Agile learning platform startup Secure Code Warrior Ltd. today introduced a new solution that aims to give security leaders visibility into their organizations’ software security posture.

Called SCW Trust Agent, the new solution assesses the specific security competencies of developers for every code commit. The solution also allows chief information security officers and application security teams to embrace a secure-by-design approach, one that delivers deeper visibility into their software development security posture.

The new service follows a previous service launched by Secure Code Warrior, SCW Trust Score, an industry benchmarking service that quantifies the security posture of development teams. Both services apply more than 20 million learning data points collected from 250,000 developers globally to deliver mechanisms that, when paired with SCW’s Agile learning platform, become an integral part of the secure software development lifecycle.

SCW Trust Agent works with any Git-based code repository, including GitHub, GitLab, Atlassian Bitbucket and others. With every commit, the service checks to see if the developer making it has the prescribed secure code skillset in the commit’s programming language. It then uses this information to give a rating on the health of that commit and aggregates these ratings across all a company’s repositories.

In addition, the compay says, the new service delivers greater control and flexibility for developer gatekeeping by allowing administrators to set up policies and criteria that ensure developers meet a baseline set of standards and expectations before developing code. Should any gaps in developer skills be identified, developers can reference the SCW Agile learning platform to upskill their language-specific knowledge and competencies.

“We are unlocking new value for CISOs by giving them an easy-to-deploy solution to measure the health of code commits and visibility into the hundreds of source code repositories in their organization,” said co-founder and Chief Executive Pieter Danhieux. “Our innovations are putting organizations in a better position to bridge the visibility gap between a developer’s skill sets and quality of code produced without sacrificing development velocity.”

Secure Code Warrior is a venture capital-backed startup that has raised $101 million in funding across three rounds, including a round of $50 million in July 2023. Investors in the company include Paladin Capital Group, Goldman Sachs Group Inc. and ForgePoint Capital Management.

Image: Secure Code Warrior