CI/CD catalog: No need to build pipelines from scratch. Use pre-configured CI/CD components from our public catalog, or create a private catalog to share pipelines within your organization.

Merge trains: Keep your main branch green and developers collaborating effectively.

Parent-child pipelines: Split growing pipelines into multiples to decrease complexity and improve performance.

Hosted runners: Run your CI/CD jobs without having to procure your own infrastructure — or bring your own.

Continuous vulnerability scanning: Protect your organization by scanning for known open source vulnerabilities, regardless of when your code was last updated.

SAST: Scan your application source code and binaries to spot potential vulnerabilities before deployment.

Compliance pipelines: Ensure that important policies are enforced, whether it’s standard regulatory controls or your own policy framework.

Progressive delivery: Control where you deploy and test code in production with a small portion of your user base.

Canary deployments: Gradually roll out changes to reduce risk and impact.

Deployment flexibility: Deploy to virtual machines, Kubernetes clusters, or Faas from multiple cloud vendors.

Security vulnerability explanations: Remediate vulnerabilities more efficiently and ship secure code faster thanks to info about the vulnerability, how it might be exploited, and how to fix it.

Root cause analysis: Save time troubleshooting with AI-assisted root cause analysis for CI/CD job failures.

Value stream forecasts: Identify potential areas for future improvement, and strengthen planning and decision-making.