Best Static Application Security Testing (SAST) Software
Static application security testing (SAST) software inspects and analyzes an application’s code to discover security vulnerabilities without actually executing code. These tools are frequently used by companies with continuous delivery practices to identify flaws prior to deployment. SAST tools provide vulnerability information and remediation suggestions for development teams to resolve. There is relation and overlap between SAST tools and static code analysis software, but SAST products are more focused on security testing. Static code analysis products, on the other hand, combine a number of analytical practices, test management, and team collaboration features.
SAST vs DAST — Learn the difference
To qualify for inclusion in the Static Application Security Testing (SAST) category, a product must:
Best Static Application Security Testing (SAST) Software At A Glance
G2 takes pride in showing unbiased reviews on user satisfaction in our ratings and reports. We do not allow paid placements in any of our ratings, rankings, or reports. Learn about our scoring methodologies.
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
GitHub is where the world builds software. Millions of individuals, organizations and businesses around the world use GitHub to discover, share, and contribute software. Developers at startups to Fort
- Software Engineer
- Senior Software Engineer
- Computer Software
- Information Technology and Services
- 46% Small-Business
- 30% Mid-Market
2,626,894 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Security should be an integral part of the software development process, not an afterthought. Founded by Neatsun Ziv and Lion Arzi, two former Check Point executives, OX is the first and only Active A
- Security Engineer
- Financial Services
- Information Technology and Services
- 63% Mid-Market
- 25% Enterprise
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Aikido is an application security (AppSec) platform specifically designed for developers who prioritize their coding tasks over managing security alerts. Our innovative solution consolidates nine esse
- Computer Software
- Information Technology and Services
- 78% Small-Business
- 22% Mid-Market
2,538 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
The new ways of building software create the necessity to support new vulnerabilities and new remediation workflows. These needs have emerged so abruptly that they have given rise to a young and highl
- Software Engineer
- Software Developer
- Computer Software
- Information Technology and Services
- 84% Small-Business
- 12% Mid-Market
6,111 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
HCL AppScan is a comprehensive suite of market-leading application security testing solutions (SAST, DAST, IAST, SCA, API), available on-premises and on-cloud. These powerful DevSecOps tools pinpoint
- Information Technology and Services
- Computer & Network Security
- 54% Enterprise
- 28% Small-Business
441,564 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Jit is redefining application security by introducing the first Agentic AppSec Platform, seamlessly blending human expertise with AI-driven automation. Designed for modern development teams, Jit empow
- Computer Software
- Financial Services
- 53% Mid-Market
- 36% Small-Business
521 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
GitLab is the most comprehensive AI-Powered DevSecOps platform that enables software innovation by empowering development, security, and operations teams to build better software, faster. With GitLab
- Software Engineer
- Senior Software Engineer
- Computer Software
- Information Technology and Services
- 37% Small-Business
- 37% Mid-Market
167,596 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
SonarQube helps developers continuously improve the quality and security of both AI-generated and human-written code. It addresses key areas including: - Code Quality: Ensuring all code meets high st
- Software Engineer
- Computer Software
- Information Technology and Services
- 44% Enterprise
- 38% Mid-Market
10,226 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Invicti is an automated application and API security testing solution that allows enterprise organizations to secure thousands of websites, web apps, and APIs and dramatically reduce the risk of attac
- Financial Services
- Information Technology and Services
- 50% Enterprise
- 25% Mid-Market
2,548 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Snyk (pronounced sneak) is a developer security platform for securing custom code, open source dependencies, containers, and cloud infrastructure all from a single platform. Snyk’s developer securit
- Software Engineer
- Computer Software
- Information Technology and Services
- 42% Mid-Market
- 38% Small-Business
19,789 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Checkmarx is constantly pushing the boundaries of Application Security (AppSec) Testing to make security seamless and simple for the world’s developers while giving CISOs the confidence and control th
- Information Technology and Services
- Computer Software
- 57% Enterprise
- 26% Mid-Market
7,184 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Coverity® is a fast, accurate, and highly scalable static analysis (SAST) solution that helps development and security teams address security and quality defects early in the software development life
- Software Engineer
- Computer Software
- Information Technology and Services
- 64% Enterprise
- 27% Mid-Market
23,126 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Fortify Static Code Analyzer is designed to identify security vulnerabilities in the user's source code early in the software development lifecycle and provides best practices so developers can code m
- Banking
- Financial Services
- 50% Enterprise
- 29% Small-Business
21,716 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Veracode helps companies that innovate through software deliver secure code on time. Unlike on-premise solutions that are hard to scale and focused on finding rather than fixing, Veracode comprises a
- Information Technology and Services
- 75% Enterprise
- 29% Mid-Market
22,303 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Semgrep is a highly customizable application security platform built for security engineers and developers. Semgrep scans first and third-party code to find security issues unique to an organization,
- Computer Software
- Information Technology and Services
- 58% Mid-Market
- 29% Enterprise
3,817 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Codacy is the only DevSecOps platform that delivers plug-and-play code health and security scanning for AI and human generated code. Future-proof your software – from source code to runtime – without
- Computer Software
- 61% Small-Business
- 21% Mid-Market
5,009 Twitter followers
- Overview
- User Satisfaction
- Seller Details
NowSecure Inc., based in Oak Park, Illinois, was formed in 2009 with a mission to advance mobile security worldwide. We help secure mobile devices, enterprises and mobile apps.
