Xygeni

What Xygeni is

Xygeni is an application security platform for risks across the software supply chain. Its scanner runs inside the customer’s network and can examine directories, repositories, container images, or source-control organizations. Findings can be sent to a cloud dashboard or kept locally; Xygeni says source code is not uploaded for scanning. The platform checks configuration files, build scripts, and CI job definitions for supply-chain misconfigurations, and performs automated audits against standards including OpenSSF Scorecard and CIS Software Supply Chain Security. Secrets Security identifies more than 100 types of secrets and can block commits through Git hooks. Xygeni also supports SSO through SAML2 and offers a REST API for security issues, project risk summaries, trends, report generation, and administration. Documented integrations include GitHub, GitLab, Azure DevOps, Bitbucket, Jenkins, Slack, and Jira. It supports ecosystems including Maven, Gradle, npm, .NET, Go, Python, PHP, Ruby, and Dart/Flutter. The free plan includes five contributors, up to 10 repositories, and 200 scans per month, with SAST, SCA, Secrets Security, and an IDE plugin.