18.0
OWASP DefectDojo collects security scanner findings, removes duplicates, helps prioritize risk, and supports remediation.
Free planOpen sourceWebAPILinux
Alternatives to Conviso Platform
Conviso Platform brings application security work into one place: it organizes assets, consolidates vulnerabilities, and connects architectural threats with results from tests and scans. Its testing coverage includes SAST, DAST, IAST, SCA, and container testing, while remediation workflows, finding correlation, ownership mapping, risk prioritization, and SBOM management support AppSec operations. Developers plan users also get an AI agent for diagnostics and fixes within the…
27.8
Strobes ASPM brings application-security findings together in a risk-prioritized view for developers and security teams.
Free planWebAPILinux
37.4
OX Security is an enterprise application security platform spanning code through runtime, with real-time protection in AI editors and IDEs.
Free planWebAPIExtension
- 4
ArcherySec
ArcherySec is a free, open-source vulnerability assessment and management tool for developers, penetration testers and DevOps teams.
Free planWebAPILinuxmacOS6.7Free plan - 5
ScanDog
ScanDog is cloud software for application security posture management, available through a web interface and API.
Free planWebAPI6.5From €19 a month - 6
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500 one-time - 7
Wabbi Continuous Security Platform
Wabbi Continuous Security Platform helps enterprises bring application security into the software development lifecycle.
WebAPI6.2From $8 a month - 8
Cyber Chief
Cyber Chief is a cloud native application protection platform that combines security capabilities for applications, APIs, cloud infrastructure, and containers.
WebSelf-hosted6.1From $1,800 a year - 9
Fluid Attacks
Fluid Attacks is an application security platform for finding, reporting, managing and remediating vulnerabilities across the software development lifecycle.
WebAPILinuxmacOS6.1 - 10
Mend.io
Mend.io is a paid application security platform for code, AI components, and the attack surface connecting them.
Web6.1From $250 a year - 11
Legit Security Secret Scanning
Legit Security Secret Scanning is a paid security platform available as SaaS, private cloud, on-premise, self-hosted, web, and API deployments.
WebAPISelf-hosted5.9 - 12
CyanoRisk API Security Posture Management
CyanoRisk API Security Posture Management discovers, inventories, classifies, maps, and continuously assesses REST, GraphQL, gRPC, and SOAP APIs.
APISelf-hosted5.8 - 13
Vulnetix Resolve
Vulnetix Resolve is a cloud Application Security Posture Management platform for teams that need to bring software security findings together and prioritize them.
WebLinuxmacOSWindows5.8 - 14
PointGuard AI
PointGuard AI is a web-based application security platform for bringing findings together and managing vulnerabilities across the software lifecycle.
Web5.7 - 15
Harness Security Testing Orchestration
Harness Security Testing Orchestration is a cloud-based web service for coordinating application security testing.
Free planWeb5.6Free plan - 16
Seemplicity Application Security
Seemplicity Application Security organizes application security findings into prioritized, fix-ready work.
5.4 - 17
Veracode Risk Manager
Veracode Risk Manager is an application security posture management platform that brings findings together across development, cloud, infrastructure, and security tools.
WebAPI5.4 - 18
ClearAnts ASOC
ClearAnts ASOC is cloud software that brings existing application security tools into one interface to help developers manage vulnerabilities and remediation.
5.3 - 195.0
- 204.8
- 21
Cycode ASPM
Web4.8 - 224.7