Axosoft, LLC

United States · www.gitkraken.com · 36 vendors

Axosoft, LLC, operating as GitKraken, is a developer experience (DevEx) platform offering a suite of Git tools. These tools, including GitKraken Desktop, GitLens for VS Code, and Git Integration for Jira, aim to simplify Git version control, enhance team collaboration, and accelerate developer productivity across various environments. The company's mission is to make Git easier, safer, and more powerful for millions of developers and organizations globally.

Resilience scores

Technology vendors

Services catalogue

6 services in catalogue across 3 categories; runs on 36 sub-vendors.

Insights

Last updated 2026-03-06 · revision 4

36 direct vendors, 355 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Axosoft, LLC exhibits medium-to-high migration readiness. The company's modern tech stack (Node.js, TypeScript, React, WebSockets) and explicit mention of 'Cloud-backed platform services' indicate existing cloud adoption and a distributed architecture, which are strong enablers for migration. Extensive API integrations with major platforms (GitHub, GitLab, Bitbucket, Azure DevOps, Jira) suggest a modular system capable of seamless integration with cloud environments. SOC 2 compliance provides a solid foundation for meeting cloud security and regulatory requirements. The geographic diversity of vendor HQs (8 countries) for the 76 services suggests a potentially lower risk of vendor lock-in, offering flexibility during migration, though the total number of distinct vendors is ambiguously stated as '0'. However, challenges exist: the core 'GitKraken Desktop' product is built on Electron, a desktop framework, which may require significant re-architecture for a fully cloud-native, browser-only experience. Specific details on containerization or microservices adoption are not provided. Data residency requirements are unknown, which could introduce complexity for a global cloud migration. Finally, financial stability data (revenue concentration, growth history) is missing, making it difficult to assess the company's capacity to fund a large-scale migration, and vendor lock-in risk is explicitly unknown.

Compliance

3 in-scope frameworks identified; showing 3.

GDPR (source) — Assessment Required

As a US-based software company providing cloud services globally, GitKraken likely processes personal data of EU/EEA residents through customer accounts, employee data, and user analytics. The risk is medium because while GDPR applies to any processing of EU personal data regardless of company location, GitKraken appears to have some privacy controls in place. Non-compliance could result in fines up to 4% of annual turnover, but the company's SOC2 certification suggests awareness of data protection requirements.

Evidence: https://help.gitkraken.com/gk-dev/gk-dev-security/, https://help.gitkraken.com/gk-dev/gk-dev-security-controls/, https://trust.gitkraken.com/

ISO 27001 (source) — Assessment Required

ISO 27001 is highly relevant for software companies handling customer data and providing cloud services. While GitKraken has SOC2 certification (which covers similar security domains), there's no evidence of ISO 27001 certification. The medium risk reflects that while they have some security frameworks in place, ISO 27001 would provide additional assurance for information security management, especially for enterprise customers and international operations.

SOC 2 (source) — Compliant

GitKraken has achieved SOC2 certification, which demonstrates compliance with security, availability, processing integrity, confidentiality, and privacy criteria. This significantly reduces risk as SOC2 is specifically designed for cloud service providers. The low risk reflects their proactive approach to security controls and third-party validation of their practices.

Evidence: https://help.gitkraken.com/gk-dev/gk-dev-security/, https://trust.gitkraken.com/

Financials

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report