- 41% Mid-Market
- 37% Enterprise
6,439 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
JFrog Ltd. (Nasdaq: FROG) is on a mission to create a world of software delivered without friction from developer to device. Driven by a “Liquid Software” vision, the JFrog Software Supply Chain P
- Software Engineer
- DevOps Engineer
- Information Technology and Services
- Computer Software
- 58% Enterprise
- 32% Mid-Market
23,148 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Kiuwan is a robust, end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Security Testing (SAST), Software Composi
- Information Technology and Services
- 43% Enterprise
- 37% Mid-Market
3,405 Twitter followers
- Overview
- User Satisfaction
- Seller Details
DerScanner is a complete application security testing solution to eliminate known and unknown code threats across Software Development Lifecycle. DerScanner static code analysis offers developers the
- Information Technology and Services
- 58% Small-Business
- 42% Mid-Market
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Contrast Security is the global leader in Application Detection and Response (ADR), empowering organizations to see and stop attacks on applications and APIs in real time. Contrast embeds patented thr
- Insurance
- Information Technology and Services
- 67% Enterprise
- 20% Mid-Market
5,553 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Mend.io, formerly WhiteSource, effortlessly secures what developers create. Mend.io uniquely removes the burden of application security, allowing development teams to deliver quality, secure code fast
- Software Engineer
- Computer Software
- Information Technology and Services
- 38% Small-Business
- 34% Mid-Market
11,464 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Rainforest is the all-in-one cyber security platform with an end-to-end approach to simplify corporate reputation protection by using multiple intelligences and proactive observability, adding Applica
- 42% Small-Business
- 42% Mid-Market
- Overview
- User Satisfaction
- Seller Details
Appknox is an on-demand mobile application security platform that helps businesses detect and fix security vulnerabilities using an Automated Security Testing suite. We have been successfully reducing
- Information Technology and Services
- Financial Services
- 40% Small-Business
- 37% Mid-Market
3,096 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Klocwork is a static code analysis and SAST tool for C, C++, C#, Java, JavaScript, Python, and Kotlin that identifies software security, quality, and reliability issues helping to enforce compliance w
- Information Technology and Services
- 48% Mid-Market
- 35% Small-Business
5,141 Twitter followers
- Overview
- User Satisfaction
- Seller Details
DeepSource is an all-in-one code health platform that equips organizations with everything they need to build maintainable and secure software while elevating the velocity of their software developmen
- Computer Software
- 82% Small-Business
- 9% Enterprise
1,714 Twitter followers
- Overview
- User Satisfaction
- Seller Details
CodeScan Shield addresses code quality, security, and compliance liabilities with two automated modules: CodeScan and OrgScan. CodeScan provides static code analysis for total visibility into code h
- Information Technology and Services
- Computer Software
- 44% Enterprise
- 38% Mid-Market
1,240 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Embold supports developers and development teams by finding critical code issues before they become roadblocks. It is the perfect tool to analyze, diagnose, transform, and sustain your software effici
- Computer Software
- 56% Small-Business
- 28% Mid-Market
1,085 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
AttackFlow is a solution helps find security and quality weaknesses in software by analyzing the code.
- 45% Enterprise
- 45% Mid-Market
1,353 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Synopsys offers Static Application Security Testing solutions to find and eliminate software security vulnerabilities within the code.
