AI TrustMark

Code generation companies, products & suppliers

Products whose job is to produce substantial code or apps from a spec, not inline autocomplete. Jobs: spec-to-code; scaffolding a service; batch generation of tests or clients.

What is Code generation?

Products whose job is to produce substantial code or apps from a spec, not inline autocomplete. Jobs: spec-to-code; scaffolding a service; batch generation of tests or clients.

What problems does it solve?

Greenfield or migration work still starts from a blank repo.

Typical business use cases

  • Spec-to-code
  • Scaffolding a service
  • Batch generation of tests or clients

Important capabilities

  • Repo or spec input
  • Project output
  • Language coverage

What buyers should evaluate

  • IP of output
  • Secret handling
  • Human review gate

Risks and governance considerations

Generated services shipped without review or licence clarity.

Procurement checklist

  • Output ownership
  • Review required
  • Language and framework fit

Relevant AI Trustmark assurance

AI Trustmark independent findings appear only when an assessment or certificate exists. Category membership does not imply verification.

Methodology · How verification works

Products and providers

Open a product profile for its catalogue details, or use the provider link for the company profile. Claimed listings appear first, then by name. Payment never changes the order.

  • BLACKBOX AI

    By BLACKBOX AI

    Blackbox is an inference platform for enterprises that runs a chosen open-weight model as a dedicated deployment or routes more than 300 models through a single endpoint. Prompts a

  • Devin

    By Cognition

    Cognition operates Devin, the first autonomous software engineer. Devin plans, writes, tests, and ships production code inside your existing workflows. Devin is Cognition's softwar

  • Cursor

    By Cursor

    Cursor is Anysphere's AI code editor. The vendor describes it as an editor that generates and edits code in the local project, with agent-style tool use, offered as a SaaS subscrip

  • Diffblue Cover

    By Diffblue

    Diffblue Cover is an autonomous unit test generator for Java. Using reinforcement learning rather than an LLM, Cover Core writes and maintains human-readable JUnit or TestNG tests

  • GitHub Copilot CLI

    By GitHub

    GitHub, a Microsoft company, sells Git hosting, Actions CI and Copilot AI coding assistance. Public pages cover cloud repositories and developer tools. GitHub Copilot CLI is GitHub

  • Jules

    By Google

    Jules is Google's autonomous coding agent. A developer selects a GitHub repository and branch and writes a prompt, or adds the "jules" label to a GitHub issue; Jules clones the rep

  • IBM Bob

    By IBM

    IBM Bob is IBM's enterprise AI coding agent for building, testing, securing and modernising software across large codebases. It works in agentic modes: Ask explains or analyses cod

  • Junie

    By JetBrains

    JetBrains is a cutting-edge software vendor specializing in the creation of intelligent development tools, including IntelliJ IDEA – the leading Java IDE, and the Kotlin programmin

  • Devstral

    By Mistral AI

    Mistral AI is a Paris-headquartered model company selling open-weight and hosted language models. Public pages cover APIs, model licences and enterprise deployments. Devstral is Mi

  • OpenAI Codex

    By OpenAI

    OpenAI is a US AI research company that sells hosted assistants, APIs and developer tools, including ChatGPT and the OpenAI API. OpenAI Codex is OpenAI's software product, from Ope

  • Poolside

    By Poolside

    Poolside builds foundation models and products for software engineering aimed at enterprises that want private or custom code models. Public marketing also emphasises enterprise fo

  • Replit Agent

    By Replit

    Describe what you want. Replit builds it. Get a working app or website in minutes. No coding required. Replit Agent is Replit's software product, from Replit, Inc. Published at rep

  • Bolt

    By StackBlitz

    Bolt is StackBlitz's AI builder for creating websites, web apps and prototypes by chatting with AI. It routes each task to an appropriate model, automatically tests and refactors c

  • v0

    By Vercel

    v0 is Vercel's software product, from Vercel Inc. Published at v0.dev. Directory filing: AI app builders. Deployment options: SaaS. Recorded capabilities: Generation and Tool use.

Products

Claimed products appear first. Ranking packs and payment do not change this list.

Also used in this category

These products have a different primary category so they do not compete for the same ranking queries. They are listed here because buyers still encounter them in this job.

Related categories

Relevant procurement and assurance guides

Frequently asked questions

What is Code generation?

Products whose job is to produce substantial code or apps from a spec, not inline autocomplete. Jobs: spec-to-code; scaffolding a service; batch generation of tests or clients.

What should not be listed as Code generation?

Products whose buyer job is IDE coding assistants, low-code builders, or documentation generators. Those belong on their own category page so search queries are not split.

Has AI Trustmark independently assessed every Code generation supplier?

No. A category listing is descriptive. Independent assessment is shown only on company or product pages that carry Trustmark evidence.

Should coding assistants be allowed to send private source code to third-party models?

That is a buyer policy decision. Procurement should require the default data-use terms, retention, whether snippets leave the organisation, and whether secrets are redacted. A listing under coding assistants does not mean code stays on-premises.

How should prompt injection and tool-output attacks be controlled?

Agents that read untrusted content or tool output can be instructed to exfiltrate data or take writes. Buyers should ask what is treated as untrusted, whether tool output can change the plan, and what tests were run. Scanner marketing is not the same as independent testing.

How can buyers tell whether customer data is used to train models?

Ask whether prompts, files, logs or outputs are used to train, fine-tune or evaluate models, including by subprocessors. Require the contractual default, any opt-out, and whether the setting can be changed silently. Treat marketing 'we do not train' claims as unverified until evidenced.

What model or provider changes should a buyer insist on being told about?

Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.

How should buyers verify where AI customer data is processed?

Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.