Explore the SonarSource portfolio, including SonarQube Cloud and SonarQube Server. Get company facts, key SAST features and side-by-side alternatives.
Application Security
SAST Tools: Static Application Security Testing Software
Catch vulnerabilities in source code before it ships. Compare SAST tools for language support, IDE and pull request scanning, accuracy and developer-friendly fixes.
16 vendors36 products
See the Top 16 rankingSAST vendors 16
Companies that offer SAST.
Featured vendors
Black Duck builds software supply chain security and application security testing. Compare Black Duck CodeSight with the best Application Security alternatives.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
Aikido Security
San Francisco, California, USA
Apiiro
New York, New York, USA
Black Duck
Burlington, Massachusetts, USA
Check Point
Tel Aviv, Israel
Checkmarx
Tel Aviv, Israel
Contrast Security
Baltimore, Maryland, USA
GitHub
San Francisco, California, USA
GitLab
San Francisco, California, USA
HCLSoftware
Noida, India
HackerOne
San Francisco, California, USA
Mend
Boston, Massachusetts, USA
OpenText
Waterloo, Ontario, Canada
Semgrep
San Francisco, California, USA
Snyk
Boston, Massachusetts, USA
SonarSource
Geneva, Switzerland
Veracode
Burlington, Massachusetts, USA
SAST products 36
Open a product to see its features, pricing and reviews, or compare it with others.
Semgrep AppSec Platform
bySemgrep
Semgrep AppSec Platform: semantic SAST scanning and reachable SCA dependency analysis. Built for static code security testing. Compare Application Security alternatives.
Application SecurityView details
Semgrep Code
bySemgrep
What does Semgrep Code do? It covers taint analysis, PR review comments and custom rule writing. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Snyk
bySnyk
Snyk helps teams with Container Security. Explore features like developer-first AppSec suite and automated PR fixes, cloud deployment and the closest SAST competitors.
Application SecurityView details
Snyk Code
bySnyk
Snyk Code by Snyk: IDE scan and AI-generated 1-click fixes. Ideal for Code Security and DevSecOps. Deployment: cloud. See how it compares with top SAST alternatives.
Application SecurityView details
SonarQube Advanced Security
SonarSource built SonarQube Advanced Security for open source dependency risk. Explore SBOM generation, review cloud deployment and compare similar SAST products.
Application SecurityView details
SonarQube Cloud
Looking for Application Security software? SonarQube Cloud by SonarSource provides quality gates and taint analysis for secure coding. Compare features and alternatives.
Application SecurityView details
SonarQube Server
SonarQube Server is a self-managed code quality & security platform for on-premises code quality and secure development lifecycle. See features and SAST alternatives.
Application SecurityView details
SonarQube for IDE
SonarQube for IDE by SonarSource is an IDE code analysis extension. Key features include AI CodeFix. Compare deployment, integrations and top SAST alternatives.
Application SecurityView details
SpectralOps
SpectralOps from Check Point focuses on hardcoded credential detection. Key capabilities: Pre-commit Git hooks. Compare it with the leading Secret Scanning alternatives.
Application SecurityView details
Veracode Pipeline Scan
byVeracode
Veracode Pipeline Scan from Veracode focuses on Pipeline Scan. Key capabilities: PR security checks. Compare it with the leading CI/CD Security alternatives.
Application SecurityView details
Veracode Platform
byVeracode
What does Veracode Platform do? It covers comprehensive AppSec platform and SAST, DAST, SCA, IAST. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Veracode Static Analysis
byVeracode
Free trial available. Veracode Static Analysis by Veracode offers audit reports and binary scanning. Compare features, use cases and leading SAST alternatives.
Application SecurityView details
Showing page 2 of 2 (36 products)
← PreviousNext →