1Password
Trusted by over 100,000 businesses and millions of consumers, 1Password offers industry-leading identity security solutions to reduce risk for companies and provide people with peace of mind. 1Password is on a mission to ease the tension between security and convenience, with solutions that enable powerful password management, secrets management for developers, as well as the future of authentication with passkeys. Since our founding in 2005, 1Password continues to build on the foundation of a beloved, award-winning password manager with its enterprise security platform now trusted by customers like IBM, Slack, GitLab, Under Armour, and Intercom.
AppMap
AppMap brings runtime code reviews to every PR. AppMap runs inside GitHub Actions in your project to capture, store, analyze, and report on the behavioral changes within each pull request. All of this happens inside your GitHub organization without the data ever leaving your control.
More advanced than static analysis, AppMap performs automated runtime code reviews of your code changes.
Speed up development velocity and stop wasting time on ineffective and slow, manual code reviews. AppMap reviews every single pull request and auto-documents code behavior changes, giving reviewers clear details about how the code changed. AppMap identifies critical performance, security, and stability issues that can only be found by observing the code as it runs.
Uncover deep insights in your code base with interactive visualizations documenting the root cause of code issues without spending development time adding traces, spans, or other telemetry. All of this happens before you merge, before code hits production, before it impacts your users.
For more information, follow AppMap on X @getappmap and LinkedIn, and visit www.appmap.io.
Appwrite
Appwrite is a backend platform for developing Web, Mobile, and Flutter applications. Built with the open source community and optimized for developer experience in the coding languages you love.
Arm
Arm is the leading technology provider of processor IP, offering the widest range of processors to address the performance, power, and cost requirements of every device. Arm CPUs and NPUs include Cortex-A, Cortex-M, Cortex-R, Neoverse, Ethos and SecurCore.
Atmosera
Atmosera is a leading technology solutions partner delivering high-value outcomes through Applications, DevOps, Data & AI, Security, and the Microsoft Azure platform. Atmosera exists to accelerate success through transformation and improve the return on investment in modern technology and human expertise.
Datadog
Datadog is the SaaS monitoring and security platform that unifies metrics, traces, logs, and security signals in a single pane of glass, providing both comprehensive and deep visibility into the performance of modern applications. Datadog reduces the time needed to detect and resolve issues by reducing the number of tools needed to troubleshoot performance problems across teams. With vendor-backed integrations for 600+ technologies, a world-class enterprise customer base, and razor-sharp focus on ease of use, Datadog is the leading choice for infrastructure, security, and software engineering teams to improve cross-team collaboration, accelerate development cycles, and reduce operational and development costs.
Docker
Docker helps developers bring their ideas to life by conquering the complexity of app development. Actively used by millions of developers around the world, Docker Desktop and Docker Hub provide unmatched simplicity, agility and choice.
Endor Labs
90% of code in modern applications is open source. With over 43M Open Source Software (OSS) project versions, and clear indication that open source will dominate the “AI movement”, development teams can gain tremendous benefits from leveraging the OSS ecosystem, as long as organizations invest in the right tooling to address the security, scalability and maintainability challenges that come with it. Endor Labs’ Code & Pipeline Governance Platform focuses on these pain-points and outcomes: Software Composition Analysis (SCA): Only 12% of the OSS code is actually used within your applications. Endor Labs replaces the existing breed of SCA solutions that lack context on code usage, thereby cutting ~80% of the vulnerabilities being reported. Dependency & Tech Debt Management: Endor Labs helps engineers improve application performance and minimize attack surface by helping select and maintain secure & high quality dependencies across the SDLC. CI-CD Governance: Endor Labs helps you monitor the posture of your pipelines, including SCM configurations, developer access, and hardcoded secrets in code, all through a single hook and policy-as-code framework integrated into your pipeline. Compliance & SBOMs: Comply with emerging US Government led standards & regulation around Software Bill of Materials (SBOM), automated VEX generation, and adherence to the White House Executive Order 14028. Endor Labs fully integrates with GitHub Advanced Security to help AppSec and engineering teams secure applications without the “productivity tax” of continuously switching tools. With Endor Labs and GitHub Advanced Security you can achieve end-to-end application security without ever leaving GitHub! See it in action.
