Shortlisting DevSecOps vendors? See how JFrog stacks up: JFrog Xray, JFrog Advanced Security and JFrog Curation, main features, target customers and top competitors.
DevSecOps & Software Supply Chain
CI/CD Security Tools: Secure Build Pipelines & Deployments
Attackers increasingly target build systems, not just code. Compare CI/CD security tools for pipeline scanning, secrets protection, policy gates and build integrity.
11 vendors14 products
See the Top 11 rankingCI/CD Security vendors 11
Companies that offer CI/CD Security.
Featured vendors
GitLab at a glance: application security testing and vulnerability management. Learn what GitLab DevSecOps can do and which alternatives fit your needs better.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
Aikido Security
San Francisco, California, USA
Checkmarx
Tel Aviv, Israel
Endor Labs
Palo Alto, California, USA
GitHub
San Francisco, California, USA
GitLab
San Francisco, California, USA
JFrog
Sunnyvale, California, USA
Mend
Boston, Massachusetts, USA
Semgrep
San Francisco, California, USA
Snyk
Boston, Massachusetts, USA
SonarSource
Geneva, Switzerland
Veracode
Burlington, Massachusetts, USA
CI/CD Security products 14
Open a product to see its features, pricing and reviews, or compare it with others.
Aikido Security
Aikido Security is an all-in-one developer-first application security platform for developer application security. See features and Application Security alternatives.
Application SecurityView details
Checkmarx One
Free trial available. Checkmarx One by Checkmarx offers SAST, SCA, DAST, API security, IaC. Compare features, use cases and leading Application Security alternatives.
Application SecurityView details
Endor Labs
Endor Labs: function call-path reachability and 80% vulnerability noise reduction. Built for reachability-based SCA. Compare Software Supply Chain Security alternatives.
Application SecurityView details
GitHub Advanced Security
byGitHub
GitHub Advanced Security: custom query creation and automated pull requests. Built for static application security testing. Compare Application Security alternatives.
Application SecurityView details
GitLab Application Security Testing
byGitLab
GitLab Application Security Testing by GitLab: SAST. Ideal for Code Security. Deployment: cloud. See how it compares with top Application Security Testing alternatives.
Application SecurityView details
GitLab DevSecOps
byGitLab
See what GitLab DevSecOps offers: SBOM generation. It is built for Software Supply Chain, supports cloud deployment and competes with other DevSecOps tools.
Application SecurityView details
JFrog Pipelines
byJFrog
Get the facts on JFrog Pipelines: container build and security gate enforcement. Built for Build Gating. Compare it with other CI/CD Security options before you decide.
DevSecOps & Software Supply ChainView details
JFrog Xray
byJFrog
JFrog Xray from JFrog focuses on Vulnerability Scan. Key capabilities: component graphs and automated SBOM generation. Compare it with the leading SCA alternatives.
DevSecOps & Software Supply ChainView details
Mend.io Platform
byMend
Mend.io Platform covers unified application & supply chain security and SAST, SCA, secrets, container for DevSecOps. Compare top Application Security tools.
Application SecurityView details
Semgrep Code
bySemgrep
What does Semgrep Code do? It covers taint analysis, PR review comments and custom rule writing. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Snyk
bySnyk
Snyk helps teams with Container Security. Explore features like developer-first AppSec suite and automated PR fixes, cloud deployment and the closest SAST competitors.
Application SecurityView details
SonarQube Cloud
Looking for Application Security software? SonarQube Cloud by SonarSource provides quality gates and taint analysis for secure coding. Compare features and alternatives.
Application SecurityView details
Veracode Pipeline Scan
byVeracode
Veracode Pipeline Scan from Veracode focuses on Pipeline Scan. Key capabilities: PR security checks. Compare it with the leading CI/CD Security alternatives.
Application SecurityView details
Veracode Platform
byVeracode
What does Veracode Platform do? It covers comprehensive AppSec platform and SAST, DAST, SCA, IAST. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details