Code Dx
| Company type | Private |
|---|---|
| Industry | Software, Cybersecurity |
| Predecessor | Applied Visions, Inc. |
| Founded | 2015 |
| Defunct | 2021 |
| Fate | Acquired by Synopsys |
| Headquarters | United States |
| Products | Code Dx Enterprise, Stat!, Code Pulse |
Code Dx, Inc. was a U.S.-based software firm operating between 2015 and 2021. Its primary offering, Code Dx, functioned as a vulnerability management platform that integrated and correlated outputs from multiple static and dynamic testing solutions. In 2021, the company was acquired by Synopsys.
Overview
The company specialized in creating software designed for developers and cybersecurity professionals to detect and handle software security vulnerabilities. Code Dx, Inc. originated as a spin-off from its parent company, Applied Visions, Inc., in 2015.
History
Applied Visions, Inc. included a division called Secure Decisions, which focused on cybersecurity research projects for the U.S. government. Secure Decisions obtained funding through the SBIR program from the Department of Homeland Security (DHS) Science and Technology Directorate to develop software aimed at producing secure, standards-compliant application code and safeguarding the national software supply chain. Utilizing this support alongside additional resources, Secure Decisions created technology that eventually became the product known as “Code Dx” (with “Dx” standing for “diagnosis”).
Initially centered on static code analysis, Code Dx broadened its capabilities to include dynamic testing tools, evolving into a hybrid vulnerability scanning solution.
In line with SBIR’s commercialization objectives, Secure Decisions developed a commercially viable version of Code Dx tailored for software development and security testing purposes. The product’s market acceptance prompted the establishment and separation of Code Dx, Inc. as an independent company in early 2015.
Code Dx Enterprise
Code Dx Enterprise represents the company's leading vulnerability management platform that aggregates and correlates data from a variety of static and dynamic testing instruments. For static analysis, it deploys packaged open source tools and connects with several commercial solutions selected based on compatibility with specific programming languages. The findings are categorized according to the Common Weakness Enumeration (CWE). Regarding dynamic analysis, it compiles results into detailed vulnerability reports. When multiple testing tools operate simultaneously, it merges their outputs to eliminate duplicate entries. Detected vulnerabilities are aligned with industry benchmarks such as the OWASP Top 10 and Web Application Security Consortium standards, while also highlighting code violations related to regulations like HIPAA. The solution includes an intuitive visual dashboard that enables monitoring of vulnerability trends within source code over time.
Stat!
Stat! delivers a limited feature set derived from Code Dx Enterprise, aimed at smaller development groups initiating application security assessments. It supports only static analysis performed through open source tools bundled with the product, which are automatically executed after installation. This version excludes commercial tool integrations and dynamic testing capabilities, providing reports focused on fundamental industry compliance frameworks such as OWASP Top 10 but does not cover more complex standards like HIPAA.
Code Pulse
Code Pulse is an open-source monitoring solution for testing, originally created by Secure Decisions through a Department of Homeland Security research initiative and currently maintained by Code Dx. It provides real-time visualization of code coverage during dynamic testing, identifying tested segments, redundancies, and untested portions to enhance the efficiency of penetration testing and dynamic application security assessments. This tool is compatible with any testing platform.
Code Dx, Inc.
- Named among Cyber Defense Magazine's Top 20 Cybersecurity Leaders in Vulnerability Management for 2016.
- Awarded Silver in the Best Startup of the Year category by the Information Security Products Guide in 2016.
Code Dx (Software)
- Version 2.2 of Code Dx earned the Gold award for Best Product of the Year in the 2016 Golden Bridge Awards under Vulnerability Assessment and Remediation.
- The Enterprise Edition of Code Dx was honored with Cyber Defense Magazine’s “Cutting Edge Application Security Solution” accolade in 2016.
- Cited by the U.S. National Institute of Standards and Technology in a 2016 White House report as a tool that consolidates results from various analysis tools.
- Highlighted by Forbes and regional Long Island media for its pioneering methods in code integrity visualization and cybersecurity innovation.