Dynamic Application Security Testing

Aikido Security

OT Security

Aikido Security brings together code, cloud, dependency, and runtime security workflows in a more approachable platform for modern engineering teams.

AppCheck NG

Dynamic Application Security Testing

Dynamic application and infrastructure security scanner providing automated penetration testing at scale.

StackHawk

Dynamic Application Security Testing

Developer-centric DAST tool that runs application security testing in CI/CD pipelines to find and fix AppSec bugs before they hit production.

Nuclei

Dynamic Application Security Testing

Open-source vulnerability scanner using YAML-based templates to find security issues across modern tech stacks.

GuardRails AppSec

Code Security Scanning

Application security platform scanning for vulnerabilities in code.

Waratek

Dynamic Application Security Testing

Runtime application security platform providing virtual patching and RASP protection for Java applications without code changes.

Corellium

Dynamic Application Security Testing

ARM-native mobile app and IoT security research platform

Qualys

Dynamic Application Security Testing

Qualys provides cloud-based vulnerability management and web application scanning that helps organizations identify and prioritize security risks across their attack surface.

Bright Security

Dynamic Application Security Testing

Developer-friendly DAST for APIs and applications

Beagle Security

Dynamic Application Security Testing

AI-powered web and API penetration testing platform with continuous monitoring.

ForAllSecure

Dynamic Application Security Testing

Next-generation fuzz testing for software security

Mayhem

Dynamic Application Security Testing

Application and API security fuzzing from ForAllSecure

Bishop Fox

Code Security Scanning

Bishop Fox provides continuous attack surface management and offensive security testing through its Cosmos platform and expert consultants.

Contrast Labs

Dynamic Application Security Testing

AppSec platform offering runtime protection and observability.

Mend.io

Dynamic Application Security Testing

Mend.io is a software composition analysis and application security platform that helps development teams identify and remediate vulnerabilities in open-source dependencies.

Pynt

Dynamic Application Security Testing

Automated API security testing integrated with CI and QA

Docker

Configuration Management Tools

Docker is a platform for developing, shipping, and running applications in containers. It provides tools for building container images, managing registries, and orchestrating containerized w...

NowSecure

Dynamic Application Security Testing

Mobile application security platform with continuous automated testing and SDK integration.

SOOS

Dynamic Application Security Testing

SOOS provides affordable software composition analysis and DAST solutions that help development teams identify vulnerabilities and license issues in open-source dependencies.

Metasploit

Dynamic Application Security Testing

Rapid7's open-source penetration testing framework with thousands of exploits and auxiliary modules.

Code Intelligence

Code Security Scanning

Continuous fuzz testing platform integrated with CI/CD

Detectify

Dynamic Application Security Testing

Detectify provides external attack surface management powered by a crowdsourced network of ethical hackers who discover vulnerabilities in web applications.

Kryptowire

Dynamic Application Security Testing

Quokka's mobile app security platform formerly Kryptowire analyzing iOS and Android apps for vulnerabilities.

Astra Security

Dynamic Application Security Testing

Pentest and WAF platform delivering continuous security testing for web apps, APIs, mobile apps, and cloud infrastructure.

Fluid Attacks

Dynamic Application Security Testing

Continuous hacking service combining AI and expert pen testers to find vulnerabilities across application stacks.

AppTrana

Dynamic Application Security Testing

Managed web application and API protection service (from Indusface) combining DAST, WAAP, and 24/7 managed security rules.

Checkmarx

Supply Chain Planning

Checkmarx provides a comprehensive application security platform including software composition analysis, SAST, DAST, and API security for enterprise DevSecOps programs.

Escape

Dynamic Application Security Testing

API security platform finding and fixing vulnerabilities in APIs with business logic testing and runtime monitoring.

Invicti

Dynamic Application Security Testing

Invicti provides automated web application security testing that combines DAST and IAST approaches for comprehensive vulnerability detection with proof-based scanning.

OWASP ZAP

Dynamic Application Security Testing

Free, open-source web application security scanner maintained by OWASP for finding vulnerabilities in web applications during development and testing.

ImmuniWeb

Dynamic Application Security Testing

AI-driven ASM and application security testing

Caido

Dynamic Application Security Testing

Lightweight web security auditing toolkit alternative to Burp Suite with modern interface and speed.

Cobalt

AI Software Testing

Cobalt provides Pentest as a Service combining a vetted community of pentesters with a SaaS platform for on-demand security testing.

Akto

Dynamic Application Security Testing

Open-source API security platform for testing, finding, and protecting against API vulnerabilities.