Best Static Application Security Testing (SAST) Software - Page 5

Xanitizer

Xanitizer is the essential tool for security auditors. It specializes in security analysis of web applications and also considers the behavior of the applied web frameworks. Xanitizer investigates the code of an application for security vulnerabilities and also checks the server configuration files for misconfigurations. Xanitizer can easily be integrated into the CI/CD process, automatically and regularly checking the application code to prevent that security vulnerabilities are introduced into the production code.

Average Rating: 5.0/5.0

Total Reviews: 2

AppSonar

AppSonar is a application security testing software created by CyberTest. It's main feature is static source code analyzer but also can analyze windows executable files for security and quality bugs.

Average Rating: 3.5/5.0

Total Reviews: 1

BlueClosure

The latest Minded Security Labs project regards JavaScript Security. We have released a tool called BlueClosure which helps security testers to analyze and discover Client Side security issues.

Average Rating: 3.5/5.0

Total Reviews: 1

Bluesentinel

BlueSentinel develops secure code analysis technology that helps engineering teams identify vulnerabilities early and remediate them efficiently. The platform combines static application security testing, AI-assisted remediation, data-flow analysis, and developer-focused reporting to improve software security throughout the development lifecycle. Our goal is to make secure software development faster, more accurate, and more actionable for development and security teams.

Average Rating: 4.5/5.0

Total Reviews: 1

Corgea

Corgea is the AI-native application security platform that finds the vulnerabilities your scanners miss, and ships verified fix PRs your developers actually merge. Full coverage across SAST, SCA, secrets, IaC, and containers, with 2x more true positives and 3x fewer false positives than legacy tools. Trusted by Zapier, epilot, Yageo, and and many others.

Average Rating: 5.0/5.0

Total Reviews: 1

Cycode

Cycode’s AI-Native Application Security Platform unites security and development teams with actionable context from code to runtime to identify, prioritize, and fix the software risks that matter. Powered by proprietary scanners, third-party integrations, and the Context Intelligence Graph (CIG), Cycode delivers unified, correlated insight across the Software Factory. Its unique ability to sense, reason, and act with context in the AI-Era comes from its foundational convergence of AST, ASPM, and Software Supply Chain Security—purpose-built to secure both AI- and human-generated code.

Average Rating: 4.0/5.0

Total Reviews: 2

Data Theorem

RamQuest’s solutions include our fully integrated closing, escrow accounting, imaging, transaction management, esigning, and digital marketplace solutions and are available on-premise or in a hosted environment

Average Rating: 4.0/5.0

Total Reviews: 1

Fluid Attacks

Implement Fluid Attacks' comprehensive, AI-powered solution into your SDLC and develop secure software without delays. As an all-in-one solution, Fluid Attacks accurately finds and helps you remediate vulnerabilities throughout the SDLC and ensures secure software development. The solution integrates its AI, automated tool, and team of pentesters to perform SAST, SCA, DAST, CSPM, SCR, PtaaS and RE to help you improve your security posture. This way, Fluid Attacks delivers accurate knowledge of the security status of your application. This means security goes alongside innovation without hindering your speed. Fluid Attacks provides you with expert knowledge about vulnerabilities and support options that enable you to remediate the security issues in your application.

Average Rating: 4.5/5.0

Total Reviews: 1

PrivJs Safe

PrivJs Safe blocks the installation of malicious npm packages and provides with an ESLint plugin to detect vulnerable dependencies in a project.

Average Rating: 5.0/5.0

Total Reviews: 1

Sigrid

Sigrid® - The Software Assurance Platform Sigrid, the software assurance platform from Software Improvement Group (SIG), provides actionable insights into your software portfolio and empowers your organization to make fact-based decisions that cut costs and reduce risks, boost productivity up to 30%, keep technical debt in check, speed up time to market and build a foundation for future innovation. Sigrid illuminates the risks and opportunities in your source code and architecture and provides actionable advice to navigate the pitfalls. Sigrid continuously measures and monitors the build quality of your enterprise software, including architecture, maintainability, security, and productivity – a single solution that reduces expensive tool spread and provides a central overview of software health. Join our community - // Getting software right for a healthier digital world.

Average Rating: 4.8/5.0

Total Reviews: 2

Sparrow SAST

Sparrow SAST is designed to detect security weaknesses in source code with its semantic based static program analysis engine.

Average Rating: 5.0/5.0

Total Reviews: 1

Virtual Forge Security Suite

Using the Virtual Forge Security Suite, customers will improve their security and compliance by automating tasks involved in securing their SAP systems.

Average Rating: 4.0/5.0

Total Reviews: 1

Axivion

Axivion Static Code Analysis helps developers check standard compliance, security vulnerabilities, and code quality issues for C and C++ code. It performs automated analysis to identify violations of coding guidelines like MISRA C and detect clones, dead code, and security vulnerabilities. Key features include coding standards compliance checking, metric monitoring, defect analysis, and certification for safety-critical software development.

Bearer

Bearer helps modern teams ship trustworthy products with the help of our code security SAST solution built for security, privacy and engineering teams. We combine sensitive data context with static code analysis to make security and privacy engineering simpler and smarter to maximize the ROI for your DevSecOps and central security team driven programs.

Average Rating: 5.0/5.0

Total Reviews: 1

Bugsmirror MASST (Mobile Application Security Suite & Tools)

Bugsmirror Mobile Application Security Suite & Tools (MASST) is designed specifically for your business, providing scalable, end-to-end security for your mobile app. From detection to protection, MASST ensures your app is safeguarded against evolving security threats. With MASST, you can focus on growing your business, knowing your app is fully protected at every stage.