Roadmap
On this page you can find a high-level overview of Coana's roadmap. At Coana, we pride ourselves on being transparent and open about our plans and we are always looking for feedback from our users. If you think anything is missing don't hesitate to reach out to us (see Contact or use your Coana Slack external connection if you are a customer).
Language support
We're building a dedicated static analysis for each language. This allows us to precisely model language-specific features for each language, providing highly accurate results. Our analyses conduct whole-program analysis of both your application code and its direct and indirect dependencies.
| Language | Reachability analysis | Traditional SCA |
|---|---|---|
| JavaScript / TypeScript | ✓ | ✓ |
| Java | ✓ | ✓ |
| Kotlin | ✓ | ✓ |
| Scala | ✓ | ✓ |
| Python | ✓ | ✓ |
| Go | H2 - 2024 | ✓ |
| C# | H2 - 2024 | ✓ |
| other languages | TBD | ✓ |
Integrations and other features
Q1 - 2024
- READYVanta Integration
- READYVulnerability dismissals (Mark vulnerabilities as not relevant on an organization or project-level)
- READYMulti-channel support for Slack integration
Q2 - 2024
- IN TESTVulnerability fixes through our CLI
- IN DEVELOPMENTJira integration
- IN DEVELOPMENTLinear integration
- IN DEVELOPMENTCI/Pipeline blocking on reachable vulnerabilities
- License scanning
- SBOM / VEX dumps
- Webhook notifications