- 78% Mid-Market
- 11% Small-Business
23,126 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Visual Expert is a static code analyzer for Oracle PL/SQL, SQL Server T-SQL and PowerBuilder. Identify code dependencies to modify your code without breaking your application. Leverage hundreds of fea
- Information Technology and Services
- 80% Mid-Market
- 10% Enterprise
620 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Vulnerability management tool on steroids 📈 Measure and control your application security state; 🔎 Scan your code, containers, web and mobile applications using ANY tool; 🔥 Remove duplicates, v
- 60% Mid-Market
- 20% Small-Business
- Overview
- User Satisfaction
- Seller Details
GuardRails is an end-to-end security platform that makes AppSec easier for both security and development teams. We scan, detect, and provide real-time guidance to fix vulnerabilities early. Trusted b
- Information Technology and Services
- Financial Services
- 52% Small-Business
- 48% Mid-Market
1,573 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Parasoft Jtest is an integrated Java testing tool for Application Software Development. Develop high-quality code within an Agile workflow. Jtest’s comprehensive set of Java testing tools ensures high
- Computer Software
- 38% Enterprise
- 31% Mid-Market
2,609 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
As former security researchers, we founded BugProve to deliver the level of security that IoT deserves! Experience peace of mind by leveraging our automated firmware analysis platform: Swift Results:
- Computer & Network Security
- 90% Small-Business
- 10% Enterprise
146 Twitter followers
- Overview
- User Satisfaction
- Seller Details
As a leading provider of static application security testing (SAST) solutions, CodeSecure helps software developers solve challenging issues throughout the software development life cycle (SDLC) to pr
- 38% Mid-Market
- 31% Enterprise
698 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Open-source container vulnerability analysis service.
- 60% Enterprise
- 40% Small-Business
295,491 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Hubbl Diagnostics is setting the standard for Salesforce success through secure, automated, AI-driven org intelligence. - Monitor health and performance: Instantly gain a holistic view of your org
- Consulting
- Non-Profit Organization Management
- 56% Mid-Market
- 22% Enterprise
3 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
AppSecure Security is a CREST-accredited offensive security company specializing in Red Teaming, Penetration Testing (Pentesting), and Vulnerability Assessment and Penetration Testing (VAPT). We deliv
- 63% Mid-Market
- 38% Small-Business
340 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Your complete Salesforce code reviewer, now from Gearset. Clayton finds flawed code, written by humans or generative AI, twice as accurately as any code scanner. And its complete suite of features hel
- 40% Enterprise
- 40% Mid-Market
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Spotter helps users create and maintain Ansible Playbooks with ease while ensuring they are always up-to-date and secure. With its comprehensive analytics and reporting capabilities, Spotter offers
- 67% Small-Business
- 17% Mid-Market
65 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Arnica simplifies and effectively automates source code security, while maintaining or improving development velocity. Arnica uses rich tooling integration, deep learning, and behavioral analytics to
- 60% Enterprise
- 20% Small-Business
117 Twitter followers
- Overview
- User Satisfaction
- Seller Details
CodePeer is an Ada source code analyzer that detects run-time and logic errors. It assesses potential bugs before program execution, serving as an automated peer reviewer, helping to find errors easil
- 100% Enterprise
1,978 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Qwiet AI delivers comprehensive application security by combining agentic AI with advanced code analysis. In a single scan, the platform provides uniquely accurate SAST, SCA, SBOM, secrets detection,
- 67% Enterprise
- 33% Small-Business
1,201 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Platform for detecting security vulnerabilities in applications by analyzing the source code. bugScout® is the most complete and versatile SAST platform on the market for detecting application securi
- 50% Enterprise
- 50% Mid-Market
- Overview
- User Satisfaction
- Seller Details
esChecker combines many years of penetration testing experience with a unique dynamic engine simulating attack techniques, such as reverse-engineering or code tampering. No source code is needed, on
- 100% Small-Business
- Overview
- User Satisfaction
- Seller Details
PT Application Inspector™ (PT AI™) is a comprehensive source code analysis tool that offers protection for web applications of any scale. Its holistic approach combines the advantages of static, dynam
- 67% Enterprise
- 33% Small-Business
5 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
ReversingLabs is the trusted name in file and software security. We provide the modern cybersecurity platform to verify and deliver safe binaries. Trusted by the Fortune 500 and leading cybersecurity
- 100% Small-Business
6,663 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Symbiotic Security is an AI-powered cybersecurity startup putting code security directly into developers’ workflows. Backed by leading investors and co-founded by industry veterans, Symbiotic offers t
- 67% Small-Business
- 33% Enterprise
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
VCG is an automated code security review tool for C++, C#, VB, PHP, Java and PL/SQL which is intended to drastically speed up the code review process by identifying bad/insecure code. It has a few fea
- 50% Mid-Market
- 50% Enterprise
48,044 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Xanitizer is the essential tool for security auditors. It specializes in security analysis of web applications and also considers the behavior of the applied web frameworks. Xanitizer investigates the
- 50% Mid-Market
- 50% Small-Business
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
CodeAnt AI reviews your code line by line, finds critical code quality issues and security vulnerabilities, explains their impact, and guides you on how to fix them. It’s SOC 2 and HIPAA compliant,
- 50% Mid-Market
- 50% Small-Business
- Overview
- User Satisfaction
- Seller Details
AppSonar is a application security testing software created by CyberTest. It's main feature is static source code analyzer but also can analyze windows executable files for security and quality bugs.
