App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categories Blog & research About us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links.

Our commitment

Independent research methodology

Our researchers use a mix of verified reviews, independent research, and objective methodologies to bring you selection and ranking information you can trust. While we may earn a referral fee when you visit a provider through our links or speak to an advisor, this has no influence on our research or methodology.

Learn more

Verified user reviews

GetApp maintains a proprietary database of millions of in-depth, verified user reviews across thousands of products in hundreds of software categories. Our data scientists apply advanced modeling techniques to identify key insights about products based on those reviews. We may also share aggregated ratings and select excerpts from those reviews throughout our site.

Our human moderators verify that reviewers are real people and that reviews are authentic. They use leading tech to analyze text quality and to detect plagiarism and generative AI.

Learn more

How GetApp ensures transparency

GetApp lists all providers across its website—not just those that pay us—so that users can make informed purchase decisions. GetApp is free for users. Software providers pay us for sponsored profiles to receive web traffic and sales opportunities. Sponsored profiles include a link-out icon that takes users to the provider’s website.

Learn more

Static Application Security Testing (SAST)
Deployment management

Static Application Security Testing (SAST) Software with Deployment Management (2026)

Last updated: March 2026

All apps

Filter results

Features

Third-Party Integrations(7)

Application Security(13)

Dashboard(12)

Monitoring(8)

Multi-Language Scanning(10)

Integrated with

Bitbucket(6)

GitHub(7)

GitLab(7)

Jenkins(8)

Jira(7)

Slack(5)

Pricing model

Free(7)

Open Source(2)

Free Trial(11)

One Time License(0)

Subscription(11)

Devices supported

Mac(7)

iPad(0)

Android(0)

Linux(5)

Web-based(14)

iPhone(0)

Windows(9)

Organization types

Small Business(14)

Non Profit(1)

Large Enterprises(12)

Public Administrations(1)

Freelancers(5)

Mid Size Business(13)

User rating

All Reviews

& up

(13)

& up

(14)

& up

(14)

14 software options

Sort by

GitLab

4.6

(1.2K)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Your intelligent orchestration platform for DevOps

learn more

GitLab unifies planning, CI/CD, security, and agentic AI, eliminating the tool handoffs that slow software delivery. Learn more today.

SonarQube

4.5

(65)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Sonar: AI code verification for quality and security

learn more

SonarQube is an automated code review solution, serving as the verification layer for code quality and security. SonarQube ensures that all AI and developer code is secure, reliable, and maintainable.

Snyk

4.6

(21)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Cloud-based security platform to track & fix vulnerabilities

learn more

Snyk is a cloud-based application security and testing platform, which helps enterprises discover and fix vulnerabilities across open source libraries, containers, or codes throughout the development process. Features include runtime monitoring, reporting, exploitability indicators, alerts, and prioritization.

Artifactory

4.6

(19)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Artifact repository manager for software development teams

learn more

JFrog Artifactory is a binary repository management SaaS solution that provides software development and DevOps teams with a single source of truth for sourcing, storing, sharing, and deploying software components. Release your software with security and ease.

CodeScan

4.8

(14)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Quality and Security for the Salesforce Platform

learn more

For Salesforce DevOps teams, CodeScan helps businesses scan and analyze Salesforce codes, define quality and security standards, and ensure compliance with statutory guidelines across code development projects. We have 350+ rules and support all Salesforce languages and Metadata.

BuildPiper

4.2

(13)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Delivering software just got faster

learn more

BuildPiper is a product by OpsTree Labs, which is an end-to-end Kubernetes and microservices Delivery Platform. It is a hybrid cloud-enabled system that facilitates the deployment of dockerized code across multiple environments.

GuardRails

5.0

(5)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Application security software

learn more

With GuardRails, you can finally feel safe on every level of your security. The platform enhances development processes and gives developers control via its layered approach that shields them from code to the cloud for complete protection against attackers.

Jsmon

4.8

(5)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Cloud-based static application security testing (SAST) tool.

learn more

Jsmon is a SAST platform that detects vulnerabilities and uncovers hidden API endpoints in code.

OpenText Application Security Aviator

5.0

(2)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Application security, data security, and threat detection.

learn more

Fortify enables businesses of all sizes to protect their applications, data and the rest of their assets from cyber criminals. With strategic outcomes ranging from DevSecOps to secure data analytics, Fortify helps enterprises gain visibility into their applications, detect threats quickly and defend against them effectively with automated incident response capabilities.

Read more about OpenText Application Security Aviator

Users also considered

Sonatype Lifecycle

4.0

(4)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

OSS Application Security and Dependency Management Solution

learn more

Sonatype Lifecycle controls open source risk across the SDLC to help application security scale their operations to the speed of development.

Eliminate unnecessary work
Improve efficiency and speed
Enhance productivity

Coverity

3.5

(6)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Build secure, high-quality software faster.

learn more

Coverity is a static application security testing (SAST) solution designed to help businesses manage risks across the application portfolio, address quality defects in the software development life cycle, and maintain compliance with many coding and security standards.

IDA Pro

5.0

(1)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

A powerful disassembler and a versatile debugger.

learn more

Hex-Rays develops and supports the IDA disassembler. This famous software analysis tool, which is a de-facto standard in the software security industry, is an indispensable item in the toolbox of a software analyst, security expert, software developer, or software engineer.

Veracode

4.0

(1)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Software for scanning & managing application vulnerabilities

learn more

Veracode is a static application security testing (SAST) software designed to help businesses review applications' source code to identify vulnerabilities. The platform allows software developers to conduct application analysis and receive automated security feedback in the IDE and CI/CD pipeline.

Conviso

4.0

(1)

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Application Security Posture Management

learn more

The Conviso Platform is an Application Security Posture Management (ASPM) solution that centralizes the management of risks, vulnerabil

Related categories

Cloud Security

300 apps

Application Development

Vulnerability Management

198 apps

Continuous Integration

87 apps

Source Code Management

64 apps

Vulnerability Scanner

86 apps

Container Security

47 apps

US office

56 Top Gallant Road
Stamford, CT 06902
USA

Registered office

Calle Álava 121
08018 Barcelona,
Spain

For you

Join Sign in Software categories Blog & research

For vendors

Get listed Your account

Our company

About us We're hiring!News Legal Privacy Policy Vulnerability Disclosure Program

© 2010-2026 GetApp. All Rights Reserved.
GetApp is a registered trademark of Nubera eBusiness S.L. Nubera eBusiness uses its own and third-party cookies. By using the website you are accepting the use of these cookies. To get more information about our cookies click here.