SAST
ALL OF YOUR STATIC SCANNERS. NONE OF THE NOISE.
Every static scanner you run, distilled into findings worth fixing.
DefectDojo parses every major static analysis tool into one data model, so results from different scanners are finally comparable. Run one SAST tool or five; the findings land in the same deduplicated queue.
All Integrations73 Integration Guides
Every SAST Tool We Parse
If your scanner writes a report, DefectDojo reads it. Browse the full SAST catalog below; every parser normalizes into the same finding model.
2ms (too many secrets)
SAST
View integration
Ansible Lint
SAST
View integration
APKLeaks
SAST
View integration
Bandit
SAST
View integrationBearer CLI
SAST
View integration
Brakeman
SAST
View integration
Checkmarx One
Cloud and Container
View integration
Codacy
SAST
View integration
Codechecker
SAST
View integrationCodeQL
SAST
View integrationContrast Security
SAST
View integrationCredScan
SAST
View integration
cwe_checker
SAST
View integrationDawnScanner
SAST
View integration
DeepSource
SAST
View integrationDetect-secrets
SAST
View integration
DevSkim
SAST
View integration
Dodgy
SAST
View integrationESLint
SAST
View integration
Fickling
SAST
View integration
firmwalker
SAST
View integration
Fortify
SAST
View integrationGitGuardian Ggshield
SAST
View integrationGitHub Advanced Security
SAST
View integrationGitLab
Cloud and Container
View integrationGitleaks
SAST
View integration
Gosec
SAST
View integration
Horusec
SAST
View integration
Kingfisher
SAST
View integration
Kiuwan
SAST
View integration
Klocwork
SAST
View integrationKrakenD
SAST
View integrationLegitify
SAST
View integration
MobSF
SAST
View integration
n0s1
SAST
View integration
Noir
SAST
View integration
Nosey Parker
SAST
View integration
NowSecure
DAST
View integration
Ostorlab
DAST
View integration
Parasoft DTP
SAST
View integrationPHP Security Audit v2
SAST
View integration
PHPStan
SAST
View integration
PMD
SAST
View integration
Progpilot
SAST
View integration
Prospector
SAST
View integration
Psalm
SAST
View integration
PWN Security Automation Framework
SAST
View integration
Python Taint
SAST
View integration
QARK
SAST
View integration
Quark-Engine
SAST
View integration
Qwiet AI
SAST
View integration
ReversingLabs
SCA
View integration
Rubocop
SAST
View integration
Rusty Hog
SAST
View integration
Scantist
SCA
View integration
Secretlint
SAST
View integrationSemgrep
SAST
View integration
Slither
SAST
View integration
Solar Appscreener
SAST
View integrationSonarQube
SAST
View integration
SOOS
SCA
View integration
SpotBugs
SAST
View integrationStaticcheck
SAST
View integrationSynopsys Coverity
SAST
View integration
Talisman
SAST
View integration
Tartufo
SAST
View integration
Trufflehog
SAST
View integrationVeracode
SAST
View integrationVisual Code Grepper (VCG)
SAST
View integrationWhispers
SAST
View integrationXanitizer
SAST
View integration
Xygeni
SAST
View integration
Zimperium zScan
SAST
View integration