Best Static Application Security Testing (SAST) Software - Page 4
Static application security testing (SAST) software inspects and analyzes an application’s code to discover security vulnerabilities without actually executing code. These tools are frequently used by companies with continuous delivery practices to identify flaws prior to deployment. SAST tools provide vulnerability information and remediation suggestions for development teams to resolve. There is relation and overlap between SAST tools and static code analysis software, but SAST products are more focused on security testing. Static code analysis products, on the other hand, combine a number of analytical practices, test management, and team collaboration features.
SAST vs DAST — Learn the difference
To qualify for inclusion in the Static Application Security Testing (SAST) category, a product must:
Featured Static Application Security Testing (SAST) Software At A Glance
G2 takes pride in showing unbiased reviews on user satisfaction in our ratings and reports. We do not allow paid placements in any of our ratings, rankings, or reports. Learn about our scoring methodologies.
A weekly snapshot of rising stars, new launches, and what everyone's buzzing about.
- Overview
- User Satisfaction
- Seller Details
Platform for detecting security vulnerabilities in applications by analyzing the source code. bugScout® is the most complete and versatile SAST platform on the market for detecting application securi
- 50% Enterprise
- 50% Mid-Market
- Overview
- User Satisfaction
- Seller Details
esChecker combines many years of penetration testing experience with a unique dynamic engine simulating attack techniques, such as reverse-engineering or code tampering. No source code is needed, on
- 100% Small-Business
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Manage, measure and integrate security for the entire software lifecycle.
- 33% Enterprise
- 33% Mid-Market
21,628 Twitter followers
- Overview
- User Satisfaction
- Seller Details
PT Application Inspector™ (PT AI™) is a comprehensive source code analysis tool that offers protection for web applications of any scale. Its holistic approach combines the advantages of static, dynam
- 67% Enterprise
- 33% Small-Business
5 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
ReversingLabs is the trusted name in file and software security. We provide the modern cybersecurity platform to verify and deliver safe binaries. Trusted by the Fortune 500 and leading cybersecurity
- 88% Small-Business
6,915 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Symbiotic Security is an AI-powered cybersecurity startup putting code security directly into developers’ workflows. Backed by leading investors and co-founded by industry veterans, Symbiotic offers t
- 67% Small-Business
- 33% Enterprise
- Overview
- User Satisfaction
- Seller Details
VCG is an automated code security review tool for C++, C#, VB, PHP, Java and PL/SQL which is intended to drastically speed up the code review process by identifying bad/insecure code. It has a few fea
- 50% Enterprise
- 50% Mid-Market
46,893 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Xanitizer is the essential tool for security auditors. It specializes in security analysis of web applications and also considers the behavior of the applied web frameworks. Xanitizer investigates the
- 50% Mid-Market
- 50% Small-Business
- Overview
- User Satisfaction
- Seller Details
AppSonar is a application security testing software created by CyberTest. It's main feature is static source code analyzer but also can analyze windows executable files for security and quality bugs.
- 100% Small-Business
- Overview
- User Satisfaction
- Seller Details
The latest Minded Security Labs project regards JavaScript Security. We have released a tool called BlueClosure which helps security testers to analyze and discover Client Side security issues.
- 100% Small-Business
905 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Cycode is the only end-to-end software supply chain (SSC) security solution to provide visibility, security, and integrity across all phases of the SDLC. Cycode integrates with all of your software de
- 67% Mid-Market
- 33% Enterprise
- Overview
- User Satisfaction
- Seller Details
RamQuest’s solutions include our fully integrated closing, escrow accounting, imaging, transaction management, esigning, and digital marketplace solutions and are available on-premise or in a hosted e
- 100% Enterprise
- Overview
- User Satisfaction
- Seller Details
PrivJs Safe blocks the installation of malicious npm packages and provides with an ESLint plugin to detect vulnerable dependencies in a project.
- 100% Enterprise
- Overview
- User Satisfaction
- Seller Details
Focused on development teams, reshift is source code analysis tool that automates finding vulnerabilities in source code, and reduces the efforts to re-mediate them.
- 100% Small-Business
- Overview
- User Satisfaction
- Seller Details
Sigrid® - The Software Assurance Platform Sigrid, the software assurance platform from Software Improvement Group (SIG), provides actionable insights into your software portfolio and empowers your or
- 50% Mid-Market
- 50% Small-Business
881 Twitter followers
