Best Static Application Security Testing Software in 2026
Updated
In short: Skylos is ranked #1 of 24 as of 4 October 2026, ahead of Horusec and Puma Scan. The best-ranked option with a free plan is Horusec. The lowest first paid tier on this page is Puma Scan at $24.92/mo.
Finding potential security issues in code is the focus of static application security testing software. Compare analysis targets and supported languages, then look at IDE and CI/CD support to see how each entry may fit your development workflow. Fix guidance and SCA inclusion add further distinctions, as do deployment options, free-plan availability, and paid-from pricing. Skylos and Horusec open the ranking, with Puma Scan and Semgrep Code also near the top; Snyk Open Source follows. Consider the languages and targets you need to cover, along with the integrations and guidance that suit your process.
24 static application security testing software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
#1 Skylos Top pick · 7.4 Free plan · Free
#2 Horusec Runner-up · 7.3 Free plan · Free
#3 Puma Scan Also great · 7.3 Free plan · $24.92/mo- Free planFree trial apiextensionLinuxmacOSself-hostedWebWindows
- Free plan
- Yes
- Analysis target
- source
- Supported languages
- 11 languages
- IDE support
- Yes
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms - Free plan apiextensionLinuxmacOSself-hostedWebWindows
- Free plan
- Yes
- Analysis target
- source
- IDE support
- Yes
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms - Free planFree trial LinuxmacOSself-hostedWindows
- Free plan
- Yes
- Analysis target
- source
- Supported languages
- 1 languages
- IDE support
- Yes
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms$24.92/mofirst paid tier About Puma ScanVisit site - Free plan apiextensionLinuxmacOSself-hostedWebWindows
- Free plan
- Yes
- IDE support
- Yes
RecognisedDocumentedFree planPlatforms$30/mofirst paid tier About Semgrep CodeVisit site - Free plan apiLinuxmacOSWebWindows
- Free plan
- Yes
- IDE support
- Yes
RecognisedDocumentedFree planPlatforms$25/mofirst paid tier About Snyk Open SourceVisit site - Free plan LinuxmacOSself-hostedWindows
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms - Free plan LinuxmacOSWindows
- Free plan
- Yes
- Analysis target
- source
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms - Free trial apiLinuxmacOSWebWindows
- IDE support
- Yes
RecognisedDocumentedFree planPlatforms - LinuxmacOSself-hostedWebWindows
- Analysis target
- source
- IDE support
- Yes
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms - LinuxmacOSself-hostedWebWindows
- Analysis target
- source
- IDE support
- Yes
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms$83.33/mofirst paid tier About Mend SASTVisit site - Free trial LinuxmacOSWindows
- Free plan
- No
- IDE support
- Yes
RecognisedDocumentedFree planPlatforms - apiself-hostedWeb
- Analysis target
- source
- IDE support
- Yes
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms - WebWindowsLinux
- IDE support
- Yes
RecognisedDocumentedFree planPlatforms - LinuxWebWindows
- IDE support
- Yes
RecognisedDocumentedFree planPlatforms -
- Free plan
- Yes
- Analysis target
- source
- IDE support
- Yes
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms - macOSLinux
- Analysis target
- source
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms -
- Analysis target
- source
- IDE support
- No
- CI/CD support
- No
RecognisedDocumentedFree planPlatforms - Web
- Free plan
- Yes
- Analysis target
- source and binary
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms - macOSLinux
- Analysis target
- source
- CI/CD support
- Yes
RecognisedDocumentedFree planPlatforms - LinuxmacOS
- Free plan
- Yes
- IDE support
- Yes
RecognisedDocumentedFree planPlatforms - macOSLinux
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms - LinuxmacOS
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms - WindowsLinux
- Free plan
- No
- IDE support
- Yes
RecognisedDocumentedFree planPlatforms -
- IDE support
- Yes
RecognisedDocumentedFree planPlatforms
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which static application security testing software is ranked first on Everything Xiaomi?
Skylos is ranked #1 of 24 with a score of 7.4. Horusec is second and Puma Scan third.
How many of these have a free plan?
7 of the 24 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Puma Scan has the lowest first paid tier we found: $24.92/mo.
How is this list ranked?
Ranked on what each maker publishes: documentation depth, a free tier and the platforms it runs on. Paid placements never change a rank.