# Arnica

> Arnica is the governance and security platform for the Agentic Development Lifecycle (ADLC) — securing AI-generated code before, as, and after it's written, with full-stack application security (AI SAST, SCA, secrets detection, IaC, container image scanning, SBOM, package reputation) delivered pipelineless and developer-native, with zero developer adoption dependency.

Arnica secures code at every phase of the agentic development lifecycle: governing what AI coding agents are allowed to do before code is written (Agentic Rules Enforcer), catching vulnerabilities as code is written (AI SAST on push and on pull request), and surfacing risk in existing codebases after the fact (AI SAST on routine scan) — plus maintaining an inventory of every MCP, skill, and agentic rule in use across the organization. Arnie is Arnica's multi-agent AI security suite, integrating natively into GitHub Copilot, Cursor, Claude, and Gemini workflows without requiring CI/CD pipeline changes or plugin installs.

## Solutions

- [Arnie AI](https://www.arnica.io/solutions/arnie-ai): Multi-agent software development security suite enforcing security at code generation, on push, in pull requests, and across the backlog.
- [AI SAST](https://www.arnica.io/solutions/ai-sast): AI-powered static application security testing combining deterministic analysis with context-aware detection, run on push, on PR, and via routine scan.
- [Agentic Rules Enforcer](https://www.arnica.io/solutions/agentic-rules-enforcer): Injects version-controlled secure-coding rules directly into AI coding assistants so AI-generated code is secure by default.
- [AI-Assisted & Automated Mitigation](https://www.arnica.io/solutions/ai-assisted-automated-mitigation): AI-generated, context-aware fix suggestions for SAST and IaC findings; autonomous remediation for validated hardcoded secrets; automated safe-upgrade-path guidance for SCA.
- [Application Security Posture Management (ASPM)](https://www.arnica.io/solutions/aspm): Centralized risk prioritization and posture visibility across the software supply chain.
- [Pipelineless Security](https://www.arnica.io/solutions/pipelineless-security): Security enforcement injected at the source-code-management layer with no CI/CD pipeline dependency.
- [Developer-Native Security Workflows](https://www.arnica.io/solutions/developer-native-security-workflows): Delivers findings inside the tools developers already use (Slack, GitHub, Jira) instead of a separate security dashboard.
- [Container Image Mapping & Scanning](https://www.arnica.io/solutions/container-image-scanning): Maps and scans container images for vulnerabilities and supply chain risk.
- [Security Champions](https://www.arnica.io/solutions/security-champions): Identifies and enables developer security champions across engineering teams.
- [Compliance & Security Reporting](https://www.arnica.io/solutions/compliance-security-reporting): Audit-ready reporting and developer feedback loop for compliance teams.

## Use Cases

- [Hardcoded Secrets](https://www.arnica.io/use-cases/hard-code-secrets)
- [SCA (Software Composition Analysis)](https://www.arnica.io/use-cases/sca)
- [SAST (Static Application Security Testing)](https://www.arnica.io/use-cases/sast)
- [IaC (Infrastructure as Code)](https://www.arnica.io/use-cases/iac)
- [Package Reputation](https://www.arnica.io/use-cases/package-reputation)
- [SBOM](https://www.arnica.io/use-cases/sbom)

## Pricing

- [Pricing](https://www.arnica.io/pricing)

## Documentation

- [Docs](https://docs.arnica.io/): Product and technical documentation.

## Company

- [About](https://www.arnica.io/company/about)
- [Case Studies](https://www.arnica.io/case-studies)
- [Blog](https://www.arnica.io/resources/blog)

## Optional

- [Press](https://www.arnica.io/resources/press)
- [Careers](https://www.arnica.io/company/careers)
- [Security](https://www.arnica.io/company/security)