What Apona is
Apona provides a combination SCA, SAST, and DAST features. Something unique about their SCA is providing a function level fix if one is available to avoid the patch. The vendor site is www.apono.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Apona covers
Apona is in the catalog for these capabilities. Categories: DAST, SAST, and SCA. Catalog tags: Nerdy and Best for Enterprise.
How to evaluate Apona in a security program
Use Apona as a stack candidate, not as diligence evidence. The oneNorma score for Apona is 4.5/10 (percentile 27). If the real gap is in DAST, SAST, and SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.apono.io publishes. Contrast it with pentesting and Security Cloud & Compliance.