GrammaTech

GrammaTech is a cybersecurity research and software engineering company founded in 1988 as a spin-off from Cornell University. Its roots lie in programming-language research conducted at Cornell, including work on integrated development environments, program synthesis, attribute grammars, and software analysis. The company developed commercial tools intended to help organizations understand, test, secure, and harden software across both source-code and binary-code environments. Its historical commercial portfolio included CodeSurfer, a program-slicing and software-understanding product, and CodeSonar, a static-analysis platform designed to identify defects and security vulnerabilities in source code and compiled software. The company also commercialized binary-analysis technologies developed through long-running research collaboration with the University of Wisconsin. These technologies supported analysis of executable files even when source code was unavailable, and contributed to products such as CodeSurfer/x86, CodeSonar for Binaries, and CodeSentry, a software composition analysis tool. Alongside its commercial products, GrammaTech has operated a research division carrying out projects for private contractors and U.S. government agencies. Its research areas have included static and dynamic analysis, binary reverse engineering, vulnerability detection and mitigation, binary transformation and hardening, and autonomous or cyber-reasoning systems. The company has worked with agencies and institutions including NASA, the National Science Foundation, and branches of the U.S. Department of Defense. GrammaTech gained public attention through its participation in the 2016 DARPA Cyber Grand Challenge. As leader of Team TECHx, a collaboration involving the University of Virginia, it used the Xandra cyber-reasoning system and finished second in the competition, receiving a $1 million award. The company changed ownership in 2019 when it was acquired by Five Points Capital. In September 2023, Battery Ventures acquired GrammaTech's software-products division, including the CodeSonar and CodeSentry product lines. That transaction created an independent company operating as CodeSecure, Inc., headquartered in Bethesda, Maryland, with Daniel Goodwin appointed chief executive. The transaction separated those commercial software operations from GrammaTech's remaining identity as a research-oriented cybersecurity organization. In late 2024, the Play ransomware group publicly named GrammaTech as an alleged victim of a cyberattack and claimed access to confidential personal and business information. Researchers reported that no data samples had been published and that the claims could not be independently verified. The incident therefore remained an allegation rather than a confirmed breach, with external assessments suggesting that any exposure may have been limited.

GrammaTech emerged from Cornell University research in programming languages and software development environments. Before the company was established, its founders were associated with the Cornell Program Synthesizer, an early integrated development environment developed in the late 1970s, and the Synthesizer Generator, a system for producing language-based programming environments from attribute-grammar specifications. These projects established the technical foundation for later work in program understanding, formal analysis, and software engineering tools. The company was founded in 1988 as a Cornell spin-off. Its early technology was connected to software-development and program-analysis research, and systems built with the Synthesizer Generator included tools for Ada verification and software-quality checking. The academic significance of this work was later recognized through ACM SIGSOFT retrospective-impact awards, including a 2010 award associated with the Synthesizer Generator work of co-founders Tom Reps and Tim Teitelbaum. In 1999, GrammaTech commercialized the Wisconsin Program-Slicing Tool as CodeSurfer for C and C++. Program slicing helps developers isolate the portions of a program that influence a particular computation, making it useful for program comprehension, debugging, maintenance, and security analysis. CodeSonar, a static-analysis product for C and C++, became available in 2005 and extended the company's commercial focus toward finding programming defects and vulnerabilities before software deployment. GrammaTech also developed a substantial binary-analysis research program. From 2001 onward, it collaborated with the University of Wisconsin on analysis, reverse engineering, and anti-tamper technologies for binary executables. The work addressed situations in which analysts must inspect compiled software without access to source code. Its technical outputs included CodeSurfer/x86, a version of CodeSurfer adapted to Intel x86 executables, and CodeSonar/x86, intended to identify defects and vulnerabilities in stripped binaries. The research also explored ways to generate analysis systems automatically from formal descriptions of instruction-set architectures. This line of work later supported commercial offerings including CodeSonar for Binaries and CodeSentry. GrammaTech's research activities expanded beyond commercial software. The company undertook projects for private contractors and U.S. government organizations, including NASA, the National Science Foundation, and multiple Department of Defense branches. Its research covered static and dynamic analysis of source code and binaries, vulnerability discovery and mitigation, software hardening, binary transformation, and autonomous computing. In 2016, GrammaTech participated in DARPA's Cyber Grand Challenge, a competition focused on automated cyber defense. It led Team TECHx, working with the University of Virginia, and used the jointly developed Xandra cyber-reasoning system. Team TECHx finished second and received a $1 million award, highlighting GrammaTech's ability to apply program-analysis research to automated vulnerability discovery and defense. The company was acquired by Five Points Capital in 2019. A further structural change occurred in September 2023, when Battery Ventures acquired GrammaTech's software-products division, including CodeSonar and CodeSentry. The acquired operations became an independent company named CodeSecure, Inc., based in Bethesda, Maryland. Daniel Goodwin, previously general manager of GrammaTech's research division, was appointed to lead the new company. The transaction distinguished the commercial product business from GrammaTech's continuing research identity. In late 2024, the Play ransomware group alleged that it had compromised GrammaTech and accessed confidential personal and business data. Public reporting indicated that the attackers did not release data samples, so the claim could not be independently confirmed. Researchers characterized the potential impact as limited or uncertain rather than treating the allegation as an established breach.