Evinced
Evinced is the rapidly-growing technology leader in digital accessibility software, helping enterprises keep their web and mobile offerings accessible to everyone. We're on a mission to prevent accessibility problems from ever making it to production, and we do that by providing powerful tools that fit into every part of the development process – from design all the way to coding, QA, compliance, and production monitoring.
For developers, Evinced is a godsend. Our tools install in minutes and yet are the most powerful in the business. We integrate accessibility into the things developers are already doing – from coding, to unit tests, and even functional tests. Within minutes of installation you can be writing accessible code that will be completely accessible to screen readers and keyboard users, which are the hardest things to get right in the world of accessibility. And we can save you hours (if not months) cycling with your internal accessibility team or searching through stackoverflow for tips.
Give us a shout, we'd love to talk.
IBM
IBM Consulting is the catalyst for business transformation. With deep industry expertise spanning strategy, experience design, technology, and operations, we have become the trusted partner to over 3,000 of the worlds’ most innovative and valuable companies. Our 150,000 consultants embrace an open way of working, bringing a diverse set of voices, experiences and technologies like Hybrid Cloud and AI together to accelerate business transformation. Supported by IBM Garage, our proven co-creation method, we bring speed and scale to innovation with an enduring ecosystem of technology leaders to deliver solutions for some of the world’s most complex challenges. We collaborate closely, ideate freely, and apply breakthrough innovations that drive sustainable change and re-invent how business gets done. Find out more at IBM.com/consulting.
Please reach out to Stella Barrat at stella@boxboat.com for any questions or comments! I'd be happy to set up a time to meet with one of our AEs.
Mend
Mend.io, formerly known as WhiteSource, helps companies build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain attacks, open-source and custom-code vulnerabilities, and open-source license risks.
Microsoft
Microsoft provides best in class tools for code to cloud development. Attend the mainstage sessions and visit the booth to discover how to build intelligent applications using Azure OpenAI, learn about Visual Studio Code and Copilot, and see how easily and quickly you can integrate GitHub with Microsoft products and services, including getting your cloud app running on Azure. Our 2 Mainstage sessions are:
- GitHub Copilot: the AI pair programmer for today and tomorrow - AI2713M
- Quickly build and deploy OpenAI apps on Azure, infused with your own data - DEV2769M
For those attending virtually, check out these useful resources:
- VSCode Copilot
- Azure Dev Tools and Microsoft Azure (github.com)
- AKS
- Cloud Advocacy Resources for students, learners, and startups
- Microsoft Engagement Hub
Octopus Deploy
Octopus Deploy sets the standard for deployment automation for DevOps. We help software teams deploy freely – when and where they need, in a routine way. More than 3,000 organizations and 350,000 users worldwide use our universal deployment automation solution to make their complex deployments easy. From modern containers and microservices to trusted legacy applications, Octopus orchestrates software delivery in data centers, multi-cloud, and hybrid IT infrastructure.
Pangea
Pangea helps developers create secure apps without slowing down innovation. With our comprehensive framework of essential API-based security services, you can effectively and efficiently protect your users, meet security and compliance standards, and block threats. We’re turning the complex and fragmented world of security into a simple set of pay-as-you-go APIs. By eliminating the burden of building, scaling and managing complex security code you can focus on your app logic while reducing its attack surface.
Feel free to ask GitHub questions and more on our actively monitored community slack channel.
PayPal Inc.
PayPal has remained at the forefront of the digital payment revolution for more than 20 years. By leveraging technology to make financial services and commerce more convenient, affordable, and secure, the PayPal platform is empowering hundreds of millions of consumers and merchants in more than 200 markets to join and thrive in the global economy.
Pixee
Pixee built Pixeebot, a GitHub app that fixes vulnerabilities, hardens code, squashes bugs, and gives engineers more time to focus on the work that counts – all for free. It's like having an automated product security engineer paired up with every developer. Pixeebot is built on top of the open source Codemodder framework that enables highly capable expressive codemods.
pixee.ai
Postman, Inc.
