AppSecNews

SAST

Static Application Security Testing

Analyze source code or bytecode for vulnerable patterns without running the application.

31 tools profiled

How it differs Reads the code you wrote without running it. SCA checks the third party packages you depend on; IAST watches the running app while your tests exercise it.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

1 tool match

  • Qodana

    JetBrains

    SAST

    Static analysis platform that runs the inspection engine from JetBrains IDEs as a containerized pipeline job with quality gates and trend reporting.

    Commercial, free tier
    Growing
  • Qodana

    JetBrains

    Static analysis platform that runs the inspection engine from JetBrains IDEs as a containerized pipeline job with quality gates and trend reporting.

    Commercial, free tier Growing
    SAST
Tick up to 4 tools above.