appCD Launches Generative Infrastructure from Code
March 05, 2024

appCD unveiled early access to its generative Infrastructure from Code (IfC) software and announced $6 million in seed funding.

appCD uses application code to generate Infrastructure from Code automatically, no code annotation or extensive configuration coding required. With appCD, DevSecOps can analyze, visualize and generate infrastructure as code (IaC) with golden standards automatically applied. Backed by notable venture capital firms Thomvest Ventures, WestWave Capital, FireBolt, and Secure Octane, appCD will utilize the funding to speed product development, drive its go-to-market strategy, and fuel company growth.

"We are on a mission to remove the burden of Infrastructure as Code by auto-generating it from the application code itself while automatically applying operations and security standards," said Sachin Aggarwal, co-founder and CEO of appCD. "Our goal is to enable any user to securely deploy applications to any cloud without delay by being application-centric, cloud-agnostic and developer-first. We are thrilled to partner with top-notch investors that support our mission in bringing this revolutionary technology to DevOps and developers around the world."

appCD generates IaC automatically from the application code, without requiring any code changes, and applies preset standards. appCD analyzes, visualizes and generates Infrastructure from Code:

- Analyze: Reviews Python and Java code to understand infrastructure and cloud dependencies and infer API, service configuration, ingress/egress, environment variables.

- Visualize: Creates a view of the deployment architecture, enabling users to enhance it with simple drag and drop functionality and connections with guardrails, validating resources.

- Generate: Creates Terraform or Helm charts based on the application's inferred cloud dependencies and automatically applies golden standards at creation, complying with HIPAA, NIST-CSF, PCI, GDPR regulations.

"Thomvest Ventures invests in innovative and disruptive companies with a differentiated technology platform led by strong entrepreneurs in cloud, cybersecurity, and AI infrastructure," said Umesh Padval, Managing Director at Thomvest Ventures. "We are very excited about our latest investment in appCD, which is at the intersection of all three verticals, solving a real problem by enabling any application developer to securely and automatically deploy applications to any cloud with minimum latency. We are thrilled to partner with serial entrepreneurs Sachin Agarwal and Asif Awan in building a category-leading company."

"The holy grail of accelerating deployment of applications in the cloud requires the ability to create the infrastructure as code in an automated, secure way with least privileges, and aligned to architectural best practices," said Vishal Gupta, CIO and CTO, Lexmark International. "appCD is closest to making this vision happen right from application code itself and bringing stellar value to platform teams."

appCD streamlines the application deployment process by removing bottlenecks and enabling accelerated time to market. Standards are built into the application's auto-generated deployment configuration, not scanned after the fact. Cloud is secure by default, while the security team still controls and enforces the applied policies. Teams are aligned across the business as IaC is auto-generated based on the needs of the application code, meaning deployed application is supported with right-sized infrastructure resources with least-privilege access controls.

Early access will support Python and Java programming languages and AWS, with support for Azure coming soon.

Share this

Industry News

May 02, 2024

Parasoft announces the opening of its new office in Northeast Ohio.

May 02, 2024

Postman released v11, a significant update that speeds up development by reducing collaboration friction on APIs.

May 02, 2024

Sysdig announced the launch of the company’s Runtime Insights Partner Ecosystem, recognizing the leading security solutions that combine with Sysdig to help customers prioritize and respond to critical security risks.

May 02, 2024

Nokod Security announced the general availability of the Nokod Security Platform.

May 02, 2024

Drata has acquired oak9, a cloud native security platform, and released a new capability in beta to seamlessly bring continuous compliance into the software development lifecycle.

May 01, 2024

Amazon Web Services (AWS) announced the general availability of Amazon Q, a generative artificial intelligence (AI)-powered assistant for accelerating software development and leveraging companies’ internal data.

May 01, 2024

Red Hat announced the general availability of Red Hat Enterprise Linux 9.4, the latest version of the enterprise Linux platform.

May 01, 2024

ActiveState unveiled Get Current, Stay Current (GCSC) – a continuous code refactoring service that deals with breaking changes so enterprises can stay current with the pace of open source.

May 01, 2024

Lineaje released Open-Source Manager (OSM), a solution to bring transparency to open-source software components in applications and proactively manage and mitigate associated risks.

May 01, 2024

Synopsys announced the availability of Polaris Assist, an AI-powered application security assistant on the Synopsys Polaris Software Integrity Platform®.

April 30, 2024

Backslash Security announced the findings of its GPT-4 developer simulation exercise, designed and conducted by the Backslash Research Team, to identify security issues associated with LLM-generated code. The Backslash platform offers several core capabilities that address growing security concerns around AI-generated code, including open source code reachability analysis and phantom package visibility capabilities.

April 30, 2024

Azul announced that Azul Intelligence Cloud, Azul’s cloud analytics solution -- which provides actionable intelligence from production Java runtime data to dramatically boost developer productivity -- now supports Oracle JDK and any OpenJDK-based JVM (Java Virtual Machine) from any vendor or distribution.

April 30, 2024

F5 announced new security offerings: F5 Distributed Cloud Services Web Application Scanning, BIG-IP Next Web Application Firewall (WAF), and NGINX App Protect for open source deployments.

April 29, 2024

Code Intelligence announced a new feature to CI Sense, a scalable fuzzing platform for continuous testing.

April 29, 2024

WSO2 is adding new capabilities for WSO2 API Manager, WSO2 API Platform for Kubernetes (WSO2 APK), and WSO2 Micro Integrator.