Strobes ASPM brings application-security findings together in a risk-prioritized view for developers and security teams.
Alternatives to Ivanti Neurons for ASPM
OX Security is an enterprise application security platform spanning code through runtime, with real-time protection in AI editors and IDEs.
Conviso Platform brings application security information into one place to help organizations manage AppSec programs.
- 4

OWASP DefectDojo
OWASP DefectDojo collects security scanner findings, removes duplicates, helps prioritize risk, and supports remediation.
Free planWebAPILinuxSelf-hosted6.8From $100 a month - 5

Arnica Secrets Security
Arnica Secrets Security detects and validates hardcoded secrets in code repositories, then can automatically mitigate newly pushed validated secrets…
Free planWebAPISelf-hosted6.6From $25 a month - 6

Phoenix Security
Phoenix Security is a cloud platform for security governance that links code findings with runtime exposure, maps ownership, and helps teams prioritize risk.
Free planWebAPI6.6From £1,495 a month - 7

SecurStack
SecurStack is an application security platform for finding, prioritizing and addressing software risk before production.
Free planWebExtension6.6From $5 a month - 8

apPosture API Security
apPosture API Security inventories API endpoints and helps teams prioritize security risks.
WebAPILinuxSelf-hosted6.5From $2.92 a month - 9

Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500, paid once - 10
Checkmarx API Security
Checkmarx API Security discovers APIs in application code and documentation, including undocumented shadow APIs and abandoned zombie APIs.
WebAPISelf-hosted5.9 - 11
Foxnode ASPM
Foxnode ASPM is an open-source platform for managing application-security vulnerabilities across a software portfolio.
WebAPILinuxSelf-hosted5.7 - 12
Seemplicity Application Security
Seemplicity Application Security organizes application security findings into prioritized, fix-ready work.
5.4 - 13
Veracode Risk Manager
Veracode Risk Manager is an application security posture management platform that brings findings together across development, cloud, infrastructure, and security tools.
WebAPI5.4 - 14

Legit Security ASPM
Legit Security ASPM helps enterprise security and AppSec teams manage application security posture and software supply chain risk.
WebAPI5.2 - 15

Checkmarx One
Checkmarx One is a web-based application security platform focused on source code analysis.
Web4.8 - 16

Cycode ASPM
Web4.8 - 17
OpenText Application Security Posture Management
OpenText Application Security Posture Management is a web-based product for organizing application security risk.
Web4.7

