Have AI coding assistants changed how you review code?
More PRs, bigger PRs, new review checklists? Share what changed in your process and quality metrics.
Evaluating Developer Tools this quarter? This page brings together what changed, which companies are most active, what practitioners are asking and how to build a shortlist.
Tools developers use every day: AI coding assistants, code search, backend platforms, testing, and the security built into them.
Start with the news. These are the Developer Tools stories getting the most attention right now, so you know what has shifted before you talk to anyone.
As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team spotlights @vaib25vicky, exploring their methodology, techniques, and experiences hacking on GitHub. The post How one bug bounty researcher chooses the features they investigate appeared first on The GitHub Blog .
As the team behind a dedicated Rust IDE, we’re naturally curious to see how RustRover stacks up against other popular setups for Rust development and the strengths and trade-offs of each one. This article is the first in a series where we’ll look at different Rust workflows. We’re not unbiased, but we want to give […]
Waiting on “waiting for a starting agent” is a special kind of annoying when you just want your PR tests to run. It stings most when a quick one-minute build sits in the queue for ten minutes while that one slow Windows cloud instance spins up. The Warm Agents plugin is our answer to this […]
Netlify's security and compliance document library has moved into the Netlify Dashboard. To request access and learn more about the certifications and documents available, go to https://www.netlify.com/trust-center/. Any signed-in user, on any plan, can view our certifications, subprocessor list, and available compliance documents from their user settings. More sensitive documents, such as our…
The Next.js team has disclosed seven security vulnerabilities in Next.js (one high, five medium, one low), patched on September 30, 2026 in 15.5.27 and 16.3.8. The issues span server-side request forgery (SSRF), cache poisoning, and information disclosure. Several of them do not affect apps hosted on Netlify. Here's what Netlify customers need to know. Summary Some of these vulnerabilities affect…
The app your agent built in minutes stays on the same Postgres from prototype to petabyte.
More data, more tools and more control so your agent has what it needs to observe your project, investigate issues and propose fixes, autonomously.
Those stories keep returning to the same names. These are the companies we track in this category; each profile has its news, solutions and published reviews.
GitHub is a software development platform for hosting Git repositories and collaborating on code, used by developers, open source projects and enterprises. Its products include GitHub Actions for CI/CD, GitHub Copilot for AI-assisted coding, GitHub Advanced Security and Codespaces. Founded in 2008 and based in San Francisco, GitHub has been owned by Microsoft since 2018.
Microsoft is a global technology company whose enterprise portfolio spans the Azure cloud platform, Microsoft 365 productivity software, Dynamics 365 business applications, security products and developer tools such as GitHub. Founded in 1975 and headquartered in Redmond, Washington, Microsoft is one of the largest providers of cloud and AI services to businesses.
JetBrains is a software company that makes integrated development environments and developer tools, including IntelliJ IDEA, PyCharm, WebStorm, Rider, GoLand and CLion, the TeamCity CI/CD server and the YouTrack issue tracker. It created the Kotlin programming language and offers AI Assistant and the Junie coding agent. Founded in 2000 and headquartered in Prague, JetBrains is privately held.
GitLab is a DevSecOps platform company whose single application covers source code management, CI/CD, security testing and software delivery, with AI features under GitLab Duo. Available as SaaS or self-managed and built on an open core model, it serves development and platform teams. GitLab Inc. was founded in 2014, operates all-remote and is listed on Nasdaq.
Atlassian is a software company founded in Sydney, Australia, in 2002 by Mike Cannon-Brookes and Scott Farquhar. It sells team collaboration and software development tools including Jira, Confluence, Jira Service Management, Bitbucket, Loom and the Rovo AI platform, delivered mainly through Atlassian Cloud. Atlassian is listed on Nasdaq and redomiciled to the United States in 2022.
Postman is an API platform company headquartered in San Francisco, California. Its flagship Postman application lets developers design, test, document, mock and monitor APIs, and its API Network is a catalogue of public APIs. Postman began as a side project by Abhinav Asthana in 2012, was incorporated in 2014, and has significant engineering operations in Bengaluru, India.
