Skip to main content
Cantina has two products. They share one platform, one loop, and one record of what was found, fixed, and verified.

​
Apex - code security

Apex is Cantina’s code security product. It performs white-box analysis of repositories and pull requests, produces defensible findings with evidence and remediation guidance, and verifies fixes. You connect a GitHub or GitLab source, scope a scan, and run it from the app, the CLI, or the API. Apex is #1 on the HackerOne US corporate leaderboard. Where it fits in the loop: find (code), remediate (fix instructions), prove (fix review).

​
Clarion - security operations

Clarion is Cantina’s security operations product. It ingests signals from the tools you already run (SIEM, EDR, cloud, identity, ticketing, and more), correlates and triages them, and executes governed response with a human in the driver’s seat. It sits above your stack rather than replacing it. Where it fits in the loop: find (signals), prioritize (correlation and exposure), remediate (governed action), prove (verified closure).

​
Together

Apex finds and fixes issues in code; Clarion consolidates and responds across the wider environment. Findings and fixes flow between them, so your team runs the whole loop from one platform.