Integrations & partner programme

These are technology integrations the products ship with, not commercial partnerships.

• GitHub — App, OAuth and PAT connectivity with pull request and commit gating.
• GitLab — OAuth, PAT, group and project tokens under the same policy model.
• Jira — findings raised, assigned and tracked to closure.
• VS Code, Cursor, Windsurf, JetBrains — shift-left scanning in the editor.
• CI/CD — webhook, scheduled, manual and ZIP-upload triggers.
• SBOM — CycloneDX and SPDX export.

The integrations exist to put a finding where the work already happens. AppSecD gates the pull request by policy so the fix happens while the author still has the context, and developers get results inside the editor before they push.