- 100% Small-Business
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
The latest Minded Security Labs project regards JavaScript Security. We have released a tool called BlueClosure which helps security testers to analyze and discover Client Side security issues.
- 100% Small-Business
907 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Cycode is the only end-to-end software supply chain (SSC) security solution to provide visibility, security, and integrity across all phases of the SDLC. Cycode integrates with all of your software de
- 67% Mid-Market
- 33% Enterprise
- Overview
- User Satisfaction
- Seller Details
RamQuest’s solutions include our fully integrated closing, escrow accounting, imaging, transaction management, esigning, and digital marketplace solutions and are available on-premise or in a hosted e
- 100% Enterprise
- Overview
- User Satisfaction
- Seller Details
Manage, measure and integrate security for the entire software lifecycle.
- 50% Enterprise
- 50% Mid-Market
21,716 Twitter followers
- Overview
- User Satisfaction
- Seller Details
PrivJs Safe blocks the installation of malicious npm packages and provides with an ESLint plugin to detect vulnerable dependencies in a project.
- 100% Enterprise
- Overview
- User Satisfaction
- Seller Details
Focused on development teams, reshift is source code analysis tool that automates finding vulnerabilities in source code, and reduces the efforts to re-mediate them.
- 100% Small-Business
- Overview
- User Satisfaction
- Seller Details
Sigrid® - The Software Assurance Platform Sigrid, the software assurance platform from Software Improvement Group (SIG), provides actionable insights into your software portfolio and empowers your or
- 50% Mid-Market
- 50% Small-Business
886 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Sparrow SAST is designed to detect security weaknesses in source code with its semantic based static program analysis engine.
- 100% Small-Business
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
The Code Registry is the world's first AI-powered code intelligence and insights platform, designed to safeguard and optimize software assets for businesses. By providing an independent, secure replic
- 67% Small-Business
- 33% Mid-Market
5 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Using the Virtual Forge Security Suite, customers will improve their security and compliance by automating tasks involved in securing their SAP systems.
- 100% Small-Business
- Overview
- User Satisfaction
- Seller Details
AquilaX is an AI-driven cybersecurity company offering a range of security solutions designed to protect codebases and applications from vulnerabilities with minimal noise and false positives. Founded
- Overview
- User Satisfaction
- Seller Details
Axivion Static Code Analysis helps developers check standard compliance, security vulnerabilities, and code quality issues for C and C++ code. It performs automated analysis to identify violations of
21,843 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Bearer helps modern teams ship trustworthy products with the help of our code security SAST solution built for security, privacy and engineering teams. We combine sensitive data context with static c
- 100% Mid-Market
15 Twitter followers
- Overview
- User Satisfaction
- Seller Details
This static application security testing (SAST) tool offers accurate, fast, and ongoing application security testing, assessing code security quality without the need for compiling or execution.
2,461 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Code Dx Enterprise takes the results of all of your scans, processes them, and gives you a short list with no duplicates. It even points out which vulnerabilities were found by more than one tool, and
- Overview
- User Satisfaction
- Seller Details
CodePatrol performs powerful SAST scans on your project source code and identifies security flaws early. Powered by Claranet and Checkmarx
- Overview
- User Satisfaction
- Seller Details
Prevent the software flaws as early as possible in SDLC with CodeThreat SAST Platform. CodeThreat statically tests your code and helps you locate, prioritize and mitigate security weaknesses with
- Overview
- User Satisfaction
- Seller Details
Devknox is a security plugin for the Android Studio IDE that detects and corrects security issues as you write code, real-time. Simply install the plugin and let Devknox detect, suggest and remediate
3,096 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Security leaders face a paradox: ship faster but stay secure while keeping devs happy. DryRun Security makes that balance possible. As the first and leading AI-native application code security platfor
- Overview
- User Satisfaction
- Seller Details
Enso Application Security Posture is a platform for AppSec teams to manage their day-to-day work, implement their security strategy into an AppSec organizational program, enforce it and automate it. A
- Overview
- User Satisfaction
- Seller Details
- Overview
- User Satisfaction
- Seller Details
FuzzLabs is the most comprehensive fuzzer for finding bugs and zero-day vulnerabilities in custom/proprietary products, protocols, and complex environments.
