SonarQube Cloud
Enhance your productivity by ensuring only high-quality code is released, as SonarQube Cloud (previously known as SonarCloud) seamlessly evaluates branches and enriches pull requests with insights. Identify subtle bugs to avoid unpredictable behavior that could affect users and address security vulnerabilities that threaten your application while gaining knowledge of application security through the Security Hotspots feature. Within moments, you can begin using the platform right where your code resides, benefiting from immediate access to the most current features and updates. Project dashboards provide vital information on code quality and readiness for release, keeping both teams and stakeholders in the loop. Showcase project badges to demonstrate your commitment to excellence within your communities. Code quality and security are essential across your entire technology stack, encompassing both front-end and back-end development. That’s why we support a wide range of 24 programming languages, including Python, Java, C++, and many more. The demand for transparency in coding practices is on the rise, and we invite you to be a part of this movement; it's completely free for open-source projects, making it an accessible opportunity for all developers! Plus, by participating, you contribute to a larger community dedicated to improving software quality.
Learn more
ZeroPath
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with deep program analysis to deliver intelligent security testing that finds real vulnerabilities while dramatically reducing false positives.
Unlike traditional SAST tools that rely on pattern matching, ZeroPath understands code context, business logic, and developer intent. This enables identification of sophisticated security issues including business logic flaws, broken authentication, authorization bypasses, and complex dependency vulnerabilities.
Our comprehensive security suite covers the application security lifecycle:
1. AI-powered SAST
2. Software Composition Analysis with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code scanning
5. Automated PR reviews
6. Automated patch generation
and more...
ZeroPath integrates seamlessly with GitHub, GitLab, Bitbucket, Azure DevOps and many more. The platform handles codebases with millions of lines across Python, JavaScript, TypeScript, Java, Go, Ruby, Rust, PHP, Kotlin and more.
Our research team has been successful in finding vulnerabilities like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more
Arm DDT
Arm DDT stands out as the premier debugger for servers and high-performance computing (HPC) in research, industry, and educational settings, serving software engineers and scientists who work with C++, C, and Fortran in parallel and threaded environments across both CPUs and GPUs, including those from Intel and Arm. Renowned for its robust capabilities, Arm DDT excels at automatically identifying memory issues and divergent behavior, enabling users to attain exceptional performance across various scales. This versatile tool supports multiple server and HPC architectures, offering seamless cross-platform functionality. Additionally, it provides native parallel debugging for Python applications, ensuring comprehensive support for a range of programming needs. Arm DDT is distinguished by its leading memory debugging features and exceptional support for C++ and Fortran debugging, along with an offline mode that allows for non-interactive debugging sessions. It is also equipped to manage and visualize substantial data sets effectively. Available as a standalone tool or as a component of the Arm Forge debug and profile suite, Arm DDT boasts an intuitive graphical interface that simplifies the process of detecting memory bugs and divergent behaviors across diverse computational scales. This makes it an invaluable resource for engineers and researchers alike, ultimately facilitating the development of high-performance applications.
Learn more
Telepresence
You can use your favorite debugging software to locally troubleshoot your Kubernetes services. Telepresence, an open-source tool, allows you to run one service locally and connect it to a remote Kubernetes cluster. Telepresence was initially developed by Ambassador Labs, which creates open-source development tools for Kubernetes such as Ambassador and Forge. We welcome all contributions from the community. You can help us by submitting an issue, pull request or reporting a bug. Join our active Slack group to ask questions or inquire about paid support plans. Telepresence is currently under active development. Register to receive updates and announcements. You can quickly debug locally without waiting for a container to be built/push/deployed. Ability to use their favorite local tools such as debugger, IDE, etc. Ability to run large-scale programs that aren't possible locally.
Learn more