What Clover is
Clover provides a platform for doing continuous AI threat modeling and design review. By connecting to organizational data sources, they can help map your application architecture and accelerate your threat modelling process. They then continuously enforce these decisions through AI code review of pull requests and AI code generation. The vendor site is clover.security. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Clover covers
Clover is in the catalog for these capabilities. Categories: SAST and Agentic Development Security. Catalog tags: Trending and Hot Right Now.
How to evaluate Clover in a security program
Use Clover as a stack candidate, not as diligence evidence. The oneNorma score for Clover is 6.3/10 (percentile 89). If the real gap is in SAST and Agentic Development Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what clover.security publishes. Contrast it with pentesting and Security Cloud & Compliance.
