14 Oct 2026 · TrustList Editorial
Shopify switches off its Global Catalog REST API on 2 November
All calls to discover.shopifyapps.com/global fail from that day, saved catalogs included; apps must move to Global Catalog MCP, while the…
4 of 15 application development software ranked on evidence in the Q4 2026 edition.
TrustList ranking
Q4 2026 edition
4 of 15 application development software ranked on evidence held on 12 October 2026: client reviews, vetting, awards and facts each business states on its own website, which we read and date. Nobody pays to be placed.
Positions are fixed for the quarter; the next edition is due in January 2027.
Kit is a runtime for coding agents from Speakeasy, packaged as a single static binary.
Why #1: 2 major incidents in 90 days (status page) · SOC 2 Type II, ISO 27001 · GDPR compliant, HIPAA compliant, as stated on its own website, read 5 Oct 2026
Not yet on record: client reviews, vetting.
Weave Router is a routing layer for coding agents, built by Weave Engineering Intelligence.
Why #2 (shared): No major incidents in 90 days (status page)
Not yet on record: client reviews, vetting.
Bolt Forge is a third agent inside Bolt.new, sitting beside Standard and Max, and it uses open-source models exclusively.
Why #2 (shared): No major incidents in 90 days (status page)
Not yet on record: client reviews, vetting.
Cloud Macs and Linux machines matching Bitrise CI, for developers and coding agents, started in seconds and archived later
Why #4: 6 major incidents in 90 days (status page)
Not yet on record: client reviews, vetting.
Aclif is a toolkit for writing command-line programs that AI agents run to reach SaaS platforms.
Airuncode is a runtime that executes AI coding agents on the user's own computer.
Capsule is a format and player for self-contained applications, built around a single portable file.
Critic by Feyn is a review tool for code that AI coding agents write, and its makers showed it on 24 September 2026. The company named in the site footer is Chonkie, Inc.
ForensicDbg is a post-mortem debugger for native Windows programs on x86 and x64, from Stern Look.
Hyperprobe is a debugging tool for backend services that are already running in production.
Kilo Code for JetBrains brings the Kilo Code agentic engineering platform to JetBrains editors as a native plugin.
Mastra Factory is an open-source software delivery environment from Mastra, the company behind a TypeScript framework for building AI agents.
PR Lens, from Coldtea.ai, draws a pull request as animated architecture and data-flow diagrams and posts them as a comment inside the pull request.
sidebranch is a browser extension that helps developers review user interface changes.
TrackMCP adds observability to servers built on the Model Context Protocol. It shows who is using a server, which tools get called, and where workflows finish or fail.
For vendors
The order is earned on evidence: client reviews, vetting, awards and the facts a business states on its own website, which we read and date. Nobody can pay to move up. Add reviews or verified facts to your free profile to move up at the next edition; there are two ways to stand out now, and each one says what it is.
Not on TrustList yet? Add your product or claim its listing, free.
Free
Paid · always labelled
Every other way we rank application development software, by what they do and where they are.
Articles on this subject first, then the newest.
14 Oct 2026 · TrustList Editorial
All calls to discover.shopifyapps.com/global fail from that day, saved catalogs included; apps must move to Global Catalog MCP, while the…
14 Oct 2026 · TrustList Editorial
The high-rated flaw, CVE-2026-92392, is a use-after-free in HTTP/2 uploads affecting curl 8.12.0 to 8.22.0; the other 23 are rated low, and…
14 Oct 2026 · TrustList Editorial
The Deno runtime gets a year of monthly bug and security releases, then development ends; JSR keeps running on Cloudflare, and paying…
Jump to another ranked category.
Everything here links back to the same verified catalogue. Pick your next stop.