SAST

ALL OF YOUR STATIC SCANNERS. NONE OF THE NOISE.

Every static scanner you run, distilled into findings worth fixing.

DefectDojo parses every major static analysis tool into one data model, so results from different scanners are finally comparable. Run one SAST tool or five; the findings land in the same deduplicated queue.

All Integrations73 Integration Guides

Every SAST Tool We Parse

If your scanner writes a report, DefectDojo reads it. Browse the full SAST catalog below; every parser normalizes into the same finding model.

2ms (too many secrets)

SAST

View integration

Ansible Lint

SAST

View integration

APKLeaks

SAST

View integration

Bandit

SAST

View integration

Bearer CLI

SAST

View integration

Brakeman

SAST

View integration

Checkmarx One

Cloud and Container

View integration

Codacy

SAST

View integration

Codechecker

SAST

View integration

CodeQL

SAST

View integration

Contrast Security

SAST

View integration

CredScan

SAST

View integration

cwe_checker

SAST

View integration

DawnScanner

SAST

View integration

DeepSource

SAST

View integration

Detect-secrets

SAST

View integration

DevSkim

SAST

View integration

Dodgy

SAST

View integration

ESLint

SAST

View integration

Fickling

SAST

View integration

firmwalker

SAST

View integration

Fortify

SAST

View integration

GitGuardian Ggshield

SAST

View integration

GitHub Advanced Security

SAST

View integration

GitLab

Cloud and Container

View integration

Gitleaks

SAST

View integration

Gosec

SAST

View integration

Horusec

SAST

View integration

Kingfisher

SAST

View integration

Kiuwan

SAST

View integration

Klocwork

SAST

View integration

KrakenD

SAST

View integration

Legitify

SAST

View integration

MobSF

SAST

View integration

n0s1

SAST

View integration

Noir

SAST

View integration

Nosey Parker

SAST

View integration

NowSecure

DAST

View integration

Ostorlab

DAST

View integration

Parasoft DTP

SAST

View integration

PHP Security Audit v2

SAST

View integration

PHPStan

SAST

View integration

PMD

SAST

View integration

Progpilot

SAST

View integration

Prospector

SAST

View integration

Psalm

SAST

View integration

PWN Security Automation Framework

SAST

View integration

Python Taint

SAST

View integration

QARK

SAST

View integration

Quark-Engine

SAST

View integration

Qwiet AI

SAST

View integration

ReversingLabs

SCA

View integration

Rubocop

SAST

View integration

Rusty Hog

SAST

View integration

Scantist

SCA

View integration

Secretlint

SAST

View integration

Semgrep

SAST

View integration

Slither

SAST

View integration

Solar Appscreener

SAST

View integration

SonarQube

SAST

View integration

SOOS

SCA

View integration

SpotBugs

SAST

View integration

Staticcheck

SAST

View integration

Synopsys Coverity

SAST

View integration

Talisman

SAST

View integration

Tartufo

SAST

View integration

Trufflehog

SAST

View integration

Veracode

SAST

View integration

Visual Code Grepper (VCG)

SAST

View integration

Whispers

SAST

View integration

Xanitizer

SAST

View integration

Xygeni

SAST

View integration

Zimperium zScan

SAST

View integration