Sast

Heeler Application Security Auto-Remediation

Fix-first AppSec powered by agentic remediation, covering SCA, SAST & secrets.

SOOS SAST

SAST platform that runs scans and ingests SARIF results into a unified dashboard.

Parasoft Security for Rust

Static analysis tool enforcing OWASP Top 10 security rules for Rust code.

Cytix Change Analysis Tool

AI-powered tool that analyzes dev tickets for security risks.

Bearer

Developer-first SAST tool for finding security & privacy vulns in code.

Corgea Secret Scanning

Detects exposed API keys, tokens, credentials & PII in code repositories

Corgea AI-Native SAST

AI-native SAST tool that finds and fixes code vulnerabilities using LLMs

Mend AI Native AppSec Platform

AI-native AppSec platform with SCA, SAST, container & dependency mgmt.

AquilaX

An application security platform that combines multiple security scanners including SAST, SCA, container security, and compliance reporting with CI/CD integration capabilities.

Semgrep Code

SAST solution that scans 30+ languages to find and fix code vulnerabilities

Mend Mend AI Native AppSec Platform

AI-native AppSec platform with SAST, SCA, container & dependency mgmt.

SonarSource SonarQube

Code quality and security platform with SAST, SCA, and AI-powered remediation

Snyk Code

AI-powered SAST tool that finds and auto-fixes code vulnerabilities in real-time

Gitleaks

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets in git repos.

Mobile Audit

Mobile Audit is a Docker-based SAST and malware analysis tool that performs comprehensive security analysis of Android APK files, including vulnerability detection, certificate verification, and Virus Total integration.

Insider

Insider is an open-source CLI tool that performs static source code analysis to detect OWASP Top 10 vulnerabilities across multiple programming languages including Java, Kotlin, Swift, .NET, C#, and JavaScript.

NodeJsScan

Static security code scanner (SAST) for Node.js applications with Docker support and integrations with Slack.

Bearer CLI

Bearer CLI is a static application security testing tool that scans source code across multiple programming languages to identify and prioritize OWASP Top 10 and CWE Top 25 security vulnerabilities through data flow analysis.