Directory / Application Security
Application Security
SAST, SCA, DAST, and ASPM tools that secure code, dependencies, and pipelines.
Snyk
Snyk
Developer-first SCA/SAST leader for open source, containers, and IaC.
Checkmarx
Checkmarx
Enterprise AppSec platform with deep SAST and supply-chain coverage.
Veracode
Veracode
Cloud AppSec testing used by large regulated engineering orgs.
GitHub Advanced Security
GitHub / Microsoft
Code scanning, secret scanning, and Dependabot where developers already work.
GitLab Ultimate
GitLab
Built-in SAST/DAST/Fuzz testing in the DevSecOps platform.
SonarQube
Sonar
Quality-plus-security static analysis with huge developer adoption.
Semgrep
Semgrep
Fast, customizable SAST used by modern AppSec teams.
Contrast Security
Contrast
IAST/RASP that finds vulns in running applications.