Static Application Security Testing

DigitSec Automated Application Security Testing

Automated app security testing platform for Salesforce and B2C Commerce

CodeThreat AI-Native AppSec Platform

AI-native AppSec platform for code security analysis and vulnerability detection

GuardRails

DevSecOps platform for vulnerability detection and developer security training

DeepSource SAST

SAST engine that scans code commits for security vulnerabilities

Snyk Infrastructure as Code

Scans IaC files for misconfigurations before deployment to production.

SonarSource SonarQube Cloud

Cloud-based SAST platform for code quality and security analysis

Perforce Klocwork

Static code analyzer & SAST tool for C, C++, Java, JavaScript, Python, Kotlin

Cycode Secrets Detection and Scanning

Scans and detects hardcoded secrets across SDLC and dev tools

Cycode SAST - Static Application Security Testing

SAST scanner for identifying security vulnerabilities in source code

Offensive 360 Secure Code Analysis

SAST tool that analyzes source code for vulnerabilities using virtual compilers

DerScanner Full Cycle Application Security Testing

Full-cycle app security platform with SAST, DAST, MAST, SCA & binary analysis

Qwiet AI Secure Your Code

AI-powered AppSec platform with SAST, SCA, IaC, container & secrets scanning

AquilaX

An application security platform that combines multiple security scanners including SAST, SCA, container security, and compliance reporting with CI/CD integration capabilities.

Ghost Security Exorcist

AI-driven code analysis tool for API discovery and vulnerability detection

SonarSource SonarQube

Code quality and security platform with SAST, SCA, and AI-powered remediation

Pixee Pixeebot

AI-powered automated code security remediation bot for vulnerability fixes

DryRun Security AppSec Agents

AI-native SAST tool providing contextual code security analysis in pull requests

Amplify Security Fix Your Code

Automated vulnerability remediation tool that fixes code security issues

Octoscan

Octoscan is a static analysis tool that scans GitHub Actions workflows for security vulnerabilities and misconfigurations.

Snyk Code

AI-powered SAST tool that finds and auto-fixes code vulnerabilities in real-time

Codacy Security and Code Quality

Code security and quality platform with SAST, SCA, DAST, and AI code protection

Vidoc SecureAI

Real-time vulnerability detection and automated fixing for AI-generated code

Nosey Parker

A command-line tool that scans textual data and Git history to identify and locate secrets, API keys, passwords, and other sensitive information.

detect-secrets

A pre-commit security tool that scans source code repositories to detect and prevent secrets like API keys, passwords, and credentials from being committed to version control systems.