Postman is an API platform that is used by over 25 million people and 500,000 organizations, including 98% of the Fortune 500. Postman simplifies each step of the API lifecycle and streamlines collaboration so teams can create better APIs—faster.
ReadMe
ReadMe transforms static API documentation into interactive developer hubs that help users succeed with your APIs. Help developers make their first call faster, quickly troubleshoot issues along the way, and get insights into API usage to focus your team on the highest-impact improvements.
With ReadMe, teams can quickly create and launch a developer hub that matches their brand. After syncing their OpenAPI Spec file or manually documenting their API, anyone can write content or make edits directly in the ReadMe platform — reducing engineering bottlenecks and saving them time on maintenance. Behind the scenes, visibility into real-time API usage allows you to see which endpoints are most popular or where developers might be getting stuck, so your team can identify where to make improvements or add more guidance.
If creating a better experience for your developers — or just getting to see more of our adorable mascot Owlbert! — excites you, you can start a 14 day free trial now on our website at readme.com.
Red Hat, Inc.
Red Hat is the world’s leading provider of enterprise open source software solutions, using a community-powered approach to deliver reliable and high-performing Linux, hybrid cloud, container, and Kubernetes technologies. Red Hat helps customers integrate new and existing IT applications, develop cloud-native applications, standardize on our industry-leading operating system, and automate, secure, and manage complex environments. Award-winning support, training, and consulting services make Red Hat a trusted adviser to the Fortune 500. As a strategic partner to cloud providers, system integrators, application vendors, customers, and open source communities, Red Hat can help organizations prepare for the digital future.
Stacklok
Stacklok’s mission is to make it easier for developers to build more trustworthy software. We provide free-to-use and open source tools to help developers make safer dependency choices and help open source maintainers adopt safer development practices. Our founders, Craig McLuckie and Luke Hinds, are veterans of the open source and software security communities: Craig McLuckie co-founded Kubernetes, an open source system for automating deployment, scaling, and management of containerized applications, and Luke Hinds founded Sigstore, a technology that changes the way that developers sign and verify software artifacts, making it dramatically simpler to do. Learn more about us at www.stacklok.com.
Swimm
Swimm is the only documentation tool built specifically for developers. We help teams close the knowledge gap with internal documentation that is always up to date, integrated into the development flow, and enhanced with AI. These capabilities help engineering organizations continuously share knowledge about their codebase, so that every developer can quickly understand code and contribute to it.
Tricentis
Tricentis is a global leader in enterprise continuous testing. The Tricentis AI-based, continuous testing portfolio of products provide a new and fundamentally different way to perform software testing. An approach that’s totally automated, fully codeless, and intelligently driven by AI.
It addresses both agile development and complex enterprise apps, enabling enterprises to accelerate their digital transformation by dramatically increasing software release speed, reducing costs, and improving software quality. Widely credited for reinventing software testing for DevOps, cloud, and enterprise applications, Tricentis has been recognized as a leader by all major industry analysts, including Forrester, Gartner, and IDC.
Tricentis has more than 2,700 customers, including the largest brands in the world, such as McKesson, Accenture, Nationwide Insurance, Allianz, Telstra, Dolby, and Vodafone. To learn more, visit tricentis.com.
Trunk.io
Trunk is your all-in-one Developer Experience (DevEx) toolkit, designed to help you ship faster without sacrificing the integrity and standards crucial for dev teams.
Interested in this book? Staff Engineer, Will Larson
Fill out this questionnaire and we'll send you a copy.
Xebia USA, Inc.
Xebia, the parent company of Xpirit, is your global GitHub-powered technology partner.
With deep roots in technology and a global perspective, we're dedicated to delivering cutting-edge solutions to businesses worldwide. As a Global Verified GitHub Partner, we're at the forefront of the GitHub ecosystem, empowering organizations to build secure, innovative software. Whether it's generative AI, end-to-end security, or streamlined collaboration through version control and CI/CD, GitHub, combined with our expertise, is the key to your success.
With more than 20 years of creating digital leaders, Xebia is the partner of choice for a wide range of solutions, from strategy consulting to software development, for its clients throughout the world.