Intigriti helps enterprises with bug bounty programs and vulnerability disclosure solutions. Compare Intigriti Public Programs and find the right fit for your team.
Application Security
Application Security Testing: SAST, DAST & IAST Tools
Find vulnerabilities in code and running apps before release. Explore application security testing tools across SAST, DAST, IAST and crowdsourced testing.
36 vendors77 products
See the Top 20 rankingApplication Security Testing vendors 36
Companies that offer Application Security Testing.
Featured vendors
Considering Bugcrowd? Review Bugcrowd Platform and Bugcrowd Bug Bounty, core Bug Bounty features, ideal customers and the strongest alternatives in one place.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
AWS
Seattle, Washington, USA
Apiiro
New York, New York, USA
ArmorCode
Palo Alto, California, USA
Bishop Fox
Tempe, Arizona, USA
Black Duck
Burlington, Massachusetts, USA
Bright Security
San Rafael, California, USA
Bugcrowd
San Francisco, California, USA
Checkmarx
Tel Aviv, Israel
Coalfire
Westminster, Colorado, USA
Cobalt
San Francisco, California, USA
Contrast Security
Baltimore, Maryland, USA
Detectify
Stockholm, Sweden
GitLab
San Francisco, California, USA
HCLSoftware
Noida, India
HackerOne
San Francisco, California, USA
Horizon3.ai
San Francisco, California, USA
Intigriti
Antwerp, Belgium
Intruder
London, United Kingdom
Invicti
Austin, Texas, USA
Mend
Boston, Massachusetts, USA
NCC Group
Manchester, United Kingdom
OWASP
Global nonprofit organization
OpenText
Waterloo, Ontario, Canada
PortSwigger
Knutsford, United Kingdom
Application Security Testing products 77
Open a product to see its features, pricing and reviews, or compare it with others.
Acunetix
Acunetix by Invicti: reports and DeepScan DOM crawler. Ideal for Web Application Security. Deployment: cloud. See how it compares with top DAST alternatives.
Acunetix IAST
Try Acunetix IAST free: an interactive application security with server-side sensor inspection. See who it suits and how it stacks up against other IAST tools.
Amazon Inspector
Amazon Inspector is an automated vulnerability management service for continuous vulnerability management. See features and Vulnerability Management alternatives.
Apiiro SAST
What does Apiiro SAST do? It covers context-aware static analysis and AST false-positive reduction. See typical use cases, cloud deployment and how it compares to rivals.
AppScan 360
AppScan 360 offers unified AppSec platform and SAST, DAST, IAST, and SCA correlation. Use it for compliance auditing. See Application Security Testing alternatives.
AppScan Enterprise
AppScan Enterprise covers jira integration and modern SPA and API scanning for portfolio-wide web application scanning. Compare top Application Security Testing tools.
AppScan Source
Get the facts on AppScan Source: IDE integration. Built for build automation gating. Compare it with other Application Security Testing options before you decide.
AppScan on Cloud
AppScan on Cloud: cloud-delivered ASTaaS and multi-engine scanning. Built for CI/CD pipeline automation. Compare Application Security Testing alternatives.
ArmorCode
See what ArmorCode offers: SLA management. It is built for unified ASPM governance, supports cloud deployment and competes with other Application Security tools.
Bishop Fox Penetration Testing
Bishop Fox Penetration Testing from Bishop Fox focuses on PTaaS. Key capabilities: API assessments. Compare it with the leading Penetration Testing alternatives.
Black Duck CodeSight
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.
Black Duck SAST
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.
Bright STAR
Bright STAR: BOLA & SSRF detection and automated exploit validation. Built for automated dynamic security testing. Compare Application Security Testing alternatives.
Bugcrowd Bug Bounty
Evaluating Bugcrowd Bug Bounty? See how this Bug Bounty tool handles reward management and vulnerability triage, where it fits best and which alternatives to compare.
Bugcrowd Penetration Testing
Evaluating Bugcrowd Penetration Testing? See how this Penetration Testing tool handles agile PTaaS scoping, where it fits best and which alternatives to compare.
Bugcrowd Platform
Shortlisting Application Security Testing tools? Bugcrowd Platform by Bugcrowd brings crowdsourced testing, with cloud deployment. See strengths and alternatives.
Burp Suite Community Edition
Burp Suite Community Edition: HTTP/S interception proxy, Burp Repeater and Burp Decoder. Built for security education. Compare Application Security Testing alternatives.
Burp Suite Enterprise Edition
What does Burp Suite Enterprise Edition do? It covers SSO and RBAC. See typical use cases, cloud or on-premises deployment and how it compares to rivals.
Checkmarx DAST
Checkmarx DAST helps teams with Web Security. Explore features like crawling complex web apps, cloud or hybrid deployment and the closest DAST competitors.
Checkmarx IAST
Get the facts on Checkmarx IAST: code execution monitoring and line-of-code flaw detection. Built for DevSecOps. Compare it with other IAST options before you decide.
Checkmarx One
Free trial available. Checkmarx One by Checkmarx offers SAST, SCA, DAST, API security, IaC. Compare features, use cases and leading Application Security alternatives.
Checkmarx SAST
Evaluating Checkmarx SAST? See how this SAST tool handles source code scanning and best-fix recommendation, where it fits best and which alternatives to compare.
Coalfire Penetration Testing
Evaluating Coalfire Penetration Testing? See how this Penetration Testing tool handles API assessments, where it fits best and which alternatives to compare.
Cobalt Core
Cobalt Core by Cobalt: vulnerability remediation workflows. Ideal for PTaaS. Deployment: cloud. See how it compares with top Penetration Testing alternatives.