Subcategory

Sca

22 tools
Aikido Security
freemium

All-in-one AppSec platform with AI AutoFix for SAST, IaC, and secrets

Arnica
freemium

Real-time AppSec platform with hybrid deterministic and AI SAST

Backslash Security
paid

Reachability-based AppSec with AI-powered attack path remediation

Checkmarx
paid

Enterprise AppSec platform with agentic Assist agents for code, triage, and remediation

Checkmarx SCA
paid

Software composition analysis with agentic AI remediation

Corgea
freemium

AI SAST that auto-fixes vulnerabilities via pull request

Debricked
freemium

Machine-learning software composition analysis for dependency security and license compliance

DepsHub
freemium

AI-powered dependency management and automated updates

Endor Labs
freemium

AI-native AppSec with full-stack reachability from code to container

Mend
paid

Unified application and AI security platform with SCA, SAST, and AI-powered remediation

Mend.io
paid

AI-assisted application security platform combining SCA, SAST, and AI security

OX Security
paid

Active ASPM platform with AI-driven prioritization from code to cloud

Phylum
paid

Software supply chain risk analysis with ML-based malicious package detection

Qwiet AI
paid

AI SAST and SCA using a Code Property Graph and reachability analysis to find and fix flaws

Rafter
freemium

SaaS security platform that scans SAST, SCA, and secrets on every commit

Snyk
freemium

Developer-first security platform for finding and fixing open-source vulnerabilities

Socket
freemium

Supply chain security that blocks malicious dependencies at install time

Sonar SCA
paid

SCA built into SonarQube with AI CodeFix for vulnerable dependencies

Sonatype Lifecycle
paid

Enterprise SCA with AI-generated upgrade pull requests

Trace-AI
freemium

Predictive supply-chain security using metadata analysis of dependencies and maintainers

Veracode
paid

Enterprise AppSec with Veracode Fix for AI-generated remediation

Vulert
freemium

AI-driven SCA that monitors manifests without code access