Static Application Security Testing (SAST) software examines an application's code to find security vulnerabilities without running the code. These tools are commonly used by companies with continuous delivery practices to detect issues before deployment. SAST tools offer details on vulnerabilities and provide remediation suggestions for development teams to address. While there is some overlap with static code analysis tools, SAST products are specifically geared towards security testing. In contrast, static code analysis tools typically offer a broader range of features, including various analytical methods, test management, and team collaboration.
GitHub
GitHub is a platform for hosting and collaborating on software development projects, offering version control, project management, and social coding features.
GitLab
GitLab is a web-based tool for managing code repositories, issue tracking, and CI/CD pipelines, supporting collaboration throughout the software development lifecycle.
GitGuardian
GitGuardian detects and prevents the exposure of sensitive information like secrets in code repositories, integrating seamlessly with development workflows.
SonarCloud
SonarCloud is a cloud service for continuous code quality and security analysis, integrating with major version control and CI/CD platforms to provide real-time feedback.
Invicti
Invicti is an application security tool that automates testing to identify vulnerabilities in web apps and APIs, supporting DevOps workflows for continuous security.
Codacy
Codacy is a code review tool that automates code quality analysis, helping teams identify issues early and improve code health across multiple programming languages.
Snyk
Snyk is a developer security platform that helps identify and fix vulnerabilities in code, open source, containers, and cloud infrastructure.
Semgrep
Semgrep is a customizable security platform that scans code for vulnerabilities, integrates with development workflows, and provides actionable results for developers.
DeepSource
DeepSource analyzes code for security, performance, and bugs, automating reviews and assessments to enhance software quality and streamline development workflows.
OX Security
OX Security is an Active Application Security Posture Management platform that integrates various security tools to improve application security throughout development.
Aikido Security
Aikido Security is a platform for code scanning and cloud vulnerability assessments, integrating various security tools for comprehensive protection throughout the software development lifecycle.
Embold
Embold is a tool that analyzes code to identify and resolve issues, helping developers improve code quality and reduce technical debt in their projects.
CodeScan
CodeScan Shield enhances code quality and compliance for Salesforce through two modules: CodeScan for code analysis and OrgScan for policy enforcement.
The Code Registry
The Code Registry is an AI-driven platform that analyzes software code for quality and security, helping businesses manage projects and risks more effectively.
Cycode
Cycode is a software supply chain security platform that ensures visibility and integrity throughout the software development lifecycle by scanning for vulnerabilities and managing dependencies.
CodeThreat
Performs AI-driven code security scans (SAST, SCA, IaC, container, secret scanning), reduces false positives, maps repositories, and integrates into CI/CD; deployable SaaS or on‑prem.
Data Theorem
Data Theorem offers integrated solutions for closing, escrow accounting, imaging, transaction management, e-signing, and digital marketplaces in both on-premise and hosted formats.
GuardRails
GuardRails is a security platform that scans for vulnerabilities in code, providing real-time fixes and training to enhance security in development workflows.
JFrog
JFrog is a DevOps platform for managing software delivery, providing artifact management, CI/CD automation, and security across multiple deployment environments.
Hubbl Diagnostics
Hubbl Diagnostics offers automated, AI-driven insights for Salesforce organizations to monitor performance, enhance security, and improve operational efficiency.
© 2026 WebCatalog, Inc.