Strobes ASPM brings application-security findings together in a risk-prioritized view for developers and security teams.
Alternatives to Harness Security Testing Orchestration
OX Security is an enterprise application security platform spanning code through runtime, with real-time protection in AI editors and IDEs.
Conviso Platform brings application security information into one place to help organizations manage AppSec programs.
- 4

OWASP DefectDojo
OWASP DefectDojo collects security scanner findings, removes duplicates, helps prioritize risk, and supports remediation.
Free planWebAPILinuxSelf-hosted6.8From $100 a month - 5

ArcherySec
ArcherySec is a free, open-source vulnerability assessment and management tool for developers, penetration testers and DevOps teams.
Free planWebAPILinuxmacOS6.7Free plan - 6

apPosture API Security
apPosture API Security inventories API endpoints and helps teams prioritize security risks.
WebAPILinuxSelf-hosted6.5From $2.92 a month - 7

ScanDog
ScanDog is cloud software for application security posture management, available through a web interface and API.
Free planWebAPI6.5From €19 a month - 8

Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500, paid once - 9
Wabbi Continuous Security Platform
Wabbi Continuous Security Platform helps enterprises bring application security into the software development lifecycle.
WebAPI6.2From $8 a month - 10
Cyber Chief
Cyber Chief is a cloud native application protection platform that combines security capabilities for applications, APIs, cloud infrastructure, and containers.
WebSelf-hosted6.1From $150 a month - 11

Fluid Attacks
Fluid Attacks is an application security platform for finding, reporting, managing and remediating vulnerabilities across the software development lifecycle.
WebAPILinuxmacOS6.1 - 12

Mend.io
Mend.io is a paid application security platform for code, AI components, and the attack surface connecting them.
Web6.0From $20.83 a month - 13

Legit Security Secret Scanning
Legit Security Secret Scanning is a paid security platform available as SaaS, private cloud, on-premise, self-hosted, web, and API deployments.
WebAPISelf-hosted5.9 - 14
OpenText Core Performance Engineering
OpenText Core Performance Engineering is a cloud-based solution for planning, running, and scaling performance tests.
WebSelf-hosted5.9 - 15

Safeguard DAST
Safeguard DAST is web-based security software with authenticated scanning, API testing, and CI/CD integration.
WebSelf-hosted5.9 - 16

Vulnetix Resolve
Vulnetix Resolve is a cloud Application Security Posture Management platform for teams that need to bring software security findings together and prioritize them.
WebLinuxmacOSWindows5.8 - 17

CyanoRisk API Security Posture Management
CyanoRisk API Security Posture Management discovers, inventories, classifies, maps, and continuously assesses REST, GraphQL, gRPC, and SOAP APIs.
APISelf-hosted5.7 - 18
PointGuard AI
PointGuard AI is a web-based application security platform for bringing findings together and managing vulnerabilities across the software lifecycle.
Web5.7 - 19
Seemplicity Application Security
Seemplicity Application Security organizes application security findings into prioritized, fix-ready work.
5.4 - 20
Veracode Risk Manager
Veracode Risk Manager is an application security posture management platform that brings findings together across development, cloud, infrastructure, and security tools.
WebAPI5.4 - 21

ClearAnts ASOC
ClearAnts ASOC is cloud software that brings existing application security tools into one interface to help developers manage vulnerabilities and remediation.
5.3 - 22

Cycode ASPM
Web4.8

