23 alternatives · from static application security testing sast

Alternatives to Horusec

Horusec is a free, self-hosted security scanner for development teams. Its CLI analyzes source in 18 languages with 20 security tools, checks project files and Git history for leaked keys, and supports configurable local and CI/CD workflows. A Visual Studio Code extension brings analysis into the editor. Horusec-Web adds vulnerability dashboards, false-positive control, authorization tokens and vulnerability updates. Software composition analysis and fix guidance are also…

18.3

Semgrep Code

Semgrep Code is a static application security testing product that scans source code for vulnerabilities and helps developers fix them.

Free planOpen sourceWebAPIExtension

From $15 a month

Visit Details

28.2

MobSF

MobSF is a mobile application security research platform for penetration testing, malware analysis and privacy analysis.

Free planOpen sourceWebAPILinux

From $2,999.99 a year

Visit Details

37.5

GitHub CodeQL

GitHub CodeQL is a language and toolchain for analyzing code as data.

Free planWebExtensionLinux

From $30 a month

Visit Details

4
gosec
gosec is a free security checker that scans Go source code for potential problems.
Free planOpen sourceAPILinuxmacOSSelf-hosted
7.2Free plan
Visit
5
Xygeni
Xygeni is an application security platform for risks across the software supply chain.
Free planWebAPIExtensionLinux
6.6Free plan
Visit
6
NodeJsScan
NodeJsScan is a free, open-source static application security testing scanner for Node.js application source code.
Free planWebAPILinuxmacOS
6.4Free plan
Visit
7
Flawfinder
Flawfinder is a free tool for finding possible security weaknesses in C and C++ source code.
Free planLinuxmacOSSelf-hostedWindows
6.3Free plan
Visit
8
Mend SAST
Mend SAST is a source-code security tool for finding vulnerabilities in code written by people or AI assistants and managing them in developer workflows.
WebLinuxmacOSSelf-hosted
6.3From $1,000 a year
Visit
9
Joern
Joern analyzes source code, bytecode, and binary code to support vulnerability discovery and static program analysis research.
APILinuxmacOSSelf-hosted
6.2
Visit
10
Bearer
Bearer is a free command-line static application security testing tool for scanning source code and tracing data flows for security and privacy risks.
Free planLinuxmacOS
6.0Free plan
Visit
11
Brakeman
Brakeman is a static analysis scanner for Ruby on Rails application code.
Free planLinuxSelf-hosted
6.0Free plan
Visit
12
CodeSonar
CodeSonar is a static application security testing tool for finding security and quality defects in source code and compiled binaries.
WebLinuxSelf-hostedWindows
6.0
Visit
13
GitHub Secret Scanning
GitHub Secret Scanning detects exposed credentials so they can be addressed before they are exploited.
WebAPISelf-hosted
5.9From $19 a month
Visit
14
OpenText Fortify SAST
WebLinuxmacOSWindows
5.3
Visit
15
Klocwork
WebLinuxWindows
5.2
Visit
16
Snyk Code
Web
5.0
Visit
17
Veracode Static Analysis
Web
5.0
Visit
18
Checkmarx SAST
WebLinuxWindows
4.9
Visit
19
Find Security Bugs
LinuxmacOSWindows
4.7
Visit
20
SecuSAST
LinuxmacOSWindows
4.7
Visit
21
CodeThreat
Web
4.6
Visit
22
Bandit
4.3
Visit
23
HCL AppScan CodeSweep
4.3
Visit

Back to Horusec