AppSecNews

ASPM

Application Security Posture Management

Aggregate, deduplicate and prioritize findings across every other tool in the program.

16 tools profiled

How it differs Collects findings from your other scanners, deduplicates them and ranks them by application context. It aggregates rather than scans, though some platforms bundle scanners of their own.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

7 tools match

Active Slack Clear all

  • Aikido Security

    Aikido Security

    ASPM

    A developer-facing platform that runs code, dependency, secret, container, IaC and surface scanning from one place and filters results down to what is reachable.

    Commercial, free tier
    Growing

  • Cycode

    Cycode

    ASPM

    A posture platform that started with source control and CI/CD hardening and grew into first-party scanning plus correlation of findings across the delivery chain.

    Commercial
    Established

  • DefectDojo

    DefectDojo (originally an OWASP project)

    ASPM

    An open source vulnerability management system that imports scanner output through a large parser library, deduplicates findings and tracks them to closure.

    Open source
    Established Verified

  • Jit

    Jit

    ASPM

    An orchestration layer that runs a curated set of open source security scanners in CI, delivers results in pull requests, and manages the plans as code.

    Commercial
    Growing

  • Aikido Security

    Aikido Security

    A developer-facing platform that runs code, dependency, secret, container, IaC and surface scanning from one place and filters results down to what is reachable.

    Commercial, free tier Growing
    ASPM

  • Cycode

    Cycode

    A posture platform that started with source control and CI/CD hardening and grew into first-party scanning plus correlation of findings across the delivery chain.

    Commercial Established
    ASPM

  • DefectDojo

    DefectDojo (originally an OWASP project)

    An open source vulnerability management system that imports scanner output through a large parser library, deduplicates findings and tracks them to closure.

    Open source Established
    ASPM

  • Jit

    Jit

    An orchestration layer that runs a curated set of open source security scanners in CI, delivers results in pull requests, and manages the plans as code.

    Commercial Growing
    ASPM

  • Legit Security

    Legit Security

    ASPM

    A posture platform that discovers and evaluates the whole build and release environment, then correlates code findings back to the pipelines that produced them.

    Commercial
    Growing

  • OX Security

    OX Security

    ASPM

    A posture platform that maps the path from code to running workload and uses that path to decide which findings are actually reachable and worth fixing.

    Commercial
    Growing

  • Seemplicity

    Seemplicity

    ASPM

    A remediation operations platform that aggregates findings from security tools and automates routing, ownership assignment and progress tracking to closure.

    Commercial
    Growing

  • Legit Security

    Legit Security

    A posture platform that discovers and evaluates the whole build and release environment, then correlates code findings back to the pipelines that produced them.

    Commercial Growing
    ASPM

  • OX Security

    OX Security

    A posture platform that maps the path from code to running workload and uses that path to decide which findings are actually reachable and worth fixing.

    Commercial Growing
    ASPM

  • Seemplicity

    Seemplicity

    A remediation operations platform that aggregates findings from security tools and automates routing, ownership assignment and progress tracking to closure.

    Commercial Growing
    ASPM
Tick up to 4 tools above.