0

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categories Blog & research About us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links.

Our commitment

Independent research methodology

Our researchers use a mix of verified reviews, independent research, and objective methodologies to bring you selection and ranking information you can trust. While we may earn a referral fee when you visit a provider through our links or speak to an advisor, this has no influence on our research or methodology.

Verified user reviews

GetApp maintains a proprietary database of millions of in-depth, verified user reviews across thousands of products in hundreds of software categories. Our data scientists apply advanced modeling techniques to identify key insights about products based on those reviews. We may also share aggregated ratings and select excerpts from those reviews throughout our site.

Our human moderators verify that reviewers are real people and that reviews are authentic. They use leading tech to analyze text quality and to detect plagiarism and generative AI.

How GetApp ensures transparency

GetApp lists all providers across its website—not just those that pay us—so that users can make informed purchase decisions. GetApp is free for users. Software providers pay us for sponsored profiles to receive web traffic and sales opportunities. Sponsored profiles include a link-out icon that takes users to the provider’s website.

Static Application Security Testing (SAST)
Jira

Static Application Security Testing (SAST) Software

Last updated: April 2026

1 filter applied

Features

Vulnerability Scanning

Application Security

Real-Time Analytics

Multi-Language Scanning

Source-Code Scanning

Dashboard

Integrated with

Jenkins

GitLab

GitHub

Bitbucket

Slack

Jira

Pricing model

Free

Open Source

Free Trial

One Time License

Subscription

Devices supported

Android

Chromebook

iPad

iPhone

Linux

Mac

Web-based

Windows

Organization types

Freelancers

Large Enterprises

Mid Size Business

Non Profit

Public Administrations

Small Business

User rating

All Reviews

& up

& up

& up

15 software options

Sort by

Sponsored

Jsmon

4.8

(5)

5

4

4

1

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Context-Aware EASM That Discovers What Traditional Scanners

AI-powered EASM platform with unique JavaScript-layer analysis. Discover shadow APIs, exposed secrets, and vulnerabilities hidden from traditional scanners. Built by elite hackers for bug bounty hunters, AppSec teams, and security leaders. Start scanning in 5 minutes.

Read more about Jsmon

Users also considered

GitHub

4.8

(6.1K)

5

4.7K

4

1.2K

3

97

2

7

1

2

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Social coding & collaborative development platform

GitHub is a place to share code with friends, co-workers, classmates, and complete strangers, helping individuals and teams to write faster, better code

Read more about GitHub

Users also considered

Aikido Security

4.7

(6)

5

4

4

2

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Unified cybersecurity software

Security-first SAST with zero distractions. Scan your code for vulnerabilities & get alerts only for real security risks. Auto-triage vulnerabilities with AI.

Read more about Aikido Security

Users also considered

Invicti

4.7

(26)

5

19

4

5

3

2

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Proof-based application security testing platform

Invicti is a web application and API security platform that provides proof-based vulnerability scanning with DAST, SAST, and ASPM capabilities. The platform discovers and tests websites, applications, and APIs while correlating security findings from multiple tools to prioritize real vulnerabilities. It integrates with CI/CD pipelines and offers AI-powered remediation guidance to help development teams address security issues efficiently.

Read more about Invicti

Users also considered

Artifactory

4.6

(19)

5

12

4

7

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Artifact repository manager for software development teams

JFrog Artifactory is a binary repository management SaaS solution that provides software development and DevOps teams with a single source of truth for sourcing, storing, sharing, and deploying software components. Release your software with security and ease.

Read more about Artifactory

Users also considered

GitLab

4.6

(1.2K)

5

785

4

386

3

38

2

3

1

4

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Your intelligent orchestration platform for DevOps

GitLab unifies planning, CI/CD, security, and agentic AI, eliminating the tool handoffs that slow software delivery. Learn more today.

Read more about GitLab

Users also considered

Snyk

4.6

(21)

5

15

4

3

3

3

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Cloud-based security platform to track & fix vulnerabilities

Snyk is a cloud-based application security and testing platform, which helps enterprises discover and fix vulnerabilities across open source libraries, containers, or codes throughout the development process. Features include runtime monitoring, reporting, exploitability indicators, alerts, and prioritization.

Read more about Snyk

Users also considered

Kiuwan

4.4

(35)

5

16

4

18

3

1

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Secure your applications confidently with Kiuwan.

Kiuwan is an end-to-end application security platform supporting 30+ languages with SAST, SCA, & QA. Kiuwan integrates with IDEs for direct analysis, offers tailored reports, and meets NIST, CWE, & OWASP standards.

Manage open source components and secure your projects confidently with Kiuwan.

Read more about Kiuwan

Users also considered

Acunetix

4.4

(35)

5

20

4

10

3

4

2

1

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Cloud-based and automated web application security solution

Acunetix is a cybersecurity solution offering automatic web security testing technology that enables organizations to scan and audit complex, authenticated, HTML5 and JavaScript-heavy websites to detect vulnerabilities such as XSS, SQL Injection, and more.

Read more about Acunetix

Users also considered

SonarQube Cloud

4.3

(7)

5

3

4

3

3

1

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

SonarCloud is a cloud-based alternative of the SonarQube .

SonarCloud is a cloud based (SaaS) static code analysis solution that can be used by dev teams to ensure code quality and security.

Read more about SonarQube Cloud

Users also considered

Conviso

4.0

(1)

5

0

4

1

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Application Security Posture Management

The Conviso Platform is an Application Security Posture Management (ASPM) solution that centralizes the management of risks, vulnerabil

Read more about Conviso

Users also considered

Sonatype Lifecycle

4.0

(4)

5

0

4

4

3

0

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

OSS Application Security and Dependency Management Solution

Sonatype Lifecycle controls open source risk across the SDLC to help application security scale their operations to the speed of development.

Eliminate unnecessary work
Improve efficiency and speed
Enhance productivity

Read more about Sonatype Lifecycle

Users also considered

Coverity

3.5

(6)

5

0

4

3

3

3

2

0

1

0

Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews

Build secure, high-quality software faster.

Coverity is a static application security testing (SAST) solution designed to help businesses manage risks across the application portfolio, address quality defects in the software development life cycle, and maintain compliance with many coding and security standards.

Read more about Coverity

Users also considered

Akto

(0)

API Security Platform for Modern Appsec teams

Akto is an industry-leading solution for API discovery, API security posture management, sensitive data exposure, API security testing.

Read more about Akto

Users also considered

ThunderScan

(0)

SAST Application Security

ThunderScan by DefenseCode is a Static Application Security Testing (SAST) software that allows businesses to perform deep and extensive security analysis of various application source codes. ThunderScan can be integrated with existing CI/CD pipelines and DevOps environment, offering a platform that requires almost no user input, easy to use, and can be deployed during or after development.

Read more about ThunderScan

Users also considered

Related categories

Vulnerability Scanner

Vulnerability Management

Container Security

Security System Installer

Network Security

Computer Security

Physical Security

US office

56 Top Gallant Road
Stamford, CT 06902
USA

Registered office

Calle Álava 121
08018 Barcelona,
Spain

For you

Join Sign in Software categories Blog & research

For vendors

Get listed Your account

Our company

About us We're hiring!News Legal Privacy Policy Vulnerability Disclosure Program

© 2010-2026 GetApp. All Rights Reserved.
GetApp is a registered trademark of Nubera eBusiness S.L. Nubera eBusiness uses its own and third-party cookies. By using the website you are accepting the use of these cookies. To get more information about our cookies click here.