Static Application Security Testing

Aikido Security

OT Security

Aikido Security brings together code, cloud, dependency, and runtime security workflows in a more approachable platform for modern engineering teams.

Clayton Dev

AI Code Review

Static analysis and code quality platform for Salesforce Apex code with security and performance checks.

Certora

Code Security Scanning

Smart contract formal verification platform that proves correctness of DeFi protocols and critical blockchain code.

GuardRails AppSec

Code Security Scanning

Application security platform scanning for vulnerabilities in code.

Acunetix

Static Application Security Testing

Invicti-owned web vulnerability scanner providing automated DAST to detect and report on SQL injection, XSS, and thousands of other web vulnerabilities.

Open source static analysis security vulnerability scanner specifically for Ruby on Rails applications.

Qualys

Dynamic Application Security Testing

Qualys provides cloud-based vulnerability management and web application scanning that helps organizations identify and prioritize security risks across their attack surface.

Bishop Fox

Code Security Scanning

Bishop Fox provides continuous attack surface management and offensive security testing through its Cosmos platform and expert consultants.

WhiteSource

Static Application Security Testing

Now called Mend, providing open source security and license compliance management.

Mend.io

Dynamic Application Security Testing

Mend.io is a software composition analysis and application security platform that helps development teams identify and remediate vulnerabilities in open-source dependencies.

AuditBase

Static Application Security Testing

Audiological database and practice management system for hearing clinics with Noah-compatible audiometry data management.

Autonomous security platform for DevSecOps teams with remediation

Coverity

Code Quality and Linting

Enterprise static analysis tool by Synopsys that identifies critical defects and security vulnerabilities in code.

Cloudflare

Customer Lifetime Value Analytics

Cloudflare is a global cloud platform that provides CDN, DDoS protection, DNS, SSL/TLS encryption, and a developer platform. It secures and accelerates websites and applications with a netwo...

Docker

Configuration Management Tools

Docker is a platform for developing, shipping, and running applications in containers. It provides tools for building container images, managing registries, and orchestrating containerized w...

Zeropath

AI Security Platforms

AI security platform for finding and fixing code vulnerabilities

DeepCode

AI Code Review

AI code review tool acquired by Snyk providing automated bug detection and fixes.

NowSecure

Dynamic Application Security Testing

Mobile application security platform with continuous automated testing and SDK integration.

SOOS

Dynamic Application Security Testing

SOOS provides affordable software composition analysis and DAST solutions that help development teams identify vulnerabilities and license issues in open-source dependencies.

Checkov

Code Security Scanning

Open source static analysis tool for IaC from Bridgecrew scanning Terraform, CloudFormation, and Kubernetes for misconfigurations.

StackRot

Code Security Scanning

Application security platform providing code risk prioritization across SAST and SCA findings.

TrustInSoft

Static Application Security Testing

Formal verification for embedded C/C++ security

Kiuwan

Code Quality and Linting

Idera-owned code security and analytics platform with SAST, SCA, and quality across 30+ languages.

Bearer

Code Snippet Management

Bearer is an open-source static analysis tool that scans code for security risks and data privacy violations in application code.

Qwiet AI

AI Security Platforms

AI-powered code analysis platform providing deep reachability analysis to identify real exploitable vulnerabilities in application code.

Arnica

Static Application Security Testing

Behavior-based application security posture management platform for developer-first security.

Pixee

AI Security Platforms

Automated code security platform offering AI-powered fixes for SAST and SCA findings in pull requests.

Checkmarx

Supply Chain Planning

Checkmarx provides a comprehensive application security platform including software composition analysis, SAST, DAST, and API security for enterprise DevSecOps programs.

Cyfrin

Code Security Scanning

Smart contract security platform offering audits, developer education, and the Aderyn open-source analyzer.

Pyre

Static Application Security Testing

Meta's performant type checker for Python with Pysa security analysis and incremental checking.

Invicti

Dynamic Application Security Testing

Invicti provides automated web application security testing that combines DAST and IAST approaches for comprehensive vulnerability detection with proof-based scanning.

Cobalt

AI Software Testing

Cobalt provides Pentest as a Service combining a vetted community of pentesters with a SaaS platform for on-demand security testing.

ImmuniWeb

Dynamic Application Security Testing

AI-driven ASM and application security testing