ArmorCode offers unified exposure management. Explore ArmorCode ASPM, compare key features and see the top Exposure Management alternatives before you buy.
Application Security
Application Security Software: Secure Code to Production
Ship secure code without slowing developers. Check out application security tools spanning SAST, SCA, secrets detection and API security across the full SDLC.
52 vendors89 products
See the Top 20 rankingApplication Security vendors 52
Companies that offer Application Security.
Featured vendors
Apiiro offers application security posture management. Explore Apiiro SAST, compare key features and see the top Application Security alternatives before you buy.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
AWS
Seattle, Washington, USA
Aikido Security
San Francisco, California, USA
Akeyless
New York, New York, USA
Anchore
Santa Barbara, California, USA
Apiiro
New York, New York, USA
ArmorCode
Palo Alto, California, USA
Bitwarden
Santa Barbara, California, USA
Black Duck
Burlington, Massachusetts, USA
Bright Security
San Rafael, California, USA
Cequence
Sunnyvale, California, USA
Check Point
Tel Aviv, Israel
Checkmarx
Tel Aviv, Israel
Cloudflare
San Francisco, California, USA
Coalfire
Westminster, Colorado, USA
Contrast Security
Baltimore, Maryland, USA
CyberArk
Newton, Massachusetts, USA
Cycode
Tel Aviv, Israel
Delinea
San Francisco, California, USA
Detectify
Stockholm, Sweden
Doppler
San Francisco, California, USA
Endor Labs
Palo Alto, California, USA
Escape
Paris, France
Fortinet
Sunnyvale, California, USA
GitGuardian
Paris, France
Application Security products 89
Open a product to see its features, pricing and reviews, or compare it with others.
Salt API Threat Protection
Salt API Threat Protection: bot mitigation and automated gateway blocking. Built for BOLA/IDOR attack blocking. Compare Application Security alternatives.
Salt Security API Discovery
Salt Security API Discovery: visual API topology and passive traffic analysis. Built for shadow API detection. Compare Application Security alternatives.
Semgrep AppSec Platform
Semgrep AppSec Platform: semantic SAST scanning and reachable SCA dependency analysis. Built for static code security testing. Compare Application Security alternatives.
Semgrep Secrets
Evaluating Semgrep Secrets? See how this Secret Scanning tool handles PR blocking and semantic secret scanning, where it fits best and which alternatives to compare.
Snyk
Snyk helps teams with Container Security. Explore features like developer-first AppSec suite and automated PR fixes, cloud deployment and the closest SAST competitors.
Snyk AppRisk
Shortlisting Application Security tools? Snyk AppRisk by Snyk brings ASPM application graph and asset discovery, with cloud deployment. See strengths and alternatives.
Snyk Open Source
Try Snyk Open Source free: a software composition analysis platform with automated fix pull requests. See who it suits and how it stacks up against other SCA tools.
SonarQube Advanced Security
SonarSource built SonarQube Advanced Security for open source dependency risk. Explore SBOM generation, review cloud deployment and compare similar SAST products.
SonarQube Cloud
Looking for Application Security software? SonarQube Cloud by SonarSource provides quality gates and taint analysis for secure coding. Compare features and alternatives.
SonarQube Server
SonarQube Server is a self-managed code quality & security platform for on-premises code quality and secure development lifecycle. See features and SAST alternatives.
SpectralOps
SpectralOps from Check Point focuses on hardcoded credential detection. Key capabilities: Pre-commit Git hooks. Compare it with the leading Secret Scanning alternatives.
Traceable API Discovery
Evaluating Traceable API Discovery? See how this Application Security tool handles drift alerts, where it fits best and which alternatives to compare.
TruffleHog
What does TruffleHog do? It covers active credential verification and 800+ secret detectors. See typical use cases, cloud deployment and how it compares to rivals.
Veracode Pipeline Scan
Veracode Pipeline Scan from Veracode focuses on Pipeline Scan. Key capabilities: PR security checks. Compare it with the leading CI/CD Security alternatives.
Veracode Platform
What does Veracode Platform do? It covers comprehensive AppSec platform and SAST, DAST, SCA, IAST. See typical use cases, cloud deployment and how it compares to rivals.
Wallarm API Discovery
Get the facts on Wallarm API Discovery: shadow API detection. Built for API Discovery. Compare it with other Application Security options before you decide.
Wiz Code
Wiz Code: IaC template scanning, secret detection and open-source dependency analysis. Built for IaC template scanning. Compare Cloud Security alternatives.