Application Security

Application Security Testing: SAST, DAST & IAST Tools

Find vulnerabilities in code and running apps before release. Explore application security testing tools across SAST, DAST, IAST and crowdsourced testing.

36 vendors77 products

See the Top 20 ranking

Application Security Testing vendors 36

Companies that offer Application Security Testing.

View all 36 vendors

Featured vendors

Intigriti logo

Intigriti

Antwerp, Belgium

Featured

Intigriti helps enterprises with bug bounty programs and vulnerability disclosure solutions. Compare Intigriti Public Programs and find the right fit for your team.

Bugcrowd logo

Bugcrowd

San Francisco, California, USA

Featured

Considering Bugcrowd? Review Bugcrowd Platform and Bugcrowd Bug Bounty, core Bug Bounty features, ideal customers and the strongest alternatives in one place.

Your company hereReach buyers browsing Application Security TestingBecome a sponsor

These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.

AWS logo

AWS

Seattle, Washington, USA

Cobalt logo

Cobalt

San Francisco, California, USA

GitLab logo

GitLab

San Francisco, California, USA

Mend logo

Mend

Boston, Massachusetts, USA

OWASP logo

OWASP

Global nonprofit organization

Application Security Testing products 77

Open a product to see its features, pricing and reviews, or compare it with others.

Invicti logo

Acunetix

Acunetix by Invicti: reports and DeepScan DOM crawler. Ideal for Web Application Security. Deployment: cloud. See how it compares with top DAST alternatives.

Vulnerability & Exposure ManagementView details
Invicti logo

Acunetix IAST

Try Acunetix IAST free: an interactive application security with server-side sensor inspection. See who it suits and how it stacks up against other IAST tools.

Application SecurityView details
AWS logo

Amazon Inspector

byAWS

Amazon Inspector is an automated vulnerability management service for continuous vulnerability management. See features and Vulnerability Management alternatives.

Cloud SecurityView details
Apiiro logo

Apiiro SAST

What does Apiiro SAST do? It covers context-aware static analysis and AST false-positive reduction. See typical use cases, cloud deployment and how it compares to rivals.

Application SecurityView details
HCLSoftware logo

AppScan 360

AppScan 360 offers unified AppSec platform and SAST, DAST, IAST, and SCA correlation. Use it for compliance auditing. See Application Security Testing alternatives.

Application SecurityView details
HCLSoftware logo

AppScan Enterprise

AppScan Enterprise covers jira integration and modern SPA and API scanning for portfolio-wide web application scanning. Compare top Application Security Testing tools.

Application SecurityView details
HCLSoftware logo

AppScan Source

Get the facts on AppScan Source: IDE integration. Built for build automation gating. Compare it with other Application Security Testing options before you decide.

Application SecurityView details
HCLSoftware logo

AppScan on Cloud

AppScan on Cloud: cloud-delivered ASTaaS and multi-engine scanning. Built for CI/CD pipeline automation. Compare Application Security Testing alternatives.

Application SecurityView details
ArmorCode logo

ArmorCode

See what ArmorCode offers: SLA management. It is built for unified ASPM governance, supports cloud deployment and competes with other Application Security tools.

Vulnerability & Exposure ManagementView details
Black Duck logo

Black Duck CodeSight

Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.

Application SecurityView details
Black Duck logo

Black Duck SAST

Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.

Application SecurityView details
Bright Security logo

Bright STAR

Bright STAR: BOLA & SSRF detection and automated exploit validation. Built for automated dynamic security testing. Compare Application Security Testing alternatives.

Application SecurityView details
Bugcrowd logo

Bugcrowd Bug Bounty

Evaluating Bugcrowd Bug Bounty? See how this Bug Bounty tool handles reward management and vulnerability triage, where it fits best and which alternatives to compare.

Application SecurityView details
Bugcrowd logo

Bugcrowd Penetration Testing

Evaluating Bugcrowd Penetration Testing? See how this Penetration Testing tool handles agile PTaaS scoping, where it fits best and which alternatives to compare.

Vulnerability & Exposure ManagementView details
Bugcrowd logo

Bugcrowd Platform

Shortlisting Application Security Testing tools? Bugcrowd Platform by Bugcrowd brings crowdsourced testing, with cloud deployment. See strengths and alternatives.

Application SecurityView details
Checkmarx logo

Checkmarx DAST

Checkmarx DAST helps teams with Web Security. Explore features like crawling complex web apps, cloud or hybrid deployment and the closest DAST competitors.

Application SecurityView details
Checkmarx logo

Checkmarx IAST

Get the facts on Checkmarx IAST: code execution monitoring and line-of-code flaw detection. Built for DevSecOps. Compare it with other IAST options before you decide.

Application SecurityView details
Checkmarx logo

Checkmarx One

Free trial available. Checkmarx One by Checkmarx offers SAST, SCA, DAST, API security, IaC. Compare features, use cases and leading Application Security alternatives.

Application SecurityView details
Checkmarx logo

Checkmarx SAST

Evaluating Checkmarx SAST? See how this SAST tool handles source code scanning and best-fix recommendation, where it fits best and which alternatives to compare.

Application SecurityView details
Cobalt logo

Cobalt Core

Cobalt Core by Cobalt: vulnerability remediation workflows. Ideal for PTaaS. Deployment: cloud. See how it compares with top Penetration Testing alternatives.

Application SecurityView details
Showing page 1 of 4 (77 products)
← PreviousNext →

Tell us your company and website, and we'll send the slots and details.

By sending this you agree to our Privacy Policy and Terms.