17.9
Aikido CSPM gives teams a consolidated view of cloud misconfigurations, exposures, overly permissive IAM, and compliance gaps.
Free planWebAPILinux
Alternatives to Veracode Static Analysis
27.4
OX Security is an enterprise application security platform spanning code through runtime, with real-time protection in AI editors and IDEs.
Free planWebAPIExtension
37.1
JFrog Artifactory manages binaries, packages, containers, releases, AI/ML models, and agent assets as a shared system of record.
WebAPILinux
- 4
Endor Labs
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Free planWebAPILinuxmacOS6.8Free plan - 5
OWASP DefectDojo
OWASP DefectDojo collects security scanner findings, removes duplicates, helps prioritize risk, and supports remediation.
Free planWebAPILinuxSelf-hosted6.8$100 usage-based - 6
Contrast Security Platform
Free planWebAPILinux6.6From $750 a month - 7
Eureka
Eureka is a cloud AppSec workflow platform that links security findings with prioritization, remediation, decisions, and evidence.
WebAPILinux6.3From $125 a month - 8
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk.
WebAPISelf-hosted6.3$500 one-time - 9
Qwiet AI
Qwiet AI is part of the Harness platform and scans source code and dependencies for application security vulnerabilities.
WebAPIExtensionLinux6.3 - 10
Mend.io
Mend.io is a paid application security platform for code, AI components, and the attack surface connecting them.
Web6.1From $250 a year - 11
Turing Security Center
Turing Security Center is a web platform for managing security risk, vulnerabilities, and compliance.
Web6.0From R$2 a month - 12
Legit Security Secret Scanning
Legit Security Secret Scanning is a paid security platform available as SaaS, private cloud, on-premise, self-hosted, web, and API deployments.
WebAPISelf-hosted5.9 - 13
Black Duck Polaris
Black Duck Polaris is a cloud-native application security testing platform that brings security analysis together across the software development life cycle.
WebAPI5.8 - 14
Teravul
Teravul is an enterprise vulnerability management platform for security teams and defenders.
WebAPISelf-hosted5.8 - 15
HCL AppScan Source
HCL AppScan Source is a static application security testing tool that analyzes source code for vulnerabilities early in the development lifecycle.
LinuxSelf-hostedWindows5.7 - 16
Cycode SCA
Cycode SCA scans open-source dependencies for vulnerabilities and license violations, helping security and development teams decide what to address before production.
WebAPILinuxSelf-hosted5.5 - 17
PMAP
PMAP is an enterprise vulnerability management platform for coordinating scans and tracking security findings through remediation.
API5.4 - 18
Checkmarx One
Checkmarx One is a web-based application security platform focused on source code analysis.
Web4.9 - 19
OpenText Fortify Software Security Platform
OpenText Fortify Software Security Platform is a web-based application security product for hybrid deployment environments.
Web4.9 - 204.9
- 214.9
- 224.8
- 234.7
- 244.7