Buildship product

Growrevenue and data

Operaterun the company

Protectsecurity and compliance

Deals Marketplace Pricing Hub Cubbie Points

Buyer's guide

Best Code Security Scanning software

Compare Code Security Scanning products. Open any profile for real pricing, compliance, and buyer-fit detail, or jump into the code security scanning directory to filter by industry, company size, and certifications.

24 toolsUpdated 2026

1
Anthropic is an AI safety company that builds Claude, a family of large language models designed for helpfulness, harmlessness, and honesty, available through API and the Claude.ai consumer…
AI Agents & Sidekicks
View profile
2
Aikido Security brings together code, cloud, dependency, and runtime security workflows in a more approachable platform for modern engineering teams.
Code Security Scanning
View profile
3
JFrog is the software supply chain platform — universal artifact management, security scanning, and distribution from a single system of record for binaries.
Artifact Repository Platforms
View profile
4
Anchore provides container security and software supply chain compliance tools that help organizations enforce security policies for container images throughout the development pipeline.
Container Security
View profile
5
Cycode: Complete ASPM platform providing visibility and security across the entire software development lifecycle from code to cloud.
Application Security Posture Management
View profile
6
Waratek: Runtime application security platform providing virtual patching and RASP protection for Java applications without code changes.
Dynamic Application Security Testing
View profile
7
KICS: Open source IaC security scanner from Checkmarx finding security vulnerabilities and compliance issues in Terraform, Ansible, and more.
Infrastructure as Code
View profile
8
Chef by Progress is an infrastructure automation platform using Ruby-based recipes for configuration management, compliance, and application delivery.
Configuration Management Tools
View profile
9
Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code.
Software Composition Analysis
View profile
10
Terrascan: Open source static code analysis tool for IaC detecting security vulnerabilities and compliance violations in Terraform and more.
Code Security Scanning
View profile
11
Cequence Security provides API security and bot management that protects business-critical applications from automated attacks, abuse, and fraud.
API Security
View profile
12
AccuKnox provides zero-trust runtime security for containers and Kubernetes using eBPF-powered monitoring and dynamic policy enforcement.
Container Security
View profile
13
Bishop Fox provides continuous attack surface management and offensive security testing through its Cosmos platform and expert consultants.
Attack Surface Management
View profile
14
CircleCI is a continuous integration and delivery platform that automates build, test, and deployment pipelines. It supports cloud and self-hosted environments with powerful parallelism and…
CI/CD
View profile
15
Veracode: Application security platform providing SAST, DAST, SCA, and manual penetration testing in a single cloud-based solution.
Code Security Scanning
View profile
16
Steampipe: Open source tool from Turbot for querying cloud infrastructure with SQL using dynamic tables for over 140 cloud services.
Cloud Infrastructure
View profile
17
Panto AI provides AI-powered code review that automatically analyzes pull requests, identifies bugs, security issues, and code quality problems, and suggests improvements.
AI Code Review
View profile
18
Debricked provides software composition analysis focused on making open-source security accessible with fast scanning, automated fix suggestions, and license compliance.
Software Composition Analysis
View profile
19
FOSSA is a software composition analysis platform that automates open-source license compliance, vulnerability scanning, and SBOM generation for enterprise development teams.
Vulnerability Scanning
View profile
20
Legit Security: Application security posture management platform securing the software supply chain from code to deployment with pipeline visibility and protection.
Application Security Posture Management
View profile
21
SonarCloud: Cloud-based code analysis service detecting bugs, vulnerabilities, and code smells in projects hosted on GitHub and other platforms.
Code Security Scanning
View profile
22
GitGuardian is a code security platform that detects secrets and sensitive data in source code, preventing credential leaks in repositories, CI/CD pipelines, and developer environments.
Cybersecurity
View profile
23
Bito provides an AI coding assistant with code review, explanation, security scanning, and performance analysis built into the IDE.
AI Coding Assistants
View profile
24
Trivy by Aqua Security is an open-source comprehensive vulnerability scanner for containers, filesystems, Git repositories, and Kubernetes configurations.
Container Security
View profile
25
GuardRails AppSec: Application security platform scanning for vulnerabilities in code.
Static Application Security Testing
View profile
26
Mobb: Automated vulnerability fixer platform generating code fixes for SAST findings automatically.
Vulnerability Management
View profile
27
Nullify: Engineering-led security platform using AI to find and fix issues across code, cloud, and containers.
AI Security Platforms
View profile
28
Brakeman: Open source static analysis security vulnerability scanner specifically for Ruby on Rails applications.
Static Application Security Testing
View profile
29
Kyverno: Kubernetes-native policy engine for validating, mutating, and generating Kubernetes configurations with YAML policies.
Kubernetes Security
View profile
30
Bright Security: Developer-friendly DAST for APIs and applications
Dynamic Application Security Testing
View profile
31
Cloudsmith is a cloud-native artifact management platform with security scanning and global distribution.
Package Registry
View profile
32
Prowler: Open source security tool for AWS, Azure, GCP, and Kubernetes performing security assessments and compliance checks.
Cloud Security Posture Management
View profile
33
Tessellate: Autonomous security platform for DevSecOps teams with remediation
DevSecOps Platforms
View profile
34
SafeDep: Software supply chain security platform for detecting malicious packages and vulnerabilities.
Supply Chain Management
View profile
35
Zeropath: AI security platform for finding and fixing code vulnerabilities
Static Application Security Testing
View profile
36
Certora: Smart contract formal verification platform that proves correctness of DeFi protocols and critical blockchain code.
Code Security Scanning
View profile

Frequently asked

What is the best code security scanning software?

The guide above features code security scanning tools with complete, vendor-maintained profiles. Open any profile for real pricing, compliance, and buyer-fit detail before you shortlist.

How does Cubbie choose these code security scanning tools?

Listings come from the live Cubbie catalog. Cubbie does not accept payment for ranking position.

Ranked from Cubbie's live catalog, https://www.cubbie.com/best/code-security-scanning