What Depthfirst is
Depthfirst offers AI native application security functionality from threat modeling to scanning tools. The vendor site is depthfirst.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Depthfirst covers
Depthfirst is in the catalog for these capabilities. Categories: SAST, SCA, and Agentic Development Security. Catalog tags: Trending and Hot Right Now.
How to evaluate Depthfirst in a security program
Use Depthfirst as a stack candidate, not as diligence evidence. The oneNorma score for Depthfirst is 6.7/10 (percentile 96). If the real gap is in SAST, SCA, and Agentic Development Security, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what depthfirst.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
