Subcategory

Sast code scanning

24 tools
Aikido Security
freemium

All-in-one AppSec platform with AI AutoFix for SAST, IaC, and secrets

Apiiro
paid

Agentic ASPM with deep code analysis and an AI guardian for generated code

Arnica
freemium

Real-time AppSec platform with hybrid deterministic and AI SAST

Backslash Security
paid

Reachability-based AppSec with AI-powered attack path remediation

Checkmarx
paid

Enterprise AppSec platform with agentic Assist agents for code, triage, and remediation

CodeAnt AI
freemium

AI code review, SAST, and pentesting with outcome-based pricing

CodeThreat
paid

Agentic SAST that builds a full architecture map of the application

Corgea
freemium

AI SAST that auto-fixes vulnerabilities via pull request

Cycode
paid

Agentic AppSec platform combining ASPM, SAST, and supply chain security

DeepSource
freemium

AI code review platform combining static analysis with LLM-powered Autofix for developers

DryRun Security
freemium

AI-native SAST with contextual analysis of code, data flow, and architecture

Endor Labs
freemium

AI-native AppSec with full-stack reachability from code to container

GitHub Advanced Security
paid

Native GitHub code scanning, secret scanning, and Copilot Autofix

GitLab Application Security
paid

GitLab-native SAST, DAST, and AI vulnerability summaries via Duo

Mobb
freemium

AI-driven auto-remediation that fixes findings from existing SAST tools

Pixee
freemium

Automated security remediation priced per vulnerability fixed

Plexicus
freemium

AI-powered ASPM and CNAPP with the Codex Remedium remediation agent

Qwiet AI
paid

AI SAST and SCA using a Code Property Graph and reachability analysis to find and fix flaws

Semgrep
open-source

Fast, open-source static analysis with semantic pattern matching and AI-assisted rules

Sonar
freemium

Code quality and SAST platform with AI CodeFix for bugs, vulnerabilities, and AI-written code

SonarQube
freemium

Code quality and SAST platform with AI Code Assurance and AI CodeFix

Veracode
paid

Enterprise AppSec with Veracode Fix for AI-generated remediation

Xygeni
paid

AI-powered AppSec covering SAST, supply chain, IaC, and secrets

ZeroPath
paid

AI-native SAST that converts findings into executable code fixes