Considering Bugcrowd? Review Bugcrowd Platform and Bugcrowd Bug Bounty, core Bug Bounty features, ideal customers and the strongest alternatives in one place.
Application Security
Application Security Testing: SAST, DAST & IAST Tools
Find vulnerabilities in code and running apps before release. Explore application security testing tools across SAST, DAST, IAST and crowdsourced testing.
36 vendors77 products
See the Top 20 rankingApplication Security Testing vendors 36
Companies that offer Application Security Testing.
Featured vendors
Intigriti helps enterprises with bug bounty programs and vulnerability disclosure solutions. Compare Intigriti Public Programs and find the right fit for your team.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
AWS
Seattle, Washington, USA
Apiiro
New York, New York, USA
ArmorCode
Palo Alto, California, USA
Bishop Fox
Tempe, Arizona, USA
Black Duck
Burlington, Massachusetts, USA
Bright Security
San Rafael, California, USA
Bugcrowd
San Francisco, California, USA
Checkmarx
Tel Aviv, Israel
Coalfire
Westminster, Colorado, USA
Cobalt
San Francisco, California, USA
Contrast Security
Baltimore, Maryland, USA
Detectify
Stockholm, Sweden
GitLab
San Francisco, California, USA
HCLSoftware
Noida, India
HackerOne
San Francisco, California, USA
Horizon3.ai
San Francisco, California, USA
Intigriti
Antwerp, Belgium
Intruder
London, United Kingdom
Invicti
Austin, Texas, USA
Mend
Boston, Massachusetts, USA
NCC Group
Manchester, United Kingdom
OWASP
Global nonprofit organization
OpenText
Waterloo, Ontario, Canada
PortSwigger
Knutsford, United Kingdom
Application Security Testing products 77
Open a product to see its features, pricing and reviews, or compare it with others.
NCC Group Penetration Testing
Get the facts on NCC Group Penetration Testing: mobile app testing. Built for Security Testing. Compare it with other Penetration Testing options before you decide.
Application SecurityView details
Netsparker
byInvicti
Shortlisting Application Security Testing tools? Netsparker by Invicti brings automated security reports, with cloud deployment. See strengths and alternatives.
Vulnerability & Exposure ManagementView details
NodeZero Cloud Pentesting
NodeZero Cloud Pentesting delivers AWS/Azure audits for Cloud Pentesting. Explore its Penetration Testing capabilities, deployment choices and top competitors.
Application SecurityView details
NodeZero External Pentesting
NodeZero External Pentesting is an external attack surface pentesting for External Pentesting. See features and Application Security Testing alternatives.
Application SecurityView details
NodeZero Internal Pentesting
NodeZero Internal Pentesting: lateral movement and credential harvesting. Built for Internal Pentesting. Compare Application Security Testing alternatives.
Application SecurityView details
NodeZero WebApp Pentesting
NodeZero WebApp Pentesting: API testing, authentication bypass and SQL injection exploits. Built for WebApp Pentesting. Compare Application Security Testing alternatives.
Application SecurityView details
OWASP ZAP
byOWASP
OWASP ZAP from OWASP focuses on API security testing. Key capabilities: REST API control. Compare it with the leading Application Security Testing alternatives.
Application SecurityView details
PTaaS
byCobalt
Free trial available. PTaaS by Cobalt offers jira sync and live vulnerability feeds. Compare features, use cases and leading Application Security Testing alternatives.
Application SecurityView details
Qualys Web Application Scanning
byQualys
Evaluating Qualys Web Application Scanning? See how this Application Security Testing tool handles DAST crawling, where it fits best and which alternatives to compare.
Application SecurityView details
Rapid7 InsightAppSec
byRapid7
Get the facts on Rapid7 InsightAppSec: REST API testing. Built for CI/CD security gating. Compare it with other Application Security Testing options before you decide.
Application SecurityView details
Seeker
What does Seeker do? It covers code tracing and runtime API analysis. See typical use cases, cloud, on-premises or hybrid deployment and how it compares to rivals.
Application SecurityView details
Semgrep Code
bySemgrep
What does Semgrep Code do? It covers taint analysis, PR review comments and custom rule writing. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Snyk Code
bySnyk
Snyk Code by Snyk: IDE scan and AI-generated 1-click fixes. Ideal for Code Security and DevSecOps. Deployment: cloud. See how it compares with top SAST alternatives.
Application SecurityView details
SonarQube Advanced Security
SonarSource built SonarQube Advanced Security for open source dependency risk. Explore SBOM generation, review cloud deployment and compare similar SAST products.
Application SecurityView details
SonarQube Server
SonarQube Server is a self-managed code quality & security platform for on-premises code quality and secure development lifecycle. See features and SAST alternatives.
Application SecurityView details
StackHawk DAST
Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.
Application SecurityView details
StackHawk HawkScan
StackHawk HawkScan offers containerized DAST engine, hawkscan.yml configuration as code and OpenAPI parsing. Use it for local debugging. See DAST alternatives.
Application SecurityView details
Synack Penetration Testing
bySynack
Synack Penetration Testing from Synack focuses on compliance auditing. Key capabilities: patch re-testing. Compare it with the leading Penetration Testing alternatives.
Application SecurityView details
Tenable Web App Scanning
byTenable
Looking for Application Security Testing software? Tenable Web App Scanning by Tenable provides SPA support for API security testing. Compare features and alternatives.
Vulnerability & Exposure ManagementView details
Thoropass Penetration Testing
What does Thoropass Penetration Testing do? It covers manual exploitation and remediation guidance. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Veracode Dynamic Analysis
byVeracode
Free trial available. Veracode Dynamic Analysis by Veracode offers automated DAST scanning. Compare features, use cases and leading DAST alternatives.
Application SecurityView details
Veracode Interactive Application Security Testing
byVeracode
Veracode Interactive Application Security Testing: QA test execution monitoring. Built for Runtime Analysis. Compare Application Security Testing alternatives.
Application SecurityView details
Veracode Platform
byVeracode
What does Veracode Platform do? It covers comprehensive AppSec platform and SAST, DAST, SCA, IAST. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Veracode Static Analysis
byVeracode
Free trial available. Veracode Static Analysis by Veracode offers audit reports and binary scanning. Compare features, use cases and leading SAST alternatives.
Application SecurityView details
Showing page 3 of 4 (77 products)