simulates

a real-world attack to identify vulnerabilities

monitors

and logs all activities, events, and metrics across the entire CI / CD pipeline

analyzes

the code for vulnerabilities without executing the code

analyzes

the code from the inside-out