IDEs, CI/CD pipelines, and artifact repositories to block risky components before they enter the codebase. Backed by the largest vulnerability database with proprietary research beyond public CVE data.

Auto-generate SDKs and docs from backend routes

Speakeasy uses AI to parse backend API routes and auto-generate production-ready SDKs in multiple languages alongside OpenAPI documentation. It ensures that client libraries and documentation always match the current backend implementation, eliminating the drift between API code, SDK behavior, and documentation that plagues most API-first teams as their services evolve.

Generate production-ready SDKs from API specifications

Stainless generates idiomatic, production-ready client SDKs from OpenAPI specifications with features like automatic pagination, retries, streaming, and proper error handling baked in. Used by Anthropic, OpenAI, Cloudflare, and Lithic to maintain their official SDKs. Produces TypeScript, Python, Go, Java, and Kotlin SDKs that match hand-written quality with automated maintenance and versioning.

Lightweight fast text editor known for speed

Sublime Text is a sophisticated, high-performance text editor known for speed, elegance, and minimal resource consumption. Launches instantly and handles huge files without lag, making it a favorite among developers who value a fast, distraction-free coding environment. Features include multi-cursor editing, Goto Anything fuzzy navigation, a powerful command palette, and a rich ecosystem of Python-based packages.

Enterprise internal app platform with AI generation

Superblocks is an enterprise internal application platform that uses AI to automate backend integrations and UI generation for high-performance internal tools. It targets pro-developer teams who need more control than typical low-code platforms provide, offering code-level customization alongside visual building with enterprise features like SSO, audit logs, and fine-grained permissions.

Enterprise feature platform for real-time ML

Tecton is an enterprise feature platform for building and serving ML features at scale. Created by the team behind Feast, it provides managed feature engineering, real-time feature computation from streaming data, feature monitoring, and a unified feature store with offline/online consistency. Used by production ML teams to eliminate training-serving skew and accelerate model deployment cycles.

AI design tool that edits React in your codebase

Tempo Labs is a YC-backed AI design and prototyping tool that generates and edits React code directly within a developer's existing codebase, maintaining project styles and conventions. Unlike tools that produce standalone code, Tempo supports both greenfield and brownfield projects, understanding existing component libraries, theme systems, and coding patterns to generate code that fits naturally.

Secure text-to-SQL with schema-only processing

Text2SQL.ai is a secure text-to-SQL platform that uses a schema-only model where actual database data never leaves the developer's infrastructure. It provides an affordable solution for teams building internal analytics tools with a public API for embedding SQL generation into custom applications, prioritizing data privacy for organizations in regulated industries.

Agentic AI security posture management

Trent AI is a specialized security platform for agentic AI applications providing AI Security Posture Management that compounds with every development cycle. Scans, judges, mitigates, and evaluates AI agent security detecting threats traditional tools miss including prompt injection attacks, tool misuse, unintended autonomous actions, data exfiltration through agent chains, and privilege escalation. Offers continuous assessment with remediation plan execution through Claude Code.

AI documentation tool with video-to-docs conversion

Trupeer is an AI documentation platform that converts screen recordings and videos into structured technical documentation with AI-generated voiceovers. It automates the creation of step-by-step guides, API documentation, and SaaS help articles by analyzing video content and generating written docs with annotated screenshots. Useful for teams creating onboarding materials and product documentation.

Low-code AI platform for internal tools with RBAC

UI Bakery AI is a low-code platform with AI assistance specifically for building production-ready internal tools, featuring enterprise-grade RBAC, SSO integration, and SOC 2 compliance. It combines visual app building with AI-powered code generation for complex business logic, targeting internal operations teams who need admin panels and dashboards with proper security controls.

Context-aware AI review with business logic validation

Umaku is a context-aware AI code review agent that understands full codebase and business logic context, detecting inconsistencies and assessing quality and risk beyond syntax-level analysis. It auto-generates and validates QA test cases from reviewed code, making it particularly effective for reviewing AI-generated code where product-intent validation matters more than style checking.

GLM-powered coding subscription by Zhipu AI

AI coding subscription built on Kimi K2.5 model. Provides competitive pricing tiers for code generation, completion, and chat-based development assistance. Compatible with major IDE integrations and OpenAI-compatible coding agents. Positioned as a cost-effective alternative for developers seeking strong reasoning capabilities at lower price points than leading providers.

AI-native SAST with automated PR security reviews

ZeroPath is an AI-native SAST and AppSec platform recognized as an RSAC 2026 finalist that provides automated pull request security reviews with contextual feedback and natural-language fix suggestions. It catches secrets, IaC misconfigurations, and logic flaws in code changes, competing directly with established code review tools but with a security-first AI-native architecture.

AI-automated pentesting with zero false positives

ZeroThreat is an automated penetration testing platform that uses AI to conduct comprehensive security audits, claiming to identify 500+ vulnerability types with zero false positives. It automates the traditionally expensive and manual red-teaming process, providing continuous security assessment for web applications with detailed remediation guidance and compliance-ready reporting.

AI-powered autonomous cloud cost optimization for AWS

Zesty uses AI to automatically optimize AWS cloud costs by analyzing usage patterns and making real-time resource adjustments. It manages Reserved Instance and Savings Plan portfolios autonomously, right-sizes EC2 instances based on actual utilization, and optimizes EBS volumes and storage costs. Claims average 51% savings on AWS compute spend with no engineering effort required.