18.0
OWASP DefectDojo collects security scanner findings, removes duplicates, helps prioritize risk, and supports remediation.
Free planOpen sourceWebAPILinux
Alternatives to ArcherySec
ArcherySec brings web and network scan results together for vulnerability management. Its open-source, self-hosted tool supports authenticated web scans, Selenium-based application scans, severity prioritization, false-positive tracking, remediation workflows, and ticketing sync. Teams can automate periodic or concurrent scans, connect its CLI to CI/CD policy gates, and use REST APIs. It works across Linux, macOS, Windows, web, and API environments, with documented…
27.8
Strobes ASPM brings application-security findings together in a risk-prioritized view for developers and security teams.
Free planWebAPILinux
37.4
OX Security is an enterprise application security platform spanning code through runtime, with real-time protection in AI editors and IDEs.
Free planWebAPIExtension
- 4
Conviso Platform
Conviso Platform brings application security information into one place to help organizations manage AppSec programs.
Free planWebAPI7.3From $19 a month - 5
ScanDog
ScanDog is cloud software for application security posture management, available through a web interface and API.
Free planWebAPI6.5From €19 a month - 6
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500 one-time - 7
Wabbi Continuous Security Platform
Wabbi Continuous Security Platform helps enterprises bring application security into the software development lifecycle.
WebAPI6.2From $8 a month - 8
Cyber Chief
Cyber Chief is a cloud native application protection platform that combines security capabilities for applications, APIs, cloud infrastructure, and containers.
WebSelf-hosted6.1From $1,800 a year - 9
Fluid Attacks
Fluid Attacks is an application security platform for finding, reporting, managing and remediating vulnerabilities across the software development lifecycle.
WebAPILinuxmacOS6.1 - 10
Mend.io
Mend.io is a paid application security platform for code, AI components, and the attack surface connecting them.
Web6.1From $250 a year - 11
Legit Security Secret Scanning
Legit Security Secret Scanning is a paid security platform available as SaaS, private cloud, on-premise, self-hosted, web, and API deployments.
WebAPISelf-hosted5.9 - 12
CyanoRisk API Security Posture Management
CyanoRisk API Security Posture Management discovers, inventories, classifies, maps, and continuously assesses REST, GraphQL, gRPC, and SOAP APIs.
APISelf-hosted5.8 - 13
Vulnetix Resolve
Vulnetix Resolve is a cloud Application Security Posture Management platform for teams that need to bring software security findings together and prioritize them.
WebLinuxmacOSWindows5.8 - 14
PointGuard AI
PointGuard AI is a web-based application security platform for bringing findings together and managing vulnerabilities across the software lifecycle.
Web5.7 - 15
Harness Security Testing Orchestration
Harness Security Testing Orchestration is a cloud-based web service for coordinating application security testing.
Free planWeb5.6Free plan - 16
Seemplicity Application Security
Seemplicity Application Security organizes application security findings into prioritized, fix-ready work.
5.4 - 17
Veracode Risk Manager
Veracode Risk Manager is an application security posture management platform that brings findings together across development, cloud, infrastructure, and security tools.
WebAPI5.4 - 18
ClearAnts ASOC
ClearAnts ASOC is cloud software that brings existing application security tools into one interface to help developers manage vulnerabilities and remediation.
5.3 - 195.0
- 204.8
- 21
Cycode ASPM
Web4.8 - 224.7