• 2023

  Software-products division becomes CodeSecure

  [1]GrammaTechen.wikipedia.org

  Battery Ventures acquired the CodeSonar and CodeSentry product operations and established CodeSecure, Inc. as an independent business.

• 2019

  Acquired by Five Points Capital

  [1]GrammaTechen.wikipedia.org

  Five Points Capital acquired GrammaTech.

• 2016

  Team TECHx places second in DARPA Cyber Grand Challenge

  [1]GrammaTechen.wikipedia.org

  GrammaTech-led Team TECHx, collaborating with the University of Virginia, finished second using the Xandra cyber-reasoning system and earned $1 million.

• 2010

  Founders receive ACM SIGSOFT retrospective-impact recognition

  [1]GrammaTechen.wikipedia.org

  Tom Reps and Tim Teitelbaum received a retrospective-impact award for work connected to the Synthesizer Generator.

• 2005

  CodeSonar becomes available

  [1]GrammaTechen.wikipedia.org

  GrammaTech made CodeSonar, a static-analysis tool for C and C++, available commercially.

• 2001

  Binary-analysis collaboration begins with the University of Wisconsin

  [1]GrammaTechen.wikipedia.org

  GrammaTech and the University of Wisconsin began a collaboration involving binary analysis, reverse engineering, and anti-tamper tools.

• 1999

  CodeSurfer commercialized

  [1]GrammaTechen.wikipedia.org

  The Wisconsin Program-Slicing Tool was commercialized as CodeSurfer for C and C++ software.

• 1988

  Founded as a Cornell University spin-off

  [1]GrammaTechen.wikipedia.org

  GrammaTech was established as a technology company originating from Cornell University research in programming languages and software analysis.

A research-led cybersecurity and software assurance specialist focused on analyzing source code, binaries, and software behavior for defects, vulnerabilities, reverse-engineering needs, and resilience requirements.

• Program slicing and software understanding · 1999

  CodeSurfer

  CodeSurfer originated as the commercial version of the Wisconsin Program-Slicing Tool. It analyzes C and C++ programs to show the relationships between computations and the code that affects them, supporting program comprehension, debugging, maintenance, and security-oriented review.

• Static software analysis · 2005

  CodeSonar

  CodeSonar is a static-analysis platform for identifying software defects and security vulnerabilities. Its original focus included C and C++ source code, allowing development teams to detect problems during the software lifecycle rather than only after deployment.

• Binary analysis

  CodeSonar for Binaries

  CodeSonar for Binaries applies software-analysis techniques to compiled executables, including cases where source code is unavailable. It grew from GrammaTech's research into analysis of binary programs and vulnerability discovery in stripped or otherwise opaque software.

• Software composition analysis

  CodeSentry

  CodeSentry is a software composition analysis product associated with GrammaTech's binary and software-assurance work. It is intended to help identify components and security risks within software, including compiled or embedded software environments.

• Cyber-reasoning system · 2016

  Xandra

  Xandra is a cyber-reasoning system co-developed by GrammaTech and the University of Virginia for automated cyber defense research. It was used by Team TECHx in DARPA's 2016 Cyber Grand Challenge to support automated analysis and response.

• 2024

  Play ransomware allegation

  The Play ransomware group named GrammaTech as an alleged victim and claimed to have accessed confidential personal and business information. No public samples were reported, and the allegation was not independently verified.

  Source

Read more

• 2023

  Spin off CodeSonar and CodeSentry into CodeSecureM&A

  Background

  GrammaTech separated its software-products operations from its broader research activities through a transaction with Battery Ventures.

  Action taken

  Battery Ventures acquired the CodeSonar and CodeSentry product lines and established CodeSecure, Inc. as an independent company headquartered in Bethesda, Maryland.

  Aftermath

  Daniel Goodwin was appointed chief executive of CodeSecure, while GrammaTech continued to be identified with its research-oriented cybersecurity activities.

  Source

• 2019.11.12

  Reported2019.11.12

  Mike Dager becomes GrammaTech CEO[2]Mike Dager 出任 GrammaTech 首席执行官presseschleuder.com

  Mike Dager was identified as GrammaTech's new CEO in connection with Five Points Capital's acquisition of the company. The article says he would lead GrammaTech.

• 2019.11.12

  Reported2019.11.12

  Five Points Capital acquires GrammaTech[2]Mike Dager 出任 GrammaTech 首席执行官presseschleuder.com

  Five Points Capital acquired GrammaTech, a developer of software-assurance tools and cybersecurity solutions. The acquisition involved Five Points Capital, Pleasant Bay Capital, Crescendo Capital, Capital Southwest Corporation and GrammaTech CEO Mike Dager.

Read more

1. 1GrammaTechen.wikipedia.org
2. 2Mike Dager 出任 GrammaTech 首席执行官presseschleuder.com