Immersive and Cycode Announce Partnership to Elevate Software Supply Chain Security

Bristol, UK and San Carlos, US – September 11, 2025 – Immersive, the leader in people-centric cyber resilience, and Cycode, a pioneer in software supply chain security, today announced a partnership to enhance the way organizations secure their software development lifecycle (SDLC). This collaboration brings together Immersive’s expertise in helping organizations prove and improve application security (AppSec) capabilities across teams and Cycode’s comprehensive platform for identifying, prioritizing, and remediating software risks, offering a powerful, measurable path to cyber resilience.

Escalating cybersecurity threats and vulnerabilities underscore the critical need for robust AppSec capabilities across teams. Last year, 90% of organizations suffered a breach—and most blamed the cybersecurity skills gap, according to the World Economic Forum.

The partnership aims to directly address the challenges by balancing rapid feature delivery with stringent security requirements. Immersive will empower developers with the crucial software security skills needed to write secure code from the outset, enabling organizations to prove and improve these abilities. Cycode will then provide the necessary downstream data and visibility across the SDLC, leveraging best-in-class SAST, SCA and Secrets scanners in addition to an open ASPM platform ingesting data from DAST, API Security, CNAPP and other adjacent products. This continuous feedback loop will inform targeted training and improvement programs, ensuring a measurable reduction in vulnerabilities.

"Our mission at Immersive is to help our customers build organizational cyber resilience, and a critical component of that is empowering developers to write secure code," said Thanos Karpouzis, Chief Technology Officer, Immersive. "Our partnership with Cycode will allow us to bridge the gap between developer skill-building and continuous security monitoring, creating a truly integrated and effective approach to software supply chain security."

When available in the coming months, the combined offering from Immersive and Cycode, will provide a holistic solution that integrates security into every stage of the SDLC:

• Planning: Threat modeling capabilities for proactive security considerations.
• Design: Equipping developers with deep understanding of secure design principles, including OWASP Top 10 and common vulnerabilities.
• Implementation: Leveraging Cycode's SAST, SCA, and IAC scanners for rapid vulnerability identification.
• Testing: Ingesting DAST, Bug Bounty and Penetration Testing results, identifying vulnerabilities in running applications, and tracing them back to the code.
• Deployment: Securing CI/CD pipelines and managing secrets with extensive content on secure cloud and on-premise deployments.
• Maintenance: Ingesting ongoing DAST, Bug Bounty and Pen Test finding scans and aligning findings with code owners and pentest results for continuous vigilance.

This integrated approach culminates in data-backed cyber resilience, allowing organizations to not only build secure applications, but also support compliance requirements of DORA and GDPR, and align with cybersecurity frameworks such as NIST and the MITRE ATT&CK frameworks. By closing existing gaps and linking various components of the SDLC into one cohesive view, Immersive and Cycode will create an agile and secure environment that benefits both security and development teams.

"Cycode empowers companies to identify, prioritize, and remediate the software risks that truly matter," said Lior Levy, CEO of Cycode. "By combining our capabilities with Immersive’s focus on secure development skills, we are providing CISOs with the crucial reporting they need, while enabling engineering teams to confidently write secure code and meet security requirements without slowing down innovation feeling unduly burdened."

About Immersive:

Immersive, the leader in people-centric cyber resilience, helps your organisation continuously prove and improve its ability to prevent and respond to cyberthreats. Tailored to individual roles, our approach ensures your organisation is always ready for an ever-evolving threat landscape, including the opportunities and challenges posed by AI. With a relentless focus on evidence, Immersive provides unmatched visibility into your cyber resilience. Through a single enterprise platform for individuals, teams, and the entire workforce, we empower your organisation to Be Ready for what’s next.

Immersive is trusted by the world’s largest organisations and governments, including Citi, Pfizer, Humana, HSBC, the UK Ministry of Defence, and the UK National Health Service. We are backed by Goldman Sachs Asset Management, Summit Partners, Insight Partners,Citi Ventures, Ten Eleven Ventures, and Menlo Ventures.

‍

About Cycode:

Cycode empowers companies to identify, prioritize, and remediate the software risks that truly matter. Its comprehensive software supply chain security platform provides visibility, security, and integrity across the entire SDLC.

‍

Contact:

Prasad Raman

VP Partnerships

prasad@cycode.com