0

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categories Blog & research About us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links.

Our commitment

Independent research methodology

Our researchers use a mix of verified reviews, independent research, and objective methodologies to bring you selection and ranking information you can trust. While we may earn a referral fee when you visit a provider through our links or speak to an advisor, this has no influence on our research or methodology.

Verified user reviews

GetApp maintains a proprietary database of millions of in-depth, verified user reviews across thousands of products in hundreds of software categories. Our data scientists apply advanced modeling techniques to identify key insights about products based on those reviews. We may also share aggregated ratings and select excerpts from those reviews throughout our site.

Our human moderators verify that reviewers are real people and that reviews are authentic. They use leading tech to analyze text quality and to detect plagiarism and generative AI.

How GetApp ensures transparency

GetApp lists all providers across its website—not just those that pay us—so that users can make informed purchase decisions. GetApp is free for users. Software providers pay us for sponsored profiles to receive web traffic and sales opportunities. Sponsored profiles include a link-out icon that takes users to the provider’s website.

Static Application Security Testing (SAST)
Free

Static Application Security Testing (SAST) Software

Last updated: April 2026

1 filter applied

Features

Vulnerability Scanning

Application Security

Real-Time Analytics

Multi-Language Scanning

Source-Code Scanning

Dashboard

Integrated with

Jenkins

GitLab

GitHub

Bitbucket

Slack

Jira

Pricing model

Free

Open Source

Free Trial

One Time License

Subscription

Devices supported

Android

Chromebook

iPad

iPhone

Linux

Mac

Web-based

Windows

Organization types

Freelancers

Large Enterprises

Mid Size Business

Non Profit

Public Administrations

Small Business

User rating

All Reviews

& up

& up

& up

19 software options

Sort by

Sponsored

IDA Pro

5.0

(1)

5

1

4

0

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

A powerful disassembler and a versatile debugger.

Hex-Rays develops and supports the IDA disassembler. This famous software analysis tool, which is a de-facto standard in the software security industry, is an indispensable item in the toolbox of a software analyst, security expert, software developer, or software engineer.

Read more about IDA Pro

Users also considered

GuardRails

5.0

(5)

5

5

4

0

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Application security software

With GuardRails, you can finally feel safe on every level of your security. The platform enhances development processes and gives developers control via its layered approach that shields them from code to the cloud for complete protection against attackers.

Read more about GuardRails

Users also considered

DeepSource

4.8

(10)

5

8

4

2

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

The Code Health Solution.

DeepSource is the code health platform that all tools needed to write maintainable and secure code to improve software's stability and increase developer velocity.

Read more about DeepSource

Users also considered

GitHub

4.8

(6.1K)

5

4.7K

4

1.2K

3

97

2

7

1

2

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Social coding & collaborative development platform

GitHub is a place to share code with friends, co-workers, classmates, and complete strangers, helping individuals and teams to write faster, better code

Read more about GitHub

Users also considered

CodeScene

4.7

(11)

5

8

4

3

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Next Generation Code Analysis

CodeScene is a code analysis, visualization, and reporting tool. Cross reference contextual factors such as code quality, team dynamics, and delivery output to get actionable insights to effectively reduce technical debt and deliver better code quality.

Read more about CodeScene

Users also considered

SonarLint

4.7

(7)

5

5

4

2

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Free and open-source IDE plugin, that is a developer's first

SonarLint is a free IDE plugin that helps developers by detecting and highlighting issues in their code in real time.

Read more about SonarLint

Users also considered

Aikido Security

4.7

(6)

5

4

4

2

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Unified cybersecurity software

Security-first SAST with zero distractions. Scan your code for vulnerabilities & get alerts only for real security risks. Auto-triage vulnerabilities with AI.

Read more about Aikido Security

Users also considered

OX Security

4.7

(3)

5

2

4

1

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Cloud-security solution for administrators.

OX Security is a cloud security platform that helps small to large businesses in technology, banking, financial services, and other sectors protect their organization from advanced cyber threats. The platform provides real-time threat detection and response capabilities, giving administrators the ability to gain insights into their network so they can identify and address threats before those threats cause damage.

