getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categoriesBlog & researchAbout us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated Static Application Security Testing (SAST) Software with Vulnerability scanning - Page 2

Last updated: October 2026

1 filter applied

Features

Integrated with

Pricing model

Devices supported

Organization types

User rating

53 software options

Snyk logo

Cloud-based AI security platform for dev teams

learn more
Cloud-based AI security platform scanning code, open-source dependencies, containers, IaC, and APIs for development teams.

Read more about Snyk

Users also considered
Checkmarx logo

Cloud-native application security platform for enterprises

learn more
Checkmarx is a cloud-native AppSec platform for enterprises, delivering SAST, SCA, DAST, API security, ASPM, and agentic AI.

Read more about Checkmarx

Users also considered
BuildPiper logo

Delivering software just got faster

learn more
BuildPiper is a product by OpsTree Labs, which is an end-to-end Kubernetes and microservices Delivery Platform. It is a hybrid cloud-enabled system that facilitates the deployment of dockerized code across multiple environments.

Read more about BuildPiper

Users also considered
Coverity logo

Build secure, high-quality software faster.

learn more
Coverity is a static application security testing (SAST) solution designed to help businesses manage risks across the application portfolio, address quality defects in the software development life cycle, and maintain compliance with many coding and security standards.

Read more about Coverity

Users also considered
Kiuwan Code Security & Insights logo

Secure your applications confidently with Kiuwan.

learn more
Kiuwan is an end-to-end application security platform supporting 30+ languages with SAST, SCA, & QA. Kiuwan integrates with IDEs for direct analysis, offers tailored reports, and meets NIST, CWE, & OWASP standards.

Manage open source components and secure your projects confidently with Kiuwan.

Read more about Kiuwan Code Security & Insights

Users also considered
Sigrid logo

One platform to manage your entire application landscape

learn more
Sigrid delivers a holistic SAST solution that empowers organizations to manage software security risks. By offering actionable insights, Sigrid helps companies strengthen their security defenses, streamline compliance processes, and accelerate the deployment of secure software applications.

Read more about Sigrid

Users also considered
Invicti Web + API (formerly Acunetix) logo

Cloud-based and automated web application security solution

learn more
Acunetix is a cybersecurity solution offering automatic web security testing technology that enables organizations to scan and audit complex, authenticated, HTML5 and JavaScript-heavy websites to detect vulnerabilities such as XSS, SQL Injection, and more.

Read more about Invicti Web + API (formerly Acunetix)

Users also considered
SonarQube logo

Code quality & security platform for all team sizes

learn more
SonarQube is a cloud-based and self-hosted code quality and security platform that detects bugs, vulnerabilities, and architecture.

Read more about SonarQube

Users also considered
SiteLock logo

Threat intelligence software for eCommerce businesses

learn more
SiteLock is a static application security testing (SAST) software designed to help businesses protect websites against malware and distributed denial-of-service (DDoS) attacks. Key features of the platform include threat detection, database scanning, bad bot blocking, automated plugin patching, security vulnerability repair, and website acceleration.

Read more about SiteLock

Users also considered
Traceable logo
(0)

Cloud-based requirements traceability for regulated teams

learn more
Cloud-based requirements traceability and document control platform for regulated industries, covering authoring, versioning, and.

Read more about Traceable

Users also considered
Panel Review by TruVerifAI logo
(0)

MCP plugin for multi-model code review in agents

learn more
Panel Review by TruVerifAI is a cloud-based MCP plugin that adds multi-model synthesis, deliberation, and audit tools to coding agents.

Read more about Panel Review by TruVerifAI

Users also considered
Earnie logo
(0)

Payroll and HR management software

learn more
Earnie is a payroll and HR management solution designed to help businesses streamline workforce administration and pay processing.

Read more about Earnie

Users also considered
Finite State AI-Native Product Security logo
(0)

AI-native product security OS for connected devices

learn more
Cloud-based AI-native product security platform for connected device manufacturers, unifying firmware analysis and SBOM management.

Read more about Finite State AI-Native Product Security

Users also considered
Moderne logo
(0)

Source code modernization and maintenance platform

learn more
Moderne is an automated code refactoring and analysis platform for securing, migrating, maintaining, and modernizing software at mass scale. We make it easy for developers to collaborate and make big changes in their codebase fast, freeing time for innovation.

Read more about Moderne

Users also considered
Topscan logo
(0)

Automated security scanning for servers and APIs

learn more
TopScan is a security scanning platform that automatically detects vulnerabilities in servers, libraries, and APIs. The solution offers continuous monitoring, attack surface discovery, and vulnerability management capabilities using open-source scanning engines such as OWASP ZAP and Nuclei. TopScan includes features for web application security, cloud security, static code analysis, and SSL/TLS certificate monitoring, with integration options for CI/CD pipelines and Slack notifications.

Read more about Topscan

Users also considered
BoringSec logo
(0)

Cloud-based web security audit tool for AI app teams

learn more
Cloud-based security audit tool for deployed websites and AI-built apps, covering secrets, headers, TLS, and vulnerability detection.

Read more about BoringSec

Users also considered
Axivion logo
(0)

Static Code Analysis to Assure the Quality of Your Software

learn more
Axivion Static Code Analysis by Qt QA enhances code quality via automated analysis for C/C++, compliance, and software longevity.

Read more about Axivion

Users also considered
Flawnter logo
(0)

Improve your application code security and quality

learn more
Flawnter helps automate static application security testing to find hidden security and quality flaws at the source. Unlimited code scanning and free extensions.

Read more about Flawnter

Users also considered
HCL AppScan logo
(0)

Fast, Accurate, Agile Application Security Testing

learn more
HCL AppScan is a unified application security platform that automates testing, vulnerability detection, prioritization, and remediation across code, applications, APIs, AI, and the software supply chain. It combines SAST, DAST, IAST, SCA, API, IaC, and Secrets security in one platform.

Read more about HCL AppScan

Users also considered
FDIE logo
(0)

Firmware security analysis across releases for device teams

learn more
Firmware security analysis platform for product security teams and device manufacturers, offering SBOM generation and CVE detection.

Read more about FDIE

Users also considered
SoonLab logo
(0)

AI-driven game creation & browser gaming platform

learn more
SoonLab is an AI-powered game creation and discovery platform that enables users to generate games without coding knowledge. The platform hosts a library of user-created games across multiple genres including action, puzzle, RPG, simulation, and strategy that can be played instantly in a web browser. Users can browse community-created content and utilize AI tools to design and publish their own games through the platform's game generator feature.

Read more about SoonLab

Users also considered
ScanMyApp logo
(0)

Your AI code audit agent. Human experts when it matters.

learn more
ScanMyApp is a web application scanning solution that helps businesses identify vulnerabilities, assess app security, and manage.

Read more about ScanMyApp

Users also considered
Coco logo
(0)

Code coverage analysis software for embedded devices

learn more
Coco is an embedded device code coverage analysis software that enables developers to assess how much of their code is being tested.

Read more about Coco

Users also considered
Ostorlab logo
(0)

Cloud-based vulnerability management platform

learn more
Ostorlab is a cloud-based vulnerability management platform designed to help businesses detect, monitor, and remediate risks across enterprises' external attack surfaces.

Read more about Ostorlab

Users also considered
DryRun Security logo
(0)

Cloud-based AI app security for dev & AppSec teams

learn more
DryRun Security is a cloud-based AI-native application security platform for engineering and AppSec teams that reviews every pull.

Read more about DryRun Security

Users also considered