17.9
Aikido CSPM gives teams a consolidated view of cloud misconfigurations, exposures, overly permissive IAM, and compliance gaps.
Free planWebAPILinux
Alternatives to OWASP DefectDojo
OWASP DefectDojo brings security scanner findings into a shared workflow. It aggregates results from 500+ tools across SAST, DAST, SCA, cloud, and container categories, deduplicates findings, prioritizes risk, and supports remediation. Community Edition accepts integrations by file import or API push and includes bi-directional Jira. Pro adds scheduled-pull connectors, EPSS and CISA KEV enrichment, triage automation, broader ticketing, governance controls, and SLA-backed…
27.4
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Free planWebAPIExtension
37.4
OX Security is an enterprise application security platform spanning code through runtime, with real-time protection in AI editors and IDEs.
Free planWebAPIExtension
- 4
JFrog Artifactory
JFrog Artifactory manages binaries, packages, containers, releases, AI/ML models, and agent assets as a shared system of record.
WebAPILinuxSelf-hosted7.1From $50 a month - 5
Turing Security Center
Turing Security Center is a web platform for managing security risk, vulnerabilities, and compliance.
Web6.8From R$2,000 a month - 6
Contrast Security Platform
Free planWebAPILinux6.6From $750 a month - 7
Semgrep AppSec Platform
Free planWeb6.4From $15 a month - 8
Eureka
Eureka is a cloud AppSec workflow platform that links security findings with prioritization, remediation, decisions, and evidence.
WebAPILinux6.3From $125 a month - 9
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500 one-time - 10
Qwiet AI
Qwiet AI is part of the Harness platform and scans source code and dependencies for application security vulnerabilities.
WebAPIExtensionLinux6.3 - 11
Mend.io
Mend.io is a paid application security platform for code, AI components, and the attack surface connecting them.
Web6.1From $250 a year - 12
Legit Security Secret Scanning
Legit Security Secret Scanning is a paid security platform available as SaaS, private cloud, on-premise, self-hosted, web, and API deployments.
WebAPISelf-hosted5.9 - 13
Black Duck Polaris
Black Duck Polaris is a cloud-native application security testing platform that brings security analysis together across the software development life cycle.
WebAPI5.8 - 14
Teravul
Teravul is an enterprise vulnerability management platform for security teams and defenders.
WebAPISelf-hosted5.8 - 15
HCL AppScan Source
HCL AppScan Source is a static application security testing tool that analyzes source code for vulnerabilities early in the development lifecycle.
LinuxSelf-hostedWindows5.7 - 16
Cycode SCA
Cycode SCA scans open-source dependencies for vulnerabilities and license violations, helping security and development teams decide what to address before production.
WebAPILinuxSelf-hosted5.5 - 17
PMAP
PMAP is an enterprise vulnerability management platform for coordinating scans and tracking security findings through remediation.
API5.4 - 185.0
- 19
Checkmarx One
Checkmarx One is a web-based application security platform focused on source code analysis.
Web4.9 - 20
OpenText Fortify Software Security Platform
OpenText Fortify Software Security Platform is a web-based application security product for hybrid deployment environments.
Web4.9 - 214.9
- 224.8
- 234.7
- 244.7