Read more about OX Security

Users also considered

Artifactory

4.6

(19)

5

12

4

7

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Artifact repository manager for software development teams

JFrog Artifactory is a binary repository management SaaS solution that provides software development and DevOps teams with a single source of truth for sourcing, storing, sharing, and deploying software components. Release your software with security and ease.

Read more about Artifactory

Users also considered

Klocwork

4.6

(8)

5

5

4

3

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Static code analysis tool with continuous compliance

Klocwork is a web-based static code analysis software designed to help businesses identify and manage software security and quality in compliance with regulatory guidelines. It lets DevOps teams detect various security vulnerabilities including tainted data, SQL injection, vulnerable coding practices, buffer overflow, and more.

Read more about Klocwork

Users also considered

GitLab

4.6

(1.2K)

5

785

4

386

3

38

2

3

1

4

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Your intelligent orchestration platform for DevOps

GitLab unifies planning, CI/CD, security, and agentic AI, eliminating the tool handoffs that slow software delivery. Learn more today.

Read more about GitLab

Users also considered

Bytesafe

4.6

(7)

5

4

4

3

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Source code and vulnerability management platform

Bytesafe is a firewall for dependencies. Using the source code and vulnerability management platform, businesses can protect applications, stay in control and keep unwanted dependencies out of the organization.

Read more about Bytesafe

Users also considered

Snyk

4.6

(21)

5

15

4

3

3

3

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Cloud-based security platform to track & fix vulnerabilities

Snyk is a cloud-based application security and testing platform, which helps enterprises discover and fix vulnerabilities across open source libraries, containers, or codes throughout the development process. Features include runtime monitoring, reporting, exploitability indicators, alerts, and prioritization.

Read more about Snyk

Users also considered

SonarQube

4.5

(66)

5

40

4

23

3

2

2

0

1

1

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Sonar: AI code verification for quality and security

SonarQube is an automated code review solution, serving as the verification layer for code quality and security. SonarQube ensures that all AI and developer code is secure, reliable, and maintainable.

Read more about SonarQube

Users also considered

SonarQube Cloud

4.3

(7)

5

3

4

3

3

1

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

SonarCloud is a cloud-based alternative of the SonarQube .

SonarCloud is a cloud based (SaaS) static code analysis solution that can be used by dev teams to ensure code quality and security.

Read more about SonarQube Cloud

Users also considered

Sonatype Lifecycle

4.0

(4)

5

0

4

4

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

OSS Application Security and Dependency Management Solution

Sonatype Lifecycle controls open source risk across the SDLC to help application security scale their operations to the speed of development.

Eliminate unnecessary work
Improve efficiency and speed
Enhance productivity

Read more about Sonatype Lifecycle

Users also considered

Ostorlab

(0)

Cloud-based vulnerability management platform

Ostorlab is a cloud-based vulnerability management platform designed to help businesses detect, monitor, and remediate risks across enterprises' external attack surfaces.

Read more about Ostorlab

Users also considered

Akto

(0)

API Security Platform for Modern Appsec teams

Akto is an industry-leading solution for API discovery, API security posture management, sensitive data exposure, API security testing.

Read more about Akto

Users also considered

Moderne

(0)

Source code modernization and maintenance platform

Moderne is an automated code refactoring and analysis platform for securing, migrating, maintaining, and modernizing software at mass scale. We make it easy for developers to collaborate and make big changes in their codebase fast, freeing time for innovation.

Read more about Moderne

Users also considered

Related categories

Vulnerability Scanner

Vulnerability Management

Container Security

Security System Installer

Network Security

Computer Security

Physical Security

US office

56 Top Gallant Road
Stamford, CT 06902
USA

Registered office

Calle Álava 121
08018 Barcelona,
Spain

For you

Join Sign in Software categories Blog & research

For vendors

Get listed Your account

Our company

About us We're hiring!News Legal Privacy Policy Vulnerability Disclosure Program

© 2010-2026 GetApp. All Rights Reserved.
GetApp is a registered trademark of Nubera eBusiness S.L. Nubera eBusiness uses its own and third-party cookies. By using the website you are accepting the use of these cookies. To get more information about our cookies click here.