18.0
OWASP DefectDojo collects security scanner findings, removes duplicates, helps prioritize risk, and supports remediation.
Free planOpen sourceWebAPILinux
Alternatives to Black Duck Polaris
27.9
Aikido CSPM gives teams a consolidated view of cloud misconfigurations, exposures, overly permissive IAM, and compliance gaps.
Free planWebAPILinux
37.4
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Free planWebAPIExtension
- 4
OX Security
OX Security is an enterprise application security platform spanning code through runtime, with real-time protection in AI editors and IDEs.
Free planWebAPIExtensionLinux7.4Free plan - 5
JFrog Artifactory
JFrog Artifactory manages binaries, packages, containers, releases, AI/ML models, and agent assets as a shared system of record.
WebAPILinuxSelf-hosted7.1From $50 a month - 6
Turing Security Center
Turing Security Center is a web platform for managing security risk, vulnerabilities, and compliance.
Web6.8From R$2,000 a month - 7
Contrast Security Platform
Free planWebAPILinux6.6From $750 a month - 8
Semgrep AppSec Platform
Free planWeb6.4From $15 a month - 9
Eureka
Eureka is a cloud AppSec workflow platform that links security findings with prioritization, remediation, decisions, and evidence.
WebAPILinux6.3From $125 a month - 10
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500 one-time - 11
Qwiet AI
Qwiet AI is part of the Harness platform and scans source code and dependencies for application security vulnerabilities.
WebAPIExtensionLinux6.3 - 12
Mend.io
Mend.io is a paid application security platform for code, AI components, and the attack surface connecting them.
Web6.1From $250 a year - 13
Legit Security Secret Scanning
Legit Security Secret Scanning is a paid security platform available as SaaS, private cloud, on-premise, self-hosted, web, and API deployments.
WebAPISelf-hosted5.9 - 14
Teravul
Teravul is an enterprise vulnerability management platform for security teams and defenders.
WebAPISelf-hosted5.8 - 15
HCL AppScan Source
HCL AppScan Source is a static application security testing tool that analyzes source code for vulnerabilities early in the development lifecycle.
LinuxSelf-hostedWindows5.7 - 16
Cycode SCA
Cycode SCA scans open-source dependencies for vulnerabilities and license violations, helping security and development teams decide what to address before production.
WebAPILinuxSelf-hosted5.5 - 17
PMAP
PMAP is an enterprise vulnerability management platform for coordinating scans and tracking security findings through remediation.
API5.4 - 185.0
- 19
Checkmarx One
Checkmarx One is a web-based application security platform focused on source code analysis.
Web4.9 - 20
OpenText Fortify Software Security Platform
OpenText Fortify Software Security Platform is a web-based application security product for hybrid deployment environments.
Web4.9 - 214.9
- 224.8
- 234.7
- 244.7