Horusec

Horusec is an open-source static application security testing (SAST) tool that orchestrates multiple security analyzers to identify vulnerabilities, security flaws, and exposed secrets across source code, configuration files, and Git history for over 20 programming languages including C#, Java, Python, Ruby, Go, JavaScript, TypeScript, PHP, Kotlin, and infrastructure as code formats like Terraform and Kubernetes. The platform provides customizable security scanning through CLI, IDE extensions, and CI/CD pipeline integration with detailed vulnerability reports, severity ratings, false positive management, and remediation recommendations to enable developers and DevSecOps teams to detect and address security issues throughout the software development lifecycle.