wget
Curating security tools
Building workflows
Finding vulnerabilities
Generating capacity for your team
Meet Smithy, the one-stop platform that makes your security tools work harder so your security team can work smarter.
Smithy gives security
teams more capacity
Identify, curate, and implement the right toolset.
We have selected and rigorously tested an array of security tools from open source and commercial operations, so that security teams can deploy the right protection for their specific code.
Bring focus and capacity back to your team.
Our platform is built for high-performance. Automatic workflows, powerful integrations, and actionable insights create more time for your team to focus on the important things. It’s streamlined, efficient, and boosts the capacity of your team.
Do it faster and more securely.
Built by security professionals to empower all teams to work securely.
Create custom workflows that take away your busy work.
We’ve put in the time to build connections between each security tool so that teams can build their own tool sets interactively by dragging and dropping tools.
Remove every barrier.
Smithy is a tool to remove barriers. Powerful yet simple to use, it helps you to plan ahead, make better decisions and execute faster. You don’t have to come up with best practices for how to use Smithy — we already built them directly into the product.
See the product demo today
Interested in maximising your security with ease? See what Smithy can do.
View DemoWe are Open-Core
Have a look at the open-source version of Smithy (Dracon)
View the Project on GitHubOur Integrations
Build the perfect set of tools for the task at hand, speed up
your tasks, and leave the heavy
lifting to us.
Source
wget
Producer
Tfsec
Producer
Black duck
Producer
Docker-Trivy
Enricher
Deduplication
Consumer
MongoDB
Source
GitHub
Producer
GoSec
Producer
AWS S3
Producer
Codeowners
Producer
Snyk
Producer
PIP Safety
Producer
semgrep
Consumer
DefectDojo
Source
Trufflehog
Consumer
ElasticSearch
Enricher
Reachability
Enricher
Standards
Producer
Python bandit
Source
Dependency
Producer
Yarn audit
Producer
Checkmarx
Producer
Dependency Track
Enricher
Policy
Consumer
GitHub
Enricher
Training
Built by security experts,
for security experts.
The smithy platform is intuitive, powerful, and developer friendly. It was built to save time & make securing data incredibly easy.
Read the Docs
Here’s what some of them
have to say about us.
With Smithy we managed to get vendor integration while maintaining flexibility and preventing lock-in. Furthermore, Smithy provided ready to use open source alternatives to security vendors so where we are missing controls we have alternatives to keep the lights on.
Head of Security
Logistics company
Smithy allowed us to offer a security tooling marketplace to all our engineering teams while treating all our security tools as an all-in-one solution with a unified api. Smithy empowered our development teams to choose their own tools but also significantly reduced the time required for our team to perform audits and gain deep visibility into the security posture of every development team.
CISO
Consumer goods marketplace
Smithy's AI enrichment engine allowed us to both reduce the time required for triaging every vulnerability and their automated Knowledge Base suggestions made every fix clear to our engineering teams.
Director of Infosec
Marketing agency
Lets talk!
Interested in maximising security with zero code?
Sign up and we'll get back to you.