Vercel is a US cloud platform company founded in 2015 by Guillermo Rauch, originally as ZEIT, and based in San Francisco. It provides a frontend cloud for building, deploying and scaling web applications, with global edge delivery and serverless functions. Vercel created and maintains the Next.js React framework, the AI SDK and Turborepo, and offers v0, an AI app-building tool.
Netlify is a cloud platform for building, deploying and hosting web applications and websites. It provides Git-based continuous deployment, a global edge network, serverless and edge functions, and deploy previews for frontend teams using frameworks such as Next.js, Astro and Remix. Netlify was founded in 2014 by Mathias Biilmann and Christian Bach and is headquartered in San Francisco.
Cursor is an AI-powered code editor developed by Anysphere, a San Francisco company founded in 2022 by Michael Truell, Sualeh Asif, Arvid Lunnemark and Aman Sanger. Built as a fork of Visual Studio Code, Cursor integrates AI code completion, chat, codebase-aware editing and autonomous coding agents. SpaceX completed its acquisition of Anysphere in August 2026, and Cursor continues under its own brand.
Replit is a US software company that provides a browser-based development environment and AI app-building platform. Founded in 2016 by Amjad Masad, Faris Masad and Haya Odeh, Replit lets users create, run, collaborate on and deploy software without local setup, and its Replit Agent builds applications from natural-language prompts. It serves individual developers, students, non-developers and businesses.
Sourcegraph is a US developer tools company founded in 2013 by Quinn Slack and Beyang Liu and based in San Francisco. It builds a code search and code intelligence platform that lets engineering teams search, navigate and understand large codebases across many repositories, along with AI coding tools including the Cody assistant. Its customers are mainly enterprises with large, complex code estates.
Snyk is a developer security company founded in 2015 in London and Tel Aviv and headquartered in Boston, Massachusetts. Its AI Trust platform helps developers and security teams find and fix vulnerabilities in open-source dependencies, proprietary code, containers and infrastructure as code, and secure AI-generated code and AI applications. Snyk is privately held and venture-backed.
Sentry is an application monitoring company headquartered in San Francisco, California, operated by Functional Software, Inc. Its developer-first platform provides error tracking, performance tracing, session replay, profiling, cron and uptime monitoring, and the Seer AI debugging agent. Sentry began as an open-source project in 2008, was founded as a company in 2012, and also owns code coverage tool Codecov.
Docker, Inc. is the company behind Docker, the software that popularised Linux containers for packaging and running applications. Founded as dotCloud by Solomon Hykes and launched Docker as open source in 2013, it is based in Palo Alto, California. Its products include Docker Desktop, Docker Hub, Docker Scout, Docker Build Cloud and Testcontainers, sold on subscription to developers and enterprises. Docker is privately held.
Supabase is an open source backend development platform founded in 2020 by Paul Copplestone and Ant Wilson. Built around a dedicated PostgreSQL database per project, it adds authentication, instant REST and GraphQL APIs, realtime subscriptions, file storage, edge functions and vector search. Supabase is offered as a hosted cloud service and can be self-hosted; it is widely used by startups and AI application builders.
Twilio is a US customer engagement platform and communications API company founded in 2008 in San Francisco. Developers use its APIs to add SMS, voice, WhatsApp and other messaging, email (via SendGrid), and user verification to applications, and its Segment customer data platform to unify customer data. Twilio is listed on the New York Stock Exchange.
Kong is an API management and connectivity company known for Kong Gateway, an open-source API gateway, and Kong Konnect, its cloud-hosted API platform. It also develops Kong Mesh and the Insomnia API client, serving developers and platform teams. Founded in 2009 as Mashape and renamed Kong in 2017, the privately held company is headquartered in San Francisco.
SmartBear is a US software quality and API tooling company headquartered in Somerville, Massachusetts. Its portfolio includes Swagger and SwaggerHub for API design, ReadyAPI and SoapUI for API testing, TestComplete and BugSnag, Zephyr and QMetry test management, Cucumber and PactFlow. SmartBear serves development and QA teams and is owned by private-equity firms Francisco Partners and Vista Equity Partners.
