1. [Home](https://www.g2.com/)
2. ...
3. [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools)
4. [Xygeni Discussions](https://www.g2.com/products/xygeni/discuss)

[
 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_65a5a9526f41e4846fd43d6c9d7c1f07/xygeni.png "Product Avatar Image")
](/products/xygeni/reviews)

[

Xygeni

](/products/xygeni/reviews)

(5)4.6/5

Xygeni: AI-Native ASPM for the Software Supply Chain Xygeni is an AI-native ASPM (Application Security Posture Management) platform that unifies native and third-party security findings into one prioritized view. Its own detection engines cover SAST, SCA, DAST, Secrets, IaC, Container, CI/CD, and Build Security, and it also ingests results from tools like Snyk, Veracode, and Checkmarx so teams don't have to abandon what they've already invested in. Every finding, regardless of source, gets scored by exploitability, reachability, and business impact through Xygeni's Dynamic Funnels, which is what drives its reported 90% cut in alert noise. Two AI systems sit underneath the platform. CoreAI acts as a correlation and reporting layer for security leaders, turning scattered findings into a single risk narrative. DevAI works earlier, inside the developer's IDE and AI coding assistants, catching problems in both human-written and AI-generated code and proposing fixes before a pull request is even opened. On the supply chain side, Xygeni's MEW engine (Malware Early Warning) is built to catch malicious open-source packages the moment they hit a public registry, ahead of when a formal malware signature would normally exist. Shield takes that enforcement to the developer's own machine, blocking unauthorized package downloads at the OS level before they reach disk. Xygeni also runs a dedicated Code Quality engine across ten languages, ranking maintainability and complexity issues alongside security findings in the same console, so a team can see when the messiest file is also the riskiest one. The platform connects to GitHub, GitLab, Bitbucket, Jenkins, and Azure DevOps, and deploys as SaaS, on-premises, or fully air-gapped. Xygeni was named Hot Company in ASPM and in GenAI Application Security at the 2026 Global InfoSec Awards.

Show More

When users leave Xygeni reviews, G2 also collects common questions about the day-to-day use of Xygeni. These questions are then answered by our community of 850k professionals. Submit your question below and join in on the G2 Discussion.

* * *

### 100.0

Nps Score

### All Xygeni Discussions

Search

Most CommentedMost HelpfulPinned by G2Newest

All DiscussionsDiscussions with CommentsPinned by G2Discussions without Comments

FilterFilter

Filter byExpand/Collapse 

Sort by

Most Commented

Most Helpful

Pinned by G2

Newest

Filter by

All Discussions

Discussions with Comments

Pinned by G2

Discussions without Comments

Sorry...

There are no questions about Xygeni yet.

## Start a New Software Discussion

Have a software question?

Get answers from real users and experts

[Start A Discussion](/products/xygeni/discussions/new)

* * *

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/hd_favicon/a3f58bb64ca44b2a292f7e3c449a1290/xygeni.svg "Product Avatar Image")

### Have you used Xygeni before?

Answer a few questions to help the Xygeni community

[
Yes
](javascript:void(0))[
Yes
](https://www.g2.com/authorize?form=signup&return_to=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fxygeni%2Fdiscuss%3Fsmall_ask%3Dxygeni)
No