Code Dx is a software application vulnerability correlation and management system that consolidates and normalizes software vulnerabilities detected by multiple static application security testing (SAST) and dynamic application security testing (DAST) tools, as well as the results of manual code reviews.

The Code Dx product was partially funded by the Department of Homeland Security (DHS) Science and Technology (S&T) Directorate due to the dire need to increase software assurance for critical infrastructure and secure the country’s software supply chain. As a result, Code Dx addresses the needs of a variety of users who influence software security decisions that affect an organization’s exposure to cyber attacks or liability associated with such attacks. These include: software developers, security analysts, software testers, quality assurance engineers and CISOs.