What Corgea is
Corgea provides a robust bundling of AI first scanning tools - from AI SAST to SCA and Secrets scanning. Corgea's especially strong at discovering vulnerabilities via AI scanning, and AI based prioritization for false positive analysis. The vendor site is corgea.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Corgea covers
Corgea is in the catalog for these capabilities. Categories: SAST, SCA, Container Vulnerability, Secret Scanning, IaC, Agentic Development Security, and Pentest. Catalog tags: Hot Right Now, Hands-on, Best for MidMarket, and Best for Enterprise.
How to evaluate Corgea in a security program
Use Corgea as a stack candidate, not as diligence evidence. The oneNorma score for Corgea is 6.5/10 (percentile 94). If the real gap is in SAST, SCA, Container Vulnerability, Secret Scanning, IaC, Agentic Development Security, and Pentest, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what corgea.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
