Secure Code Warrior Launches Industry-First AI Traceability to Enable Secure Developers and Supercharge Safe Productivity
New capabilities in SCW Trust Agent provide visibility and control over LLM usage for security leaders and CISOs
SYDNEY, Australia – September 24, 2025 - Secure Code Warrior, the industry leader in Developer Risk Management (DRM), today announced the launch of a beta program for a major expansion of AI capabilities within its Trust Agent product. The new offering is an industry-first, providing CISOs with security traceability, visibility and governance over developers’ use of AI coding tools. This powerful upgrade, collectively referred to as Trust Agent: AI, leverages a unique combination of key signals, including AI coding tool usage, vulnerability data, code commit data and developer secure coding skills, to provide unparalleled visibility into how AI development tools are impacting risk within the software development lifecycle (SDLC).
Security leaders lack visibility into which AI coding tools–not to mention which LLM is powering them–are being used by developers, how much application code is being generated by AI and whether developers have the right skills to identify and remediate vulnerabilities within AI-generated code. In an increasingly fraught digital landscape where LLMs can not just produce insecure code, but also produce biased coding outcomes, trust and traceability of this technology must be a chief priority among CISOs, and Trust Agent: AI provides the deep insights needed to rapidly modernize an AI-augmented security program to withstand existing and emerging threats.
Trust Agent: AI is the first solution of its kind to evaluate the relationship between the developer, the models they use–including the vulnerabilities they introduce–and the actual repository where AI-generated code is being committed. General availability is expected in 2026, but an early access list for the beta program is available today.
“AI allows developers to generate code at a speed we’ve never seen before,” said Pieter Danhieux, Secure Code Warrior Co-Founder & CEO. “However, using the wrong LLM by a security-unaware developer, the 10x increase in code velocity will introduce 10x the amount of vulnerabilities and technical debt. Trust Agent: AI produces the data needed to plug knowledge gaps, filter security-proficient developers to the most sensitive projects, and, importantly, monitor and approve the AI tools they use throughout the day. We’re dedicated to helping organizations prevent uncontrolled use of AI on software and product security.”
With Trust Agent: AI, Secure Code Warrior offers deep observability of AI coding tools and LLMs used across an enterprise’s entire codebase. The solution also offers integrated governance at scale through:
- Identification of unapproved LLMs, including visibility into the actual vulnerabilities LLMs introduce
- Flexible policy controls to log, warn or block pull requests from developers using unsanctioned tools, or developers with insufficient secure coding knowledge
- Output analysis that surveys how much code is AI-generated and where it's located across repositories
About Secure Code Warrior
Secure Code Warrior is a leader in developer risk management helping organizations strengthen their developer teams’ security and risk management competencies. We do this by providing the world’s leading agile learning platform that delivers the most effective secure coding solution for developers to learn, apply, and retain software security principles. More than 600 enterprises trust Secure Code Warrior to implement agile learning security programs and ensure the applications they release are free of vulnerabilities.
Learn more at securecodewarrior.com.
Govern AI-driven development before it ships
Measure AI-assisted risk, enforce secure coding policy at commit, and accelerate secure delivery across your SDLC.
Explore more articles
우리는 이 방법을 잘 알고 있습니다. 우리는 이 두 가지 축복을 골고루 살기 위해 노력하고 있습니다.
%252520%252520(3).avif)
Supercharged Security Awareness: How Tournaments are Inspiring Developers at Erste Group
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.
Security as culture: How Blue Prism cultivates world-class secure developers
Learn how Blue Prism, the global leader in intelligent automation for the enterprise, used Secure Code Warrior's agile learning platform to create a security-first culture with their developers, achieve their business goals, and ship secure code at speed
One Culture of Security: How Sage built their security champions program with agile secure code learning
Discover how Sage enhanced security with a flexible, relationship-focused approach, creating 200+ security champions and achieving measurable risk reduction.
Forbes: A New Frontier: NSA Proposes “Security By Design” Considerations For AI Enablement
The cybersecurity industry, which has been advocating for “security by design” principles for more than a decade, stands in wide-eyed amazement at the risks posed by artificial intelligence (AI). As organizations rush to embrace AI enablement, a CISO’s most pressing priority is to avoid becoming a roadblock. However, without effective AI usage and governance, observability and traceability, organizations may be blindsided by their AI risk.
Techpartner.news: Secure Code Warrior introduces framework to govern AI use in software development
Secure Code Warrior has introduced the SCW AI Adoption Model, a framework designed to help organisations govern AI use in software development as the industry shifts from the traditional software development lifecycle (SDLC) toward what the company calls the Agentic Development Lifecycle (ADLC).
DevOps.com: Are LLMs Equally Good (or Bad) at Building Secure Software?
With many software engineering teams moving from AI coding assistants into full agentic AI code generation and increasing the amount of code they produce exponentially, ensuring the security of that code must be a top priority. The study produces practical guidance for organizations that are getting on board the AI-assisted or agentic code development train.
Secure AI-driven development before it ships
See developer risk, enforce policy, and prevent vulnerabilities across your software development lifecycle.
