Best Static Application Security Testing (SAST) Software 2024 - Reviews on 48+ Tools | GetApp

0

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categories Blog & research About us

All apps

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links.

Our commitment

Independent research methodology

Our researchers use a mix of verified reviews, independent research, and objective methodologies to bring you selection and ranking information you can trust. While we may earn a referral fee when you visit a provider through our links or speak to an advisor, this has no influence on our research or methodology.

How GetApp verifies reviews

GetApp carefully verified over 2 million reviews to bring you authentic software experiences from real users. Our human moderators verify that reviewers are real people and that reviews are authentic. They use leading tech to analyze text quality and to detect plagiarism and generative AI.

How GetApp ensures transparency

GetApp lists all providers across its website—not just those that pay us—so that users can make informed purchase decisions. GetApp is free for users. Software providers pay us for sponsored profiles to receive web traffic and sales opportunities. Sponsored profiles include a link-out icon that takes users to the provider’s website.

48 software options

Sort by

Sponsored

Personalize your search

Any industry

Any business size

Invicti, formerly Netsparker, web application security scanning solution automatically identifies XSS, SQL Injection and other vulnerabilities in websites, web applications and web services and lets enterprise-class businesses automate and scale their web security program.

Read more about Invicti

Users also considered

Xygeni offers complete visibility, enabling a systematic process for assessing the risks associated with the SSC, identifying and prioritizing the most critical components, evaluating and improving their global and detailed security posture at an effective and efficient effort, time and cost.

Read more about Xygeni Security

Users also considered

Aikido Security is a security management system designed to help businesses streamline their security operations across code, containers & cloud vulnerabilities in a single dashboard.

Read more about Aikido Security

Users also considered

Flawnter helps automate static application security testing to find hidden security and quality flaws at the source. Unlimited code scanning and free extensions.

Read more about Flawnter

Users also considered

GitLab is an integrated, open source DevOps lifecycle management platform for software development teams to plan, code, test, deploy & monitor product changes

Read more about GitLab

Users also considered

GitHub is a place to share code with friends, co-workers, classmates, and complete strangers, helping individuals and teams to write faster, better code

Read more about GitHub

Users also considered

SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines.

Read more about SonarQube

Users also considered

Dynatrace Ruixt is an all-in-one application performance monitoring

Read more about Dynatrace

Users also considered

Kiuwan is an end-to-end application security platform supporting 30+ languages with SAST, SCA, & QA. Kiuwan integrates with IDEs for direct analysis, offers tailored reports, and meets NIST, CWE, & OWASP standards.

Manage open source components and secure your projects confidently with Kiuwan.

Read more about Kiuwan

Users also considered

Acunetix (by Invicti) is a cyber security solution offering automatic web security testing technology that enables organizations to scan and audit complex, authenticated, HTML5 and JavaScript-heavy websites to detect vulnerabilities such as XSS, SQL Injection, and more.

Read more about Acunetix

Users also considered

JFrog Artifactory is a binary repository management SaaS solution that provides software development and DevOps teams with a single source of truth for sourcing, storing, sharing, and deploying software components. Release your software with security and ease.

Read more about Artifactory

Users also considered

Snyk is a cloud-based application security and testing platform, which helps enterprises discover and fix vulnerabilities across open source libraries, containers, or codes throughout the development process. Features include runtime monitoring, reporting, exploitability indicators, alerts, and prioritization.

Read more about Snyk

Users also considered

For Salesforce DevOps teams, CodeScan helps businesses scan and analyze Salesforce codes, define quality and security standards, and ensure compliance with statutory guidelines across code development projects. We have 350+ rules and support all Salesforce languages and Metadata.

Read more about CodeScan

Users also considered

CodeScene is a code analysis, visualization, and reporting tool. Cross reference contextual factors such as code quality, team dynamics, and delivery output to get actionable insights to effectively reduce technical debt and deliver better code quality.

Read more about CodeScene

Users also considered

DeepSource is the code health platform that all tools needed to write maintainable and secure code to improve software's stability and increase developer velocity.

Read more about DeepSource

Users also considered

Sigrid® is a data-driven software intelligence platform, that will analyze the source code of all your applications, no matter the technology, and derive holistic insights into risks, costs, and opportunities on multiple software quality aspects and provide strategic recommendations.

Read more about Sigrid

Users also considered

Klocwork is a web-based static code analysis software designed to help businesses identify and manage software security and quality in compliance with regulatory guidelines. It lets DevOps teams detect various security vulnerabilities including tainted data, SQL injection, vulnerable coding practices, buffer overflow, and more.

Read more about Klocwork

Users also considered

BuildPiper is a product by OpsTree Labs, which is an end-to-end Kubernetes and microservices Delivery Platform. It is a hybrid cloud-enabled system that facilitates the deployment of dockerized code across multiple environments.

Read more about BuildPiper

Users also considered

SonarLint is a free IDE plugin that helps developers by detecting and highlighting issues in their code in real time.

Read more about SonarLint

Users also considered

With GuardRails, you can finally feel safe on every level of your security. The platform enhances development processes and gives developers control via its layered approach that shields them from code to the cloud for complete protection against attackers.

Read more about GuardRails

Users also considered

Bytesafe is a firewall for dependencies. Using the source code and vulnerability management platform, businesses can protect applications, stay in control and keep unwanted dependencies out of the organization.

Read more about Bytesafe

Users also considered

SonarCloud is a cloud based (SaaS) static code analysis solution that can be used by dev teams to ensure code quality and security.

Read more about SonarCloud

Users also considered

SiteLock is a static application security testing (SAST) software designed to help businesses protect websites against malware and distributed denial-of-service (DDoS) attacks. Key features of the platform include threat detection, database scanning, bad bot blocking, automated plugin patching, security vulnerability repair, and website acceleration.

Read more about SiteLock

Users also considered

Checkmarx One is an enterprise cloud-native application security platform that helps teams cut through the noise fix what matters most.

Read more about Checkmarx One

Users also considered

Fortify enables businesses of all sizes to protect their applications, data and the rest of their assets from cyber criminals. With strategic outcomes ranging from DevSecOps to secure data analytics, Fortify helps enterprises gain visibility into their applications, detect threats quickly and defend against them effectively with automated incident response capabilities.

Read more about Fortify

Users also considered

Related categories

Application Development

Vulnerability Scanner

Container Security

Vulnerability Management

Continuous Integration

Source Code Management

Select your country

US office

56 Top Gallant Road
Stamford, CT 06902
USA

Registered office

Calle Álava 121
08018 Barcelona,
Spain

For you

Join Sign in Software categories Blog & research

For vendors

Get listed Your account

Our company

About us We're hiring!News Legal Privacy Policy

© 2010-2024 GetApp. All Rights Reserved.
GetApp is a registered trademark of Nubera eBusiness S.L. Nubera eBusiness uses its own and third-party cookies. By using the website you are accepting the use of these cookies. To get more information about our cookies click here.