Best Static Application Security Testing (SAST) Software - Page 2
Static application security testing (SAST) software inspects and analyzes an application’s code to discover security vulnerabilities without actually executing code. These tools are frequently used by companies with continuous delivery practices to identify flaws prior to deployment. SAST tools provide vulnerability information and remediation suggestions for development teams to resolve. There is relation and overlap between SAST tools and static code analysis software, but SAST products are more focused on security testing. Static code analysis products, on the other hand, combine a number of analytical practices, test management, and team collaboration features.
SAST vs DAST — Learn the difference
To qualify for inclusion in the Static Application Security Testing (SAST) category, a product must:
Featured Static Application Security Testing (SAST) Software At A Glance
G2 takes pride in showing unbiased reviews on user satisfaction in our ratings and reports. We do not allow paid placements in any of our ratings, rankings, or reports. Learn about our scoring methodologies.
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Invicti is an automated application and API security testing solution that allows enterprise organizations to secure thousands of websites, web apps, and APIs and dramatically reduce the risk of attac
- Computer Software
- Information Technology and Services
- 47% Enterprise
- 26% Mid-Market
2,561 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Fast, Flexible Code Security! Kiuwan is a robust, end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Secu
- Information Technology and Services
- Banking
- 44% Enterprise
- 34% Mid-Market
3,371 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
JFrog Ltd. (Nasdaq: FROG) is on a mission to create a world of software delivered without friction from developer to device. Driven by a “Liquid Software” vision, the JFrog Software Supply Chain P
- DevOps Engineer
- Software Engineer
- Information Technology and Services
- Computer Software
- 56% Enterprise
- 35% Mid-Market
23,125 Twitter followers
- Overview
- User Satisfaction
- Seller Details
NowSecure Inc., based in Oak Park, Illinois, was formed in 2009 with a mission to advance mobile security worldwide. We help secure mobile devices, enterprises and mobile apps.
- 41% Mid-Market
- 37% Enterprise
6,390 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Codacy is the only DevSecOps platform that delivers plug-and-play code health and security scanning for AI and human generated code. Future-proof your software – from source code to runtime – without
- Computer Software
- 61% Small-Business
- 21% Mid-Market
5,044 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Appknox is an on-demand mobile application security platform that helps businesses detect and fix security vulnerabilities using an Automated Security Testing suite. We have been successfully reducing
- Information Technology and Services
- Financial Services
- 40% Small-Business
- 37% Mid-Market
3,076 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
GuardRails is an end-to-end security platform that makes AppSec easier for both security and development teams. We scan, detect, and provide real-time guidance to fix vulnerabilities early. Trusted b
- Information Technology and Services
- Financial Services
- 52% Small-Business
- 48% Mid-Market
1,560 Twitter followers
- Overview
- User Satisfaction
- Seller Details
DerScanner is a complete application security testing solution to eliminate known and unknown code threats across Software Development Lifecycle. DerScanner static code analysis offers developers the
- Information Technology and Services
- 64% Small-Business
- 45% Mid-Market
- Overview
- User Satisfaction
- Seller Details
Rainforest is the all-in-one cyber security platform with an end-to-end approach to simplify corporate reputation protection by using multiple intelligences and proactive observability, adding Applica
- 42% Small-Business
- 42% Mid-Market
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Contrast Security is the global leader in Application Detection and Response (ADR), empowering organizations to see and stop attacks on applications and APIs in real time. Contrast embeds patented thr
- Insurance
- Information Technology and Services
- 67% Enterprise
- 20% Mid-Market
5,506 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Perforce Klocwork is an enterprise grade SAST solution for C, C++, C#, Rust (support coming March 2026), Java, JavaScript, Python, and Kotlin. It helps development teams detect security vulnerabilitie
- Information Technology and Services
- 48% Mid-Market
- 35% Small-Business
5,089 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Mend.io is the leading application security solution, helping organizations reduce application risk efficiently. Built for modern, AI-driven, and traditional development environments alike, Mend.io pr
- Software Engineer
- Computer Software
- Information Technology and Services
- 38% Small-Business
- 34% Mid-Market
11,348 Twitter followers
- Overview
- User Satisfaction
- Seller Details
CodeScan Shield addresses code quality, security, and compliance liabilities with two automated modules: CodeScan and OrgScan. CodeScan provides static code analysis for total visibility into code h
- Information Technology and Services
- Computer Software
- 44% Enterprise
- 38% Mid-Market
1,243 Twitter followers
- Overview
- User Satisfaction
- Seller Details
DeepSource is an all-in-one code health platform that equips organizations with everything they need to build maintainable and secure software while elevating the velocity of their software developmen
- Computer Software
- 82% Small-Business
- 9% Enterprise
- Overview
- User Satisfaction
- Seller Details
Embold supports developers and development teams by finding critical code issues before they become roadblocks. It is the perfect tool to analyze, diagnose, transform, and sustain your software effici
- Computer Software
- 56% Small-Business
- 28% Mid-Market
1,073 Twitter followers
