Apiiro offers application security posture management. Explore Apiiro SAST, compare key features and see the top Application Security alternatives before you buy.
Application Security
Application Security Software: Secure Code to Production
Ship secure code without slowing developers. Check out application security tools spanning SAST, SCA, secrets detection and API security across the full SDLC.
52 vendors89 products
See the Top 20 rankingApplication Security vendors 52
Companies that offer Application Security.
Featured vendors
ArmorCode offers unified exposure management. Explore ArmorCode ASPM, compare key features and see the top Exposure Management alternatives before you buy.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
AWS
Seattle, Washington, USA
Aikido Security
San Francisco, California, USA
Akeyless
New York, New York, USA
Anchore
Santa Barbara, California, USA
Apiiro
New York, New York, USA
ArmorCode
Palo Alto, California, USA
Bitwarden
Santa Barbara, California, USA
Black Duck
Burlington, Massachusetts, USA
Bright Security
San Rafael, California, USA
Cequence
Sunnyvale, California, USA
Check Point
Tel Aviv, Israel
Checkmarx
Tel Aviv, Israel
Cloudflare
San Francisco, California, USA
Coalfire
Westminster, Colorado, USA
Contrast Security
Baltimore, Maryland, USA
CyberArk
Newton, Massachusetts, USA
Cycode
Tel Aviv, Israel
Delinea
San Francisco, California, USA
Detectify
Stockholm, Sweden
Doppler
San Francisco, California, USA
Endor Labs
Palo Alto, California, USA
Escape
Paris, France
Fortinet
Sunnyvale, California, USA
GitGuardian
Paris, France
Application Security products 89
Open a product to see its features, pricing and reviews, or compare it with others.
GitGuardian Platform
What does GitGuardian Platform do? It covers unified code security. See typical use cases, cloud or self-hosted deployment and how it compares to rivals.
GitGuardian Secrets Detection
GitGuardian Secrets Detection delivers IDE extensions for Pre-Commit Scanning. Explore its Application Security capabilities, deployment choices and top competitors.
GitHub Advanced Security
GitHub Advanced Security: custom query creation and automated pull requests. Built for static application security testing. Compare Application Security alternatives.
GitHub Secret Protection
What does GitHub Secret Protection do? It covers bypass auditing. See typical use cases, cloud or on-premises deployment and how it compares to rivals.
GitLab DevSecOps
See what GitLab DevSecOps offers: SBOM generation. It is built for Software Supply Chain, supports cloud deployment and competes with other DevSecOps tools.
GitLab Secret Detection
GitLab Secret Detection: automated secret scanning, gitleaks engine and 100+ secret pattern rules. Built for Software Supply Chain. Compare Secret Scanning alternatives.
Gitleaks
Gitleaks: High-speed Go scanning engine and 150+ secret signature rules. Built for git repository secret scanning. Compare Application Security alternatives.
Google Secret Manager
Google Secret Manager from Google Cloud focuses on API key storage. Key capabilities: automated rotation. Compare it with the leading Cloud Security alternatives.
H1 Code
Evaluating H1 Code? See how this Application Security tool handles manual code audit and triage verification, where it fits best and which alternatives to compare.
HashiCorp Vault Secrets
Get the facts on HashiCorp Vault Secrets: CLI workflows. Built for cloud secret syncing. Compare it with other Application Security options before you decide.
Imperva RASP
Imperva RASP delivers low latency and SQLi and RCE blocking for zero-day exploit neutralization. Explore its RASP capabilities, deployment choices and top competitors.
Infisical Secrets Management
Evaluating Infisical Secrets Management? See how this Secrets Management tool handles environment staging, where it fits best and which alternatives to compare.
JFrog Advanced Security
JFrog Advanced Security is a binary-level software supply chain defense for Contextual CVE Analysis. See features and Software Supply Chain Security alternatives.
Keeper Secrets Manager
What does Keeper Secrets Manager do? It covers granular RBAC and DevOps CI/CD plugins. See typical use cases, cloud deployment and how it compares to rivals.
Mend Secrets
Shortlisting Application Security tools? Mend Secrets by Mend brings API token blocking and Pre-commit Git hooks, with cloud deployment. See strengths and alternatives.
Mend.io Platform
Mend.io Platform covers unified application & supply chain security and SAST, SCA, secrets, container for DevSecOps. Compare top Application Security tools.
Nightfall Secrets Detection
Free trial available. Nightfall Secrets Detection by Nightfall offers token leak prevention. Compare features, use cases and leading Application Security alternatives.
Noname API Discovery
Noname API Discovery: automated shadow API discovery and comprehensive API catalog. Built for complete API asset discovery. Compare Application Security alternatives.
OpenText Fortify Static Code Analyzer
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.
Optiv Application Security
Optiv Application Security delivers threat modeling for DevSecOps. Explore its Application Security capabilities, deployment choices and top competitors.
Polaris Software Integrity Platform
What does Polaris Software Integrity Platform do? It covers unified cloud AppSec platform. See typical use cases, cloud deployment and how it compares to rivals.
Qualys API Security
Qualys API Security is an API security platform. It helps with API discovery through TruRisk scoring. Explore features and compare API Security alternatives.
Rapid7 InsightAppSec
Get the facts on Rapid7 InsightAppSec: REST API testing. Built for CI/CD security gating. Compare it with other Application Security Testing options before you decide.
Salt API Posture Governance
Salt API Posture Governance delivers API risk scoring for API schema drift identification. Explore its API Security capabilities, deployment choices and top competitors.