Question 1

What is TrustDyne?

Accepted Answer

TrustDyne is the UK's first GenAI-powered Application Security Posture Management (ASPM) platform. It continuously audits the code your AI tools write, plus your firmware, mobile apps, desktop apps, web apps, and cloud infrastructure, and maps every finding to 23 compliance frameworks.

Question 2

What does TrustDyne actually scan?

Accepted Answer

Six asset types from one platform: firmware and embedded binaries, mobile apps (APK/IPA), desktop applications (Windows .exe/.dll/.msi and macOS .app/.pkg/.dmg), web applications, source code (via SBOM extraction or SARIF import), and cloud infrastructure (AWS, Azure, GCP). Most ASPM tools only reach source code repositories; TrustDyne also inspects compiled firmware, mobile, and desktop binaries directly.

Question 3

How is TrustDyne different from other ASPM platforms?

Accepted Answer

Two things most competitors don't do. First, asset coverage: platforms built around source-code scanning generally can't inspect compiled firmware, mobile, or desktop binaries; TrustDyne reaches all of those directly, alongside code, web, and cloud. Second, remediation is verified, not just suggested: every AI-proposed fix runs through a verify-and-retry pipeline, checked by real compilers and parsers, before it's shown to you, instead of being handed over as an unverified suggestion.

Question 4

What do I actually get from a scan?

Accepted Answer

A Security Evidence Pack: a single document containing your SBOM, prioritized vulnerabilities, AI-generated remediation guidance, and a compliance pass/fail mapping against the frameworks relevant to your product, generated automatically instead of assembled by hand for each vendor security review.

Question 5

Does TrustDyne just find vulnerabilities, or does it fix them too?

Accepted Answer

Both. Every proposed fix runs through a verify-and-retry pipeline: real per-language compilers and parsers, plus a deterministic vulnerability-pattern-removal check, confirm the fix actually works before it's returned, and a failed attempt is automatically retried rather than shown to you broken.

Question 6

Does TrustDyne check AI-generated code specifically?

Accepted Answer

Yes. Hallucinated Package Detection checks every dependency in your SBOM against the real PyPI, npm, and crates.io registries to catch packages an AI coding assistant referenced that don't actually exist, a documented risk known as slopsquatting. Findings are also mapped to the EU AI Act, ISO 42001, and NIST AI RMF alongside your other frameworks.

Question 7

What compliance frameworks does TrustDyne support?

Accepted Answer

23 frameworks across software, AI, cloud, mobile, industrial, medical, and financial services, from ISO 27001 and SOC 2 to the EU AI Act, UK PSTI Act, and HIPAA. Each finding cites the specific article or clause it triggers rather than a generic framework name.

Question 8

Do you store or retain our code and binaries?

Accepted Answer

No. Under Zero-Retention Analysis, uploaded binaries and code are analyzed inside an isolated cloud environment and immediately, permanently purged once the automated audit completes.

Question 9

How much does TrustDyne cost?

Accepted Answer

Free is £0/month for light testing, with 5 scans a month. Starter is £99/month for your first full security review. Growth is £299/month for continuous, multi-asset scanning. Enterprise is custom-priced for multi-cloud, multi-framework organizations.

Question 10

Can TrustDyne run in our CI/CD pipeline?

Accepted Answer

Yes, via the CI/CD Security Gate. Drop in the GitHub Action or GitLab pipeline step and every build is scanned automatically, with a structured pass/fail verdict tied to the specific commit and branch, so a regression is blocked before it merges.

Capability	TrustDyne	Cycode
Source code, SCA, secrets, IaC, container scanning	✓	✓
Firmware / embedded binary scanning Not listed among Cycode's public product set	✓	–
Mobile app binary scanning (APK/IPA) Not listed among Cycode's public product set	✓	–
Desktop application scanning (.exe/.dll/.app/.pkg) Not listed among Cycode's public product set	✓	–
Cloud posture management (CSPM) Not part of Cycode's listed product set	✓	–
AI-generated code / hallucinated-package detection Cycode's AI Risk Detection covers OWASP LLM Top 10 risks	✓	✓
Software supply chain security depth (SBOM, CI/CD, code-leak detection) Cycode states it was ranked #1 by Gartner in this category	–	✓
AI-proposed fixes verified by real compilers/parsers before shown Not stated on Cycode's public materials	✓	–
Public, self-serve pricing Cycode is demo/sales-gated; no public pricing found	✓	–

TrustDyne vs Cycode

Where Cycode is strong

Where TrustDyne differs