Armis unveils AI-native Centrix platform for app security

Armis has launched a new application security product under its Centrix brand, pitching it as a single platform to secure software across the development lifecycle as organisations contend with growing volumes of code and more AI-assisted development.

The product, Armis Centrix for Application Security, targets security teams managing risk across source code, build pipelines, and production environments. Armis positions application code and related components as a primary attack vector, with vulnerabilities introduced during rapid development cycles and propagated through software supply chains.

Nadir Izrael, CTO and co-founder of Armis, tied the launch to changing development practices and the use of generative AI coding tools.

Armis describes the application security market as fragmented, with multiple point tools creating overlap and noise. It says the new product focuses on detection, contextualisation, and remediation. The platform is described as "infrastructure-aware," taking into account the CI/CD pipeline and production controls.

Armis says the product scans across an organisation's application estate, including source code, third-party dependencies, container images, and configuration files. It also claims support for an unlimited number of programming languages and variants.

The platform is designed to detect known issues as well as variants that can evade template-based approaches. Armis says it flags problematic code before it creates operational or security impact, aiming to reduce alert fatigue and improve response times for development teams.

The launch comes as security leaders face pressure to align security checks with faster release cadences. Armis is pitching the product as part of a broader shift toward embedding security throughout development workflows, rather than relying on late-stage testing.

Katie Norton, research manager for DevSecOps and software supply chain security at IDC, said AI-assisted coding changes how quickly vulnerabilities can enter software.

Armis made several performance claims for the platform, including a 70% reduction in false alarms and faster mean time to resolution. It also says it automates remediation workflows by routing findings to the appropriate developer with instructions.

The platform is designed to integrate with existing development and security tools, with onboarding and coverage from source code through production systems. Armis says these elements help reduce friction between security and software teams.

Dana Gilboa, chief product officer of Armis, said the company differentiates on detection accuracy and coverage across programming languages.

Armis also pointed to results from the Public CASTLE Benchmark C@250, which it described as a third-party verified test of a tool's ability to detect and stop code issues before deployment. It said Armis Centrix for Application Security achieved the highest performance in that benchmark compared with other listed tools.

Armis Centrix for Application Security is available immediately.