- Overview
- User Satisfaction
- Seller Details
Universal DevSecOps platform to simplify vulnerability management. Assess, analyze, and assign vulnerabilities, ensuring a secure and controlled environment.
- Overview
- User Satisfaction
- Seller Details
- Overview
- User Satisfaction
- Seller Details
Premium Mobile Application Security Scanning ImmuniWeb® Neuron Mobile unleashes the power of Machine Learning and AI to take SAST and DAST mobile security scanning to the next level. While detecting
8,577 Twitter followers
- Overview
- User Satisfaction
- Seller Details
CodeEye's IRIS is a next-generation application security posture management (ASPM) platform, offers an all-in-one solution with real-time, AI-powered vulnerability and threat detection, correlation, p
5 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Quick and reliable security assessment platform that scans your mobile application for vulnerabilities without the need for high-profile penetration testing's. IronSCAN assessment platform provides qu
- Overview
- User Satisfaction
- Seller Details
Mobix is a SaaS mobile application testing platform that reduces application analysis costs and time, making tests creation and finding vulnerabilities effortless. Mobix's unique characteristics inclu
- Overview
- User Satisfaction
- Seller Details
Get autonomous AppSec engineers with one click. We build AI agents that autonomously perform the first level of application security in developer environments.
- Overview
- User Satisfaction
- Seller Details
Every second, a website around the world is hacked. Over 60% of websites are vulnerable to SQL injection. Leakage of personal data, theft of money and even the site destruction - this is what vulnerab
- Overview
- User Satisfaction
- Seller Details
Puma Scan runs as engineers write code. Real-time results. Puma Scan Editions include Server, Azure DevOps and End User.
310 Twitter followers
- Overview
- User Satisfaction
- Seller Details
PVS-Studio is a SAST solution that helps enhance code quality, security, and safety. The analyzer detects bugs and potential vulnerabilities in C, C++, C#, and Java code on Windows, Linux, and macOS.
- 100% Small-Business
5,993 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Designed for app development, Q-mast embeds security directly into your workflow to identify security, privacy, and compliance risks before the mobile app is released. With a design tailored for DevSe
- Overview
- User Satisfaction
- Seller Details
RIPS is the code analysis solution dedicated to the PHP language. It supports all major PHP frameworks, SDLC integration, relevant industry standards and can be deployed as a self-hosted software or
20 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Sec1 is pioneering innovation in cybersecurity by developing advanced, AI-based products that predict and prevent cyber threats before they strike. Sec1 platform offers the smartest way to stay ahead
- Overview
- User Satisfaction
- Seller Details
Products and Services —————————————— Seczone Group offers a comprehensive suite of products and services covering the entire software security development lifecycle (S-SDLC), including: CodeSec - Code
- Overview
- User Satisfaction
- Seller Details
Silk security is the platform that enables enterprises to take a strategic, sustainable approach to resolving code, infrastructure and application risk.
- Overview
- User Satisfaction
- Seller Details
SnappyTick helps to identify the Vulnerability during Source code review.
2 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Discover, classify, and protect your codebases, logs, and other assets. Monitor and detect API keys, tokens, credentials, high-risk security misconfiguration and more.
71,087 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Splint is a tool for statically checking C programs for security vulnerabilities and coding mistakes. With minimal effort, Splint can be used as a better lint. If additional effort is invested adding
- Overview
- User Satisfaction
- Seller Details
The SpotBugs plugin for security audits of Java web applications can detect 131 different vulnerability types with over 811 unique API signatures.
- Overview
- User Satisfaction
- Seller Details
DefenseCode ThunderScan® is a SAST (Static Application Security Testing, WhiteBox Testing) solution for performing deep and extensive security analysis of application source code. ThunderScan® is easy
- Overview
- User Satisfaction
- Seller Details
TrueCode is a static application security testing solution.
2,472 Twitter followers
- Overview
- User Satisfaction
- Seller Details
TruStacks is a software delivery engine that offers standardized, efficient DevOps workflows to help teams ship products faster and more frequently.
- Overview
- User Satisfaction
- Seller Details
AppSec Testing(AST) - Whatever your motivation, a proactive security push or a compliance compulsion, our AST service can help keep your application secure against external threats. Security Automati
- Overview
- User Satisfaction
- Seller Details
YAGAAN is a french startup established in 2017 and located in the Brittany Cyber Valley. In the SAST landscape, the YAG-Suite offers unique features to auditors and developers that only machine learn
- Overview
- User Satisfaction
- Seller Details
Continuous security delivery fabric for modern enterprise infrastructure.