Tricentis is a software testing and quality engineering company founded in 2007 in Vienna, Austria, and headquartered in Austin, Texas. Its AI-powered platform covers test automation with Tosca and Testim, test management with qTest, performance testing with NeoLoad, SAP change impact analysis with LiveCompare and quality intelligence with SeaLights. Tricentis is privately held and acquired AI coding company Tabnine in July 2026.
Cloudflare is a US connectivity cloud company founded in 2009 and headquartered in San Francisco. It operates a global network providing CDN, DNS, DDoS protection, web application firewall, Zero Trust access and SASE services, and a developer platform including Workers serverless compute, R2 storage and Workers AI. Cloudflare has been listed on the New York Stock Exchange since 2019.
Vendor news only tells you half of it. This is what people working in Developer Tools are discussing and asking each other.
More PRs, bigger PRs, new review checklists? Share what changed in your process and quality metrics.
One answer per team, please.
With the news, the companies and the open questions in view, pick three to five companies whose products match your problem, read their recent stories and put your remaining questions to the community before you speak to sales.
If you want more background, here is more of the recent coverage.
Your agent sets up the backend from code, your users' agents work with your app through its own MCP server, and long-running tasks run in Supabase Compute.
Watch Claude Code use Postman's Context Graph to sync a collection, verify a contract, and wire CI. Try the workflow on your own API. The post Agentic SDLC with the Claude Code Plugin appeared first on Postman Blog .
Trained with reinforcement learning in real environments, Mellum2.1 is built for coding agents and fast sub-agents that run on your own hardware. Today, we’re releasing Mellum2.1, the next version of the 12B mixture-of-experts model we open-sourced in June. The architecture hasn’t changed since version 2: it’s still a compact, fast model with 2.5B active parameters, […]
An AI coding agent is software that writes, tests, and ships code independently. This level of autonomy earlier tools never had. It doesn't wait for you to accept a suggestion line by line. It takes a goal, breaks it into steps, and executes. To do that,…
This post was adapted from Kai Schmithuesen’s talk at JetBrains Game Development Day 2026. See the full video presentation and Q&A below, or keep reading! First we are going to define what we mean by code quality then have a look at how this impacts business outcomes, where AI comes in, AI’s impact on quality […]
CI/CD remains one of the foundations of modern software development. According to the JetBrains Developer Ecosystem Survey 2026, 83.4% of respondents who use DevOps practices run CI/CD pipelines. The new report looks at how teams are running those pipelines, which tools they use, and where AI fits into their workflows. It brings together findings from […]
That's a wrap on API + AI Summit 2026, Kong's biggest in-person event yet. Our ninth annual event brought together more than 1,000 engineers, architects, and leaders in Los Angeles to discuss running AI systems in production, tackle shared architecture…
Developers aren’t becoming more careless; they’re being outpaced. The tools that let developers create more software should also take on more of the work of protecting it. The post Secret protection must scale with software appeared first on The GitHub Blog .
Standing up a production agent means taking it through six stages: At API & AI Summit, we announced the evolution of Kong Konnect into the AI Connectivity Platform and announced a slate of launches built around that idea. Here's what we launched, where…
Bots make up more than a third of internet traffic, and API endpoints attract more of it than web pages do. Scanners hunting for .env files, credential-stuffing scripts, LLM training crawlers, and the long tail of low-effort probes all hit your gateway…
Learn how to build, deploy, and monitor AI agents with Astropods, from local project to production. Start with the Postman AI stack today. The post Build, Deploy & Monitor AI Agents with Astropods appeared first on Postman Blog .
What engineering teams tell us about working with AI agents. Part 1 in the series. Over the past few months, I’ve spent a lot of time on discovery calls with engineering organizations, from a 16-developer software agency to telcos, game studios, and consultancies with thousands of developers. Almost none of them are asking whether to […]
The Kotlin Toolchain is a unified entry point into Kotlin. It lets you build JVM, Android, iOS, multiplatform, and server-side applications with a simple declarative configuration. With the release of v0.13, we now recommend the Kotlin Toolchain for most new Kotlin Multiplatform (KMP) projects. Earlier this year, we promoted the Kotlin Toolchain to Alpha. Since […]