1. [Home](https://www.g2.com/)
2. ...
3. [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast)
4. [ThunderScan Discussions](https://www.g2.com/products/thunderscan/discuss)

[
 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_9737b32d2fe5255b82c21cf0b0bfcf22/thunderscan.png "Product Avatar Image")
](/products/thunderscan/reviews)

[

ThunderScan

](/products/thunderscan/reviews)

0 ratings

DefenseCode ThunderScan® is a SAST (Static Application Security Testing, WhiteBox Testing) solution for performing deep and extensive security analysis of application source code. ThunderScan® is easy to use, requires almost no user input and can be deployed during or after development with easy integration into your DevOps environment and CI/CD pipeline. Our SAST solution provides an excellent way to automate code inspection as an alternative to the demanding and time-consuming procedure of manual code reviews. Find out why large enterprises are replacing their current SAST solutions with DefenseCode ThunderScan® SAST. With DefenseCode ThunderScan® SAST it is possible to scan millions of source code lines across 29 different programming languages and various programming frameworks within hours or even minutes. Scalability combined with repeatability of automation provides an easy and painless way to introduce security into your DevOps for organizations ranging from small development teams up to the largest enterprises. ThunderScan® includes a Dependency Check component (Software Composition Analysis – SCA) that will detect publicly disclosed vulnerabilities contained within a project’s dependencies with associated CVE entries. Application source code security analysis has proven consistently to be the most comprehensive way to ensure that your application is free of security vulnerabilities (SQL Injections, Cross Site Scripting, Path/Directory Traversal, Code Injection, and many more.). With ThunderScan® SAST it is very easy to meet the compliance standards requirements such as PCI-DSS, SANS/CWE Top 25, OWASP Top 10, HIPPA, HITRUST or NIST. ThunderScan® SAST easy to use and very powerful REST API allows you to customize source code scanning and scale across large number of scanning agents. DefenseCode ThunderScan® has repeatedly recognized its effectiveness by discovering critical vulnerabilities in well known open source application.

Show More

When users leave ThunderScan reviews, G2 also collects common questions about the day-to-day use of ThunderScan. These questions are then answered by our community of 850k professionals. Submit your question below and join in on the G2 Discussion.

* * *

### 0.0

Nps Score

### All ThunderScan Discussions

Search

Most CommentedMost HelpfulPinned by G2Newest

All DiscussionsDiscussions with CommentsPinned by G2Discussions without Comments

FilterFilter

Filter byExpand/Collapse 

Sort by

Most Commented

Most Helpful

Pinned by G2

Newest

Filter by

All Discussions

Discussions with Comments

Pinned by G2

Discussions without Comments

Sorry...

There are no questions about ThunderScan yet.

## Start a New Software Discussion

Have a software question?

Get answers from real users and experts

[Start A Discussion](/products/thunderscan/discussions/new)

* * *

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/hd_favicon/2363b5df9684bf0f4ad30b116ea56f28/thunderscan.svg "Product Avatar Image")

### Have you used ThunderScan before?

Answer a few questions to help the ThunderScan community

[
Yes
](javascript:void(0))[
Yes
](https://www.g2.com/authorize?form=signup&return_to=https%3A%2F%2Fwww.g2.com%2Fproducts%2Fthunderscan%2Fdiscuss%3Fsmall_ask%3Dthunderscan)
No