getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated Static Application Security Testing (SAST) Software with Free trial - Page 2

Last updated: October 2026

1 filter applied

Features


Integrated with


Pricing model


Devices supported


Organization types


User rating


39 software options

BuildPiper logo

Delivering software just got faster

learn more
BuildPiper is a product by OpsTree Labs, which is an end-to-end Kubernetes and microservices Delivery Platform. It is a hybrid cloud-enabled system that facilitates the deployment of dockerized code across multiple environments.

Read more about BuildPiper

Users also considered
Dynatrace logo

All-in-One Application Performance Monitoring

learn more
Dynatrace Ruixt is an all-in-one application performance monitoring

Read more about Dynatrace

Users also considered
Kiuwan Code Security & Insights logo

Secure your applications confidently with Kiuwan.

learn more
Kiuwan is an end-to-end application security platform supporting 30+ languages with SAST, SCA, & QA. Kiuwan integrates with IDEs for direct analysis, offers tailored reports, and meets NIST, CWE, & OWASP standards.

Manage open source components and secure your projects confidently with Kiuwan.

Read more about Kiuwan Code Security & Insights

Users also considered
SonarQube logo

Code quality & security platform for all team sizes

learn more
SonarQube is a cloud-based and self-hosted code quality and security platform that detects bugs, vulnerabilities, and architecture.

Read more about SonarQube

Users also considered
Traceable logo

Cloud-based requirements traceability for regulated teams

learn more
Cloud-based requirements traceability and document control platform for regulated industries, covering authoring, versioning, and.

Read more about Traceable

Users also considered
BugProve logo

Product Security Simplified for the Internet of Things

learn more
BugProve offers an automated firmware analysis tool to identify, remediate and monitor known and zero-day vulnerabilities in IoT products - such as vulnerable dependencies, coding mistakes, misconfiguration, and more. Get your first results within 5 minutes and export your findings via links or PDF.

Read more about BugProve

Users also considered
Moderne logo

Source code modernization and maintenance platform

learn more
Moderne is an automated code refactoring and analysis platform for securing, migrating, maintaining, and modernizing software at mass scale. We make it easy for developers to collaborate and make big changes in their codebase fast, freeing time for innovation.

Read more about Moderne

Users also considered
Topscan logo

Automated security scanning for servers and APIs

learn more
TopScan is a security scanning platform that automatically detects vulnerabilities in servers, libraries, and APIs. The solution offers continuous monitoring, attack surface discovery, and vulnerability management capabilities using open-source scanning engines such as OWASP ZAP and Nuclei. TopScan includes features for web application security, cloud security, static code analysis, and SSL/TLS certificate monitoring, with integration options for CI/CD pipelines and Slack notifications.

Read more about Topscan

Users also considered
Flawnter logo

Improve your application code security and quality

learn more
Flawnter helps automate static application security testing to find hidden security and quality flaws at the source. Unlimited code scanning and free extensions.

Read more about Flawnter

Users also considered
HCL AppScan logo

Fast, Accurate, Agile Application Security Testing

learn more
HCL AppScan is a unified application security platform that automates testing, vulnerability detection, prioritization, and remediation across code, applications, APIs, AI, and the software supply chain. It combines SAST, DAST, IAST, SCA, API, IaC, and Secrets security in one platform.

Read more about HCL AppScan

Users also considered
Coco logo

Code coverage analysis software for embedded devices

learn more
Coco is an embedded device code coverage analysis software that enables developers to assess how much of their code is being tested.

Read more about Coco

Users also considered
Akto logo

API Security Platform for Modern Appsec teams

learn more
Akto is an industry-leading solution for API discovery, API security posture management, sensitive data exposure, API security testing.

Read more about Akto

Users also considered
Veracode Application Security Platform logo

Cloud-based app security platform for enterprises

learn more
Cloud-based application security platform for enterprises offering SAST, DAST, SCA, container scanning, and IaC scanning.

Read more about Veracode Application Security Platform

Users also considered
Bearer logo

Fix data security risks before you release

learn more
Bearer enables security and engineering teams to implement data security policies and mitigate risks throughout the development lifecycle.

Read more about Bearer

Users also considered