Qwiet AI is an application security testing vendor. Its scanning helps development and security teams find the vulnerabilities in their code and dependencies that an attacker could actually reach, and fix them inside the pipelines they already use.
Qwiet is now part of Harness, and its platform sits within Harness Application Security Testing.
At A Glance
| Vendor | Qwiet AI, part of Harness |
|---|---|
| Category | Application security testing |
| Deployment | Scanning in version control and CI/CD workflows, with CLI, IDE and API access |
| Agentic AI | AI Autofix and AI Agents for code fixes; AppSec agents in Harness AST |
| Customers | Cisco, The Home Depot, Wipro, Trellix |
| Ownership | Acquired by Harness in September 2025 |
| Market classification | Application Security |
What Qwiet Does
Application security teams often face long lists of findings from separate tools, and many of those findings can never be reached by an attacker. Qwiet’s answer is one analysis of how code is built and how data moves through it, so results from different scan types can be judged together and ranked by real exposure. Reachability analysis is the core of that approach: it “filters out 92% of open source vulnerabilities”, leaving teams with a shorter list of issues worth fixing first.
Products
NextGen Static Analysis
NextGen Static Analysis is the cross-platform SAST engine of the Qwiet AI by Harness platform. Developers and AppSec teams run it from version control or as a step in CI/CD, so code is checked before it ships, and an API lets teams manage organisations and pull scan results into their own tooling.
Combined Scanning
For teams that want one result set instead of several, a single scan runs SAST, SCA, IaC, container and secrets analysis. The findings appear in one view, ranked by whether a vulnerability is reachable and how exposed it is to active exploits, so work starts with the issues most likely to matter.
AI Autofix And AI Agents
AI Autofix and AI Agents shorten the step from finding to fix. The agents generate unit-tested code fixes that developers can review and apply, which helps teams that have more findings than time to remediate them.
Harness Application Security Testing
Harness Application Security Testing is where the Qwiet platform now leads. It offers pipeline-native testing with SAST, SCA, container and supply chain security, adds secrets detection and DAST, gives each finding a confidence score and orchestrates Harness and third-party scanners, for organisations that want application security run from the same place as their software delivery.
How It Works
| Component | What it does |
|---|---|
| Code Property Graph | Analysis rests on a Code Property Graph, a single intermediate representation across languages that merges syntax, control flow and data flow into one graph of nodes, edges and attributes, with eight language frontends. |
| Graph storage and queries | The graph is stored in OverflowDB, a graph database the team built for it, and is queried through a Scala-based domain-specific language. A documented example looks for calls such as strcpy, traces whether external input reaches the call and checks for bounds checking before confirming a vulnerability. |
| Inside Harness | The Code Property Graph is joined to the Harness Software Delivery Knowledge Graph, which powers Harness AI, and combined with runtime data from Traceable, the company Harness merged with in March 2025. |
| Delivery | Scans run in CI/CD pipelines and version control workflows, with a CLI, IDE extensions and an API. |
Agentic AI Capabilities
In Harness Application Security Testing, AI features extend beyond fixing code:
- AppSec agents triage findings by exploitability, orchestrate scans and open pull requests with fixes.
- AI-generated code and agent inputs: the product scans AI-generated code and checks the skills and prompts that agents are built from.
- Models: it scans models and generates an AI bill of materials.
- Interfaces: Claude and MCP skills, plus a natural language chat interface in Harness AI.
Integrations
| Area | Integrations |
|---|---|
| Issue tracking | Jira plugin |
| Source control | GitHub app |
| IDE | Visual Studio Code extension, JetBrains plugin |
Company Background
| Acquisition | Harness acquired Qwiet AI with effect from 26 September 2025 and announced the deal on 29 September 2025. |
|---|---|
| Leadership | Stuart McClure was CEO of Qwiet AI at the time of the acquisition. |
| Parent company | Harness was founded in 2017, is headquartered in San Francisco and is led by co-founder and CEO Jyoti Bansal. It has a reported $570 million in total funding, more than 1,000 enterprise customers and 23 offices across five continents. |
Note: This overview is compiled from Qwiet’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.