Static Application Security Testing (SAST)
Products focused on identifying security vulnerabilities in source code through static analysis.
Updated June 21, 2026
Products that define this theme
A representative set of Secure Code Review Software products that exemplify Static Application Security Testing (SAST), curated as a starting point for finding similar software.
Selected from G2's verified user reviews and ratings, then matched to this theme for relevance.
How Did G2 Choose These Static Application Security Testing (SAST) Products?
The 14 products shown represent a defining sample for the "Static Application Security Testing (SAST)" theme within Secure Code Review Software on G2 — not an exhaustive list. They are a curated starting point for discovering similar software.
- Sourced from products with verified G2 user reviews and ratings.
- Matched to this theme based on each product's described capabilities and fit, ordered by relevance.
- Rankings and inclusion are unbiased and are not influenced by vendor payment.
Refreshed weekly. Last updated: June 21, 2026.
Semgrep is a modern static analysis (SAST), software composition analysis (SCA), and secrets detection platform designed for both developers and security teams. It combines fast, deterministic...
Fast, Flexible Code Security! Kiuwan is a robust, end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application...
Perforce Klocwork is an enterprise grade SAST solution for C, C++, C#, Rust (support coming March 2026), Java, JavaScript, Python, and Kotlin. It helps development teams detect security...
Security leaders face a paradox: ship faster and enable agentic development while staying secure and keeping developers productive. DryRun Security resolves this by securing every pull request and...
Checkmarx is a type of application security solution designed to help organizations safeguard their software development processes while enhancing efficiency and reducing costs. The Checkmarx One...
Coverity® is a fast, accurate, and highly scalable static analysis (SAST) solution that helps development and security teams address security and quality defects early in the software development...
Jit is redefining application security by introducing the first Agentic AppSec Platform, seamlessly blending human expertise with AI-driven automation. Designed for modern development teams, Jit...
GitLab is the most comprehensive AI-Powered DevSecOps platform that enables software innovation by empowering development, security, and operations teams to build better software, faster. With...
GitGuardian is an end-to-end NHI security platform designed to help organizations strengthen their Non-Human Identity (NHI) security posture and address compliance standards and regulations. As...
OX is redefining product security for the AI era. Founded by Neatsun Ziv and Lion Arzi, former Check Point executives, OX is the company behind VibeSec — the first AI-native vibe security...
Aikido Security is the developer-first security platform that unifies code, cloud, protection, and attack testing in one suite of best-in-class products. Built by developers for developers, Aikido...
GuardRails is an end-to-end security platform that makes AppSec easier for both security and development teams. We scan, detect, and provide real-time guidance to fix vulnerabilities...
Veracode helps companies that innovate through software deliver secure code on time. Unlike on-premise solutions that are hard to scale and focused on finding rather than fixing, Veracode comprises...
DeepSource is an all-in-one code health platform that equips organizations with everything they need to build maintainable and secure software while elevating the velocity of their software...