Best Static Application Security Testing (SAST) Software - Page 2
Static application security testing (SAST) software inspects and analyzes an application’s code to discover security vulnerabilities without actually executing code. These tools are frequently used by companies with continuous delivery practices to identify flaws prior to deployment. SAST tools provide vulnerability information and remediation suggestions for development teams to resolve. There is relation and overlap between SAST tools and static code analysis software, but SAST products are more focused on security testing. Static code analysis products, on the other hand, combine a number of analytical practices, test management, and team collaboration features.
SAST vs DAST — Learn the difference
To qualify for inclusion in the Static Application Security Testing (SAST) category, a product must:
Featured Static Application Security Testing (SAST) Software At A Glance
G2 takes pride in showing unbiased reviews on user satisfaction in our ratings and reports. We do not allow paid placements in any of our ratings, rankings, or reports. Learn about our scoring methodologies.
A weekly snapshot of rising stars, new launches, and what everyone's buzzing about.
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Veracode helps companies that innovate through software deliver secure code on time. Unlike on-premise solutions that are hard to scale and focused on finding rather than fixing, Veracode comprises a
- Information Technology and Services
- 72% Enterprise
- 28% Mid-Market
22,091 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Fast, Flexible Code Security! Kiuwan is a robust, end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Secu
- Information Technology and Services
- 42% Enterprise
- 35% Mid-Market
3,376 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
JFrog Ltd. (Nasdaq: FROG) is on a mission to create a world of software delivered without friction from developer to device. Driven by a “Liquid Software” vision, the JFrog Software Supply Chain P
- DevOps Engineer
- Software Engineer
- Information Technology and Services
- Computer Software
- 55% Enterprise
- 34% Mid-Market
23,159 Twitter followers
- Overview
- User Satisfaction
- Seller Details
NowSecure Inc., based in Oak Park, Illinois, was formed in 2009 with a mission to advance mobile security worldwide. We help secure mobile devices, enterprises and mobile apps.
- 41% Mid-Market
- 37% Enterprise
6,403 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Codacy is the only DevSecOps platform that delivers plug-and-play code health and security scanning for AI and human generated code. Future-proof your software – from source code to runtime – without
- Computer Software
- 61% Small-Business
- 21% Mid-Market
5,044 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Appknox is an on-demand mobile application security platform that helps businesses detect and fix security vulnerabilities using an Automated Security Testing suite. We have been successfully reducing
- Information Technology and Services
- Financial Services
- 40% Small-Business
- 37% Mid-Market
3,082 Twitter followers
- Overview
- User Satisfaction
- Seller Details
DerScanner is a complete application security testing solution to eliminate known and unknown code threats across Software Development Lifecycle. DerScanner static code analysis offers developers the
- Information Technology and Services
- 64% Small-Business
- 45% Mid-Market
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Rainforest is the all-in-one cyber security platform with an end-to-end approach to simplify corporate reputation protection by using multiple intelligences and proactive observability, adding Applica
- 42% Small-Business
- 42% Mid-Market
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
GuardRails is an end-to-end security platform that makes AppSec easier for both security and development teams. We scan, detect, and provide real-time guidance to fix vulnerabilities early. Trusted b
- Information Technology and Services
- Financial Services
- 52% Small-Business
- 48% Mid-Market
1,566 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Klocwork is a static code analysis and SAST tool for C, C++, C#, Java, JavaScript, Python, and Kotlin that identifies software security, quality, and reliability issues helping to enforce compliance w
- Information Technology and Services
- 48% Mid-Market
- 35% Small-Business
5,092 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Contrast Security is the global leader in Application Detection and Response (ADR), empowering organizations to see and stop attacks on applications and APIs in real time. Contrast embeds patented thr
- Insurance
- Computer Software
- 67% Enterprise
- 20% Mid-Market
5,540 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Mend.io offers the first AI native application security platform, empowering organizations to build and run a proactive AppSec program tuned for AI powered development. The unified platform secures AI
- Software Engineer
- Computer Software
- Information Technology and Services
- 38% Small-Business
- 34% Mid-Market
11,405 Twitter followers
- Overview
- User Satisfaction
- Seller Details
CodeScan Shield addresses code quality, security, and compliance liabilities with two automated modules: CodeScan and OrgScan. CodeScan provides static code analysis for total visibility into code h
- Information Technology and Services
- Computer Software
- 44% Enterprise
- 38% Mid-Market
1,250 Twitter followers
- Overview
- User Satisfaction
- Seller Details
DeepSource is an all-in-one code health platform that equips organizations with everything they need to build maintainable and secure software while elevating the velocity of their software developmen
- Computer Software
- 82% Small-Business
- 9% Enterprise
1,710 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Embold supports developers and development teams by finding critical code issues before they become roadblocks. It is the perfect tool to analyze, diagnose, transform, and sustain your software effici
- Computer Software
- 56% Small-Business
- 28% Mid-Market
1,080 Twitter followers
