18.0
OWASP DefectDojo collects security scanner findings, removes duplicates, helps prioritize risk, and supports remediation.
Free planOpen sourceWebAPILinux
Alternatives to apPosture DAST
27.8
Strobes ASPM brings application-security findings together in a risk-prioritized view for developers and security teams.
Free planWebAPILinux
37.4
OX Security is an enterprise application security platform spanning code through runtime, with real-time protection in AI editors and IDEs.
Free planWebAPIExtension
- 4
Conviso Platform
Conviso Platform brings application security information into one place to help organizations manage AppSec programs.
Free planWebAPI7.3From $19 a month - 5
Phoenix Security
Phoenix Security is a cloud platform for security governance that links code findings with runtime exposure, maps ownership, and helps teams prioritize risk.
Free planWebAPI7.2From £1,495 a month - 6
Arnica Secrets Security
Arnica Secrets Security detects and validates hardcoded secrets in code repositories, then can automatically mitigate newly pushed validated secrets…
Free planWebAPISelf-hosted6.6From $300 a year - 7
SecurStack
SecurStack is an application security platform for finding, prioritizing and addressing software risk before production.
Free planWebExtension6.6From $5 a month - 8
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500 one-time - 9
Foxnode ASPM
Foxnode ASPM is an open-source platform for managing application-security vulnerabilities across a software portfolio.
WebAPILinuxSelf-hosted5.7 - 10
Seemplicity Application Security
Seemplicity Application Security organizes application security findings into prioritized, fix-ready work.
5.4 - 11
Veracode Risk Manager
Veracode Risk Manager is an application security posture management platform that brings findings together across development, cloud, infrastructure, and security tools.
WebAPI5.4 - 12
Legit Security ASPM
Legit Security ASPM helps enterprise security and AppSec teams manage application security posture and software supply chain risk.
WebAPI5.2 - 13
Checkmarx One
Checkmarx One is a web-based application security platform focused on source code analysis.
Web4.9 - 14
Cycode ASPM
Web4.8 - 15
Ivanti Neurons for ASPM
Ivanti Neurons for ASPM is cloud-deployed, web-based application security posture management software.
Web4.7 - 16
OpenText Application Security Posture Management
OpenText Application Security Posture Management is a web-based product for organizing application security risk.
Web4.7