The product
JSON.parse() drop-in replacement with prototype poisoning protection.
The closest @hapi/bourne alternatives are Flyingduck Code Security Intelligence, Vidoc SecureAI and Snyk Code. Picking a @hapi/bourne alternative comes down to fit: Static Application Security Testing coverage, your environment, your integrations and your budget. So each option below shows what it covers, how it deploys, its pricing model and the company behind it.
34 alternativesClosest matches: Flyingduck Code Security Intelligence, Vidoc SecureAI, Snyk CodePage updated Nov 2026
The product
JSON.parse() drop-in replacement with prototype poisoning protection.
@hapi/bourne is a free Static Application Security Testing solution. The closest matches by shared tags and NIST CSF 2.0 coverage are Flyingduck Code Security Intelligence, Vidoc SecureAI, Snyk Code, DryRun Security AppSec Agents, and SonarSource SonarQube. All 34 alternatives on this page are ranked the same way.
These 8 solutions overlap most with @hapi/bourne. Each row says what the product does and, when the overlap is big enough, which capabilities it shares.
SAST tool that detects logical flaws and business logic vulnerabilities
Key features: 10 listed. See them on the Flyingduck Code Security Intelligence page.
View Flyingduck Code Security IntelligenceFlyingduck Code Security Intelligence alternatives@hapi/bourne vs Flyingduck Code Security Intelligence
Real-time vulnerability detection and automated fixing for AI-generated code
Key features: 10 listed. See them on the Vidoc SecureAI page.
View Vidoc SecureAIVidoc SecureAI alternatives@hapi/bourne vs Vidoc SecureAI
AI-powered SAST tool that finds and auto-fixes code vulnerabilities in real-time
Key features: 10 listed. See them on the Snyk Code page.
View Snyk CodeSnyk Code alternatives@hapi/bourne vs Snyk Code
AI-native SAST tool providing contextual code security analysis in pull requests
Key features: 10 listed. See them on the DryRun Security AppSec Agents page.
View DryRun Security AppSec AgentsDryRun Security AppSec Agents alternatives@hapi/bourne vs DryRun Security AppSec Agents
Code quality and security platform with SAST, SCA, and AI-powered remediation
Key features: 10 listed. See them on the SonarSource SonarQube page.
View SonarSource SonarQubeSonarSource SonarQube alternatives@hapi/bourne vs SonarSource SonarQube
Static code analyzer & SAST tool for C, C++, Java, JavaScript, Python, Kotlin
Key features: 10 listed. See them on the Perforce Klocwork page.
View Perforce KlocworkPerforce Klocwork alternatives@hapi/bourne vs Perforce Klocwork
SAST solution that scans 30+ languages to find and fix code vulnerabilities
Key features: 10 listed. See them on the Semgrep Code page.
View Semgrep CodeSemgrep Code alternatives@hapi/bourne vs Semgrep Code
Full-cycle app security platform with SAST, DAST, MAST, SCA & binary analysis
Key features: 10 listed. See them on the DerScanner Full Cycle Application Security Testing page.
View DerScanner Full Cycle Application Security TestingDerScanner Full Cycle Application Security Testing alternatives@hapi/bourne vs DerScanner Full Cycle Application Security Testing
SAST tool that detects logical flaws and business logic vulnerabilities
Real-time vulnerability detection and automated fixing for AI-generated code
AI-powered SAST tool that finds and auto-fixes code vulnerabilities in real-time
AI-native SAST tool providing contextual code security analysis in pull requests
Code quality and security platform with SAST, SCA, and AI-powered remediation
Static code analyzer & SAST tool for C, C++, Java, JavaScript, Python, Kotlin
SAST solution that scans 30+ languages to find and fix code vulnerabilities
Full-cycle app security platform with SAST, DAST, MAST, SCA & binary analysis
SAST engine that scans code commits for security vulnerabilities
AI-native AppSec platform for code security analysis and vulnerability detection
IDE plugin for SAST and SCA scanning with real-time vulnerability detection
Real-time AI-powered code security tool for IDE vulnerability detection & fix
SAST tool that scans code for vulnerabilities in 30+ languages with CI/CD integration
IaC security scanner detecting vulnerabilities and misconfigurations in templates
IaC scanner for Terraform, CloudFormation, and Helm misconfigurations
SAST tool for identifying security vulnerabilities in source code
SAST tool using virtual compilers to analyze source code for vulnerabilities
AI-powered SAST tool for scanning code vulnerabilities with low false positives
SAST tool for continuous source code vulnerability scanning and remediation
Generates test cases by injecting known bugs into code for testing DevSecOps.
SAST scanner for identifying security vulnerabilities in source code
SAST tool that identifies vulnerabilities in source code across 30+ languages
AI-powered code analysis platform for technical due diligence and audits
SAST tool with SCA, SBOM generation, and attack path analysis capabilities
Code security platform for AI-generated and traditional code with runtime intel
AI-powered code security platform for detecting and fixing vulnerabilities
Source code malware scanner detecting backdoors and malicious code in repos
AI-powered automated security code reviews for pull requests
AI-powered SAST tool for vulnerability detection, triaging, and patching
Source code verification tool that finds bugs and security vulnerabilities
Static analysis tool for C/C++ and enterprise languages, now part of AdaCore
Developer-first SAST tool for finding security & privacy vulns in code.
IaC scanner detecting misconfigs, vulnerabilities & policy violations in templates.
Automated C code analysis and repair tool benchmarked against NIST SAMATE.
Common questions when weighing alternatives to @hapi/bourne.
The closest matches to @hapi/bourne by shared tags and NIST CSF 2.0 coverage are Flyingduck Code Security Intelligence, Vidoc SecureAI, Snyk Code, DryRun Security AppSec Agents, and SonarSource SonarQube. All of them are Static Application Security Testing products.
This page shows 34 alternatives to @hapi/bourne, all in the Static Application Security Testing category. Each one is matched on shared tags and NIST CSF 2.0 areas, and the closest matches rank first.
@hapi/bourne is a free Static Application Security Testing product. You can use it at no cost. Only commercial alternatives are listed here. Free and open source products are under /free.
@hapi/bourne is a Static Application Security Testing product in the Application Security category. You can compare it with the 34 other Static Application Security Testing products on this page.
Need the answer fast? Best SAST Solutions for Business picks Checkmarx One Application Security Platform, Veracode Application Risk Management Platform, OpenText Fortify SAST and 4 more.See the shortlist
