A tool designed to find common security issues in Python code. By statically analyzing the source code, it helps developers identify security weaknesses and vulnerabilities in Python applications.
Bearer CLI is a static application security testing (SAST) tool that scans your source code and analyzes your data flows to discover, filter and prioritize security and privacy risks.
A static analysis tool that scans Ruby on Rails applications for security vulnerabilities, helping developers to secure their Ruby applications by identifying a wide range of security issues.
A static application security testing (SAST) solution that identifies security vulnerabilities in the source code early in the software development lifecycle, promoting secure coding practices.
An extended functionality of the Checkmarx Scan that provides a detailed report on the vulnerabilities identified, helping teams to get a deeper understanding of the security issues in their code.
A tool that facilitates the visualization and management of reports generated by the CodeChecker static analysis tool, helping developers to identify and manage vulnerabilities more effectively.
A tool that integrates with the software development lifecycle to continuously identify vulnerabilities in real time, both in custom code and open-source libraries, improving the security of your applications.
An API for the Coverity software, which facilitates the integration of Coverity's static code analysis tool into various environments and workflows, enabling automated vulnerability detection and reporting.
This DefectDojo parser accepts JSON files created from the Synopsys Coverity CLI.
A tool that scans codebases for accidentally committed sensitive information such as passwords and secrets, helping to prevent security breaches by identifying and removing sensitive data from code repositories.
An open-source static analysis security scanner specifically designed for Ruby written web applications, helping developers identify security issues in the early stages of development.
A tool aimed at detecting secrets and sensitive information, like passwords and API keys, that may have been accidentally committed into the code repository, helping to prevent security breaches due to leaked credentials.
A tool for identifying and fixing problems in JavaScript code through static analysis, helping developers maintain a high code quality and adhere to best practices, which can indirectly help in maintaining a good security posture.
A tool that scans code repositories for secrets and potential security vulnerabilities, assisting in the prevention of sensitive data leakage and enhancing the security posture of development environments.
A scan leveraged by GitHub to automatically identify vulnerabilities in the repositories, helping developers to secure their code by alerting them to potential security issues identified in the dependencies.
A GitLab feature that provides Static Application Security Testing (SAST), analyzing source code for known vulnerabilities early in the development cycle, promoting secure coding practices.
A GitLab service that scans repository histories for secrets and sensitive information that should not be there, helping to prevent security incidents by identifying potentially compromised credentials.
An open-source tool that scans Git repositories for secrets and other sensitive