Efficient enterprises
develop with CodeStream

Trusted by the world's most innovative enterprises

Efficient enterprises develop with CodeStream

Less than 20% of developers report using the company’s internally generated documentation in learning how their codebase works. CodeStream allows developers to communicate about their code in real time efficiently, while generating institutional knowledge in the process. Problems are solved faster, code quality increases, and products ship sooner.

Manage large, complex codebases with CodeStream

CodeStream allows developers to ask a question about any part of the code, in context, at any time. No need to wait for a commit to get your questions answered. CodeStream works across files, branches and even across repos. You can reference solutions that were developed in one part of the code to solve a similar problem in another. With CodeStream, you can connect to your favorite issue tracker and easily link issues to particular codeblocks, simplifying their management and resolution.

Works with the tools you use

CodeStream enhances your existing services by connecting them to your source tree.
Capture institutional knowledge about your codebase without disrupting existing workflows.

Slack

MS Teams (soon!)

Live Share

Discuss code with your teammates without leaving your editor, and it'll post to Slack or MS Teams. Your teammates can reply there and the entire thread will be visible in CodeStream, attached to the block of code in question.

CodeStream makes it simple to start a collaboration session with your teammates.

GitHub

Jira

BitBucket

GitLab

Trello

asana

See some code you'd like to improve? Create an issue without leaving your editor by selecting the code and hitting a key. CodeStream enables continuous code review on any code, even after it's been merged, using your existing defect tracking tool of choice.

Reduce the impact of developer turnover

Given that employee turnover is highest in tech companies among all industries, chances are your best developers will leave and someone new will have to take over your codebase within the next 18 months. Developers report spending as much as 75% of their time trying to understand existing code. This creates a knowledge gap that slows down the development process. With CodeStream, understanding happens faster, making new developers productive sooner, and accelerating knowledge transfer.

Security is Core to Everything We Do

We know that your source code is one of your most valuable and sensitive assets. For most development teams, it's a literal representation of your most important work product.

Access to your Source Tree

CodeStream servers do not require access to your source code. To establish links between discussion threads and blocks of code, we use commit IDs and line number offsets, which are captured by the IDE when the thread is created. This approach allows us to build the service without requiring access to the source tree itself.

Data Storage

For customers who use the Slack back-end, CodeStream stores only the meta-data needed to display codemarks in the IDE. This is limited to line number offsets, commit IDs and the selected codeblock.
For customers using CodeStream messaging, we additionally store the conversations, user profile and team information.

Access Controls

Access to all internal systems is protected by a VPN, and is regularly reviewed and revoked upon termination or when no longer needed.
Within the network, access is further restricted by employee responsibility or roles using ssh and IP range based network packet filters.
Application and server logs are maintained on Loggly, a log aggregation and querying solution.
Company policy prevents customer data from being downloaded to portable devices, such as laptops.
Servers are monitored using New Relic.

Network Security

All production systems are hosted on AWS (https://aws.amazon.com/security/), where all storage volumes are encrypted at rest.
All external network communication between production services occur over HTTPS / TLS.
Systems are protected using network and server packet filters which limit all outside access to only those public services we provide.
Our dedicated security team at CodeStream handles all security escalations, and is available 24/7.
Customer data can be deleted from all primary and backup systems within 7 days of request.
Recurring third party security assessments available on request.

Site Security

All data from codestream.com is transmitted over HTTPS.
Monitoring services alert our 24/7 support team of potential attacks.
Annual third party security assessments available on request.

General Data Protection Regulation (GDPR)

CodeStream is committed to helping our users understand the rights and obligations under the General Data Protection Regulation (GDPR), which took effect on May 25, 2018. We have introduced tools and processes to ensure our compliance with requirements imposed by the GDPR and to help our customers comply as well.

Bug Reports

If you think you have found a security issue, please email us at security@codestream.com. Please do not publicly disclose the issue or any related information until we have had a chance to review it and respond to you.

CodeStream provides monetary rewards, up to $5000, for properly reported security issues. The reward is determined by the severity of the issue, the percentage of users impacted, and the likelihood of encountering the vulnerability under normal use of our service.

Efficient enterprisesdevelop with CodeStream