Code Dx by Secure Decisions is a software assurance analytics solution and application security tool that correlates and consolidates weakness data from various open source and commercial static application security testing (SAST) tools for effective triage and mitigation. Developed under a Department of Homeland Security (DHS) Science & Technology (S&T) Directorate Small Business Innovative Research (SBIR) program, Code Dx was partially funded to help secure the software supply chain. The software integrates results from multiple analysis tools into a coherent picture, allowing analysts to visually analyze, prioritize, explore trends, and assign remediation tasks. Code Dx provides tools for software developers and security analysts to find, prioritize, and visualize software vulnerabilities throughout the software development lifecycle. It integrates with development environments such as Visual Studio, Eclipse, Git, and Jenkins, enabling the identification and remediation of weaknesses at various stages of development.
