GrammaTech is a software security company that originated as a spin-off from Cornell University. The company develops software assurance tools and cybersecurity solutions focused on identifying critical software vulnerabilities through static analysis techniques.

The company's flagship product is CodeSonar, a commercial static application security testing (SAST) platform that performs static analysis of both source code and binary code. CodeSonar is designed to integrate within DevOps and DevSecOps pipelines, enabling developers to identify and eliminate critical software defects during the development process. The platform is used across various sectors including embedded software development, IoT devices, and government applications.

GrammaTech employs a team of software scientists including over 20 PhDs in computer science and mathematics who work on advancing software analysis and hardening techniques. The company provides solutions for software supply chain security, helping organizations identify vulnerable software components in commercial applications.

The company serves both commercial manufacturers and government clients, including providing SAST capabilities for DoD Platform One. Their technology addresses security challenges in increasingly complex software environments, particularly in IoT device software and embedded systems. GrammaTech offers products, research services, and innovative solutions aimed at finding and remediating software vulnerabilities before they can be exploited.

In 2019, GrammaTech was acquired by Five Points Capital and continues to operate from Ithaca, New York.