Static Analysis

Code Sight

Developer Tools

Synopsys' IDE plugin for developers delivering security and quality feedback during development.

Veracode

Code Security Scanning

Application security platform providing SAST, DAST, SCA, and manual penetration testing in a single cloud-based solution.

Data Theorem

Mobile Application Security

API, web, mobile, and cloud application security testing platform with automated runtime protection.

Semgrep

CI/CD

Semgrep is a fast, open-source static analysis tool for finding bugs and security vulnerabilities in code, with support for 30+ languages and integration into CI/CD pipelines for automated s...

Coverity

Code Quality and Linting

Enterprise static analysis tool by Synopsys that identifies critical defects and security vulnerabilities in code.

SonarCloud

Code Security Scanning

Cloud-based code analysis service detecting bugs, vulnerabilities, and code smells in projects hosted on GitHub and other platforms.

SonarQube

Quality Inspection Software

SonarQube is an open-source platform for continuous code quality inspection with static analysis for bugs, vulnerabilities, and code smells.

Fortify

Code Security Scanning

OpenText application security tool providing static and dynamic analysis, SCA, and runtime protection for enterprise software.