18.0
OWASP DefectDojo collects security scanner findings, removes duplicates, helps prioritize risk, and supports remediation.
Free planOpen sourceWebAPILinux
Alternatives to ScanDog
ScanDog brings application security findings together across SAST, SCA, DAST, IaC, secrets, containers, and SBOM management. Its recommendations use exploitability, reachability, EPSS, KEV, and business impact to prioritize issues. AI remediation offers minimal diffs and safe refactors intended to preserve behavior and tests; ScanDog says AI receives only narrow snippets around an issue, not the full codebase. It connects with code hosts, ticketing and chat tools, and…
27.8
Strobes ASPM brings application-security findings together in a risk-prioritized view for developers and security teams.
Free planWebAPILinux
37.4
OX Security is an enterprise application security platform spanning code through runtime, with real-time protection in AI editors and IDEs.
Free planWebAPIExtension
- 4
Conviso Platform
Conviso Platform brings application security information into one place to help organizations manage AppSec programs.
Free planWebAPI7.3From $19 a month - 5
ArcherySec
ArcherySec is a free, open-source vulnerability assessment and management tool for developers, penetration testers and DevOps teams.
Free planWebAPILinuxmacOS6.7Free plan - 6
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500 one-time - 7
Wabbi Continuous Security Platform
Wabbi Continuous Security Platform helps enterprises bring application security into the software development lifecycle.
WebAPI6.2From $8 a month - 8
Cyber Chief
Cyber Chief is a cloud native application protection platform that combines security capabilities for applications, APIs, cloud infrastructure, and containers.
WebSelf-hosted6.1From $1,800 a year - 9
Fluid Attacks
Fluid Attacks is an application security platform for finding, reporting, managing and remediating vulnerabilities across the software development lifecycle.
WebAPILinuxmacOS6.1 - 10
Mend.io
Mend.io is a paid application security platform for code, AI components, and the attack surface connecting them.
Web6.1From $250 a year - 11
Legit Security Secret Scanning
Legit Security Secret Scanning is a paid security platform available as SaaS, private cloud, on-premise, self-hosted, web, and API deployments.
WebAPISelf-hosted5.9 - 12
CyanoRisk API Security Posture Management
CyanoRisk API Security Posture Management discovers, inventories, classifies, maps, and continuously assesses REST, GraphQL, gRPC, and SOAP APIs.
APISelf-hosted5.8 - 13
Vulnetix Resolve
Vulnetix Resolve is a cloud Application Security Posture Management platform for teams that need to bring software security findings together and prioritize them.
WebLinuxmacOSWindows5.8 - 14
PointGuard AI
PointGuard AI is a web-based application security platform for bringing findings together and managing vulnerabilities across the software lifecycle.
Web5.7 - 15
Harness Security Testing Orchestration
Harness Security Testing Orchestration is a cloud-based web service for coordinating application security testing.
Free planWeb5.6Free plan - 16
Seemplicity Application Security
Seemplicity Application Security organizes application security findings into prioritized, fix-ready work.
5.4 - 17
Veracode Risk Manager
Veracode Risk Manager is an application security posture management platform that brings findings together across development, cloud, infrastructure, and security tools.
WebAPI5.4 - 18
ClearAnts ASOC
ClearAnts ASOC is cloud software that brings existing application security tools into one interface to help developers manage vulnerabilities and remediation.
5.3 - 195.0
- 204.8
- 21
Cycode ASPM
Web4.8 - 224.7