Software IDS / IPS · Beta
Security Pioneer Programme – limited placesThe intrusion prevention system for your software supply chain.
Not sure whether your software is secure? Our system analyses source code and dependencies for malicious behaviour and critical zero-day vulnerabilities that no one knows about yet – before they reach your systems.
$ git push origin feature/checkout-v2build ✓ succeeded in 42 sips analysing 318 dependencies …ips ⚠ pdf-render-utils@3.4.1 – unexpected network callips ✗ pipeline stopped · team notifiedips ✓ fix suggested: pin to 3.3.9 (signed)
- Zero-day
- detection beyond known CVEs
- npm · NuGet · PyPI
- registry-native dependency analysis
- GitHub · GitLab
- pre-configured CI integrations
- EU-only
- zero retention in the Codeflix Private Cloud
Main functions
The days of simple vulnerability scanning are over
Traditional scanners compare version numbers against CVE lists. Our system reads what the code actually does – and classifies malicious, dangerous or unsafe behaviour.
In-depth behavioural analysis
Analyses the actual source code for malicious behaviour – e.g. unexpected network calls or unauthorised file access – not just known patterns.
Registry-native integration
The agent pulls dependencies autonomously straight from the registries: npm, NuGet, PyPI and more.
Direct CI/CD integration
We handle the audit for you in a secure environment – with pre-configured integrations for GitHub and GitLab.
CVE mapping
In addition to zero-day malware, a detailed list of all known CVEs for your dependencies.
Reduced-noise alerting
The AI's contextual understanding drastically reduces false positives – less noise, faster triage.
Process
How it works
- 01
CI integration
Seamless integration with your infrastructure – pre-configured integrations for GitHub and GitLab, the client runs on your side.
- 02
AI-assisted inspection
The engine parses the code and checks it for hidden malicious functions, backdoors and structural vulnerabilities – including comparison against global CVE databases.
- 03
Prevent early & report
If malicious behaviour is detected, the system can interrupt the CI and protect your environment – with a traceable report.
Confidential processing
The analysis itself is secure too
The client runs on your system; the core of the Software IPS runs securely in a hardened, isolated environment. A secure-by-design approach ensures that processes not explicitly authorised are blocked.
The Software IPS is the first building block of a bigger AI-Ops strategy: AI that not only detects, but remediates and operates.
- Zero retentionYour data stays exclusively within the EU – through the Codeflix Private Cloud.
- Save pipeline minutesFewer false positives speed up analysis and lower costs.
- Faster feedbackThe security review is handled by the Software IPS – no more hours reviewing code, no more waiting for weeks.
Beta programme
The Security Pioneer Programme
Apply for access now – places in the beta programme are limited. Earn a bonus and discounts on the regular price by providing valuable feedback on false positives, bug reports and feature requests.
Email info@codeflix.com, subject ‘Security Pioneer Programme’