SecIQ includes proprietary SAST, SCA, secret detection, and IaC scanning engines. Scans run on push, PR, manual trigger, or schedule.

GitHub, Bitbucket, Azure Repos, and self-hosted GitLab. Connect via PAT or OAuth and sync repositories to projects.

Yes. Tenant admins can configure OIDC SSO (Okta, Azure AD) from Security settings. SAML support is on the roadmap.

For each finding, SecIQ generates context-aware explanations, patch examples, secure coding guidance, and business risk assessments.

Scan artifacts are stored in your configured S3-compatible storage with tenant isolation. Code is processed for scanning and not shared across tenants.

Findings are automatically mapped to OWASP Top 10 and CIS benchmarks. Export compliance PDF reports from the dashboard.