AppSecNews

SAST

Static Application Security Testing

Analyze source code or bytecode for vulnerable patterns without running the application.

31 tools profiled

How it differs Reads the code you wrote without running it. SCA checks the third party packages you depend on; IAST watches the running app while your tests exercise it.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

7 tools match

Active Taint analysis Clear all

  • Brakeman

    Brakeman

    SAST

    A Rails-aware static analyzer that models controllers, routes and views to find injection, mass assignment and unsafe redirect flaws in Ruby code.

    Commercial, free tier
    Established

  • Checkmarx

    Checkmarx

    SAST

    An enterprise SAST engine with broad language coverage that builds a queryable code graph and traces tainted data from source to sink.

    Commercial
    Established

  • GitHub CodeQL

    GitHub

    SAST

    A semantic code analysis engine that turns a codebase into a queryable database and finds vulnerabilities with declarative security queries.

    Open source and commercial
    Established

  • OpenText Fortify

    OpenText

    SAST

    A long-established enterprise static analyzer with very broad language support, rule-driven taint analysis and detailed compliance reporting.

    Commercial
    Established

  • Brakeman

    Brakeman

    A Rails-aware static analyzer that models controllers, routes and views to find injection, mass assignment and unsafe redirect flaws in Ruby code.

    Commercial, free tier Established
    SAST

  • Checkmarx

    Checkmarx

    An enterprise SAST engine with broad language coverage that builds a queryable code graph and traces tainted data from source to sink.

    Commercial Established
    SAST

  • GitHub CodeQL

    GitHub

    A semantic code analysis engine that turns a codebase into a queryable database and finds vulnerabilities with declarative security queries.

    Open source and commercial Established
    SAST

  • OpenText Fortify

    OpenText

    A long-established enterprise static analyzer with very broad language support, rule-driven taint analysis and detailed compliance reporting.

    Commercial Established
    SAST

  • Psalm

    Psalm project (originated at Vimeo)

    SAST

    Static analyzer for PHP combining type inference with an opt in taint mode that traces untrusted input to dangerous sinks.

    Open source
    Established

  • Semgrep

    Semgrep, Inc.

    SAST

    Pattern matching static analysis engine whose rules are written as code snippets with metavariables, with an optional commercial platform for triage.

    Open source and commercial
    Established

  • SonarQube

    Sonar

    SAST

    Self hosted analysis server that scans repositories for quality and security issues, enforces quality gates and tracks findings over time.

    Commercial, free tier
    Established

  • Psalm

    Psalm project (originated at Vimeo)

    Static analyzer for PHP combining type inference with an opt in taint mode that traces untrusted input to dangerous sinks.

    Open source Established
    SAST

  • Semgrep

    Semgrep, Inc.

    Pattern matching static analysis engine whose rules are written as code snippets with metavariables, with an optional commercial platform for triage.

    Open source and commercial Established
    SAST

  • SonarQube

    Sonar

    Self hosted analysis server that scans repositories for quality and security issues, enforces quality gates and tracks findings over time.

    Commercial, free tier Established
    SAST
Tick up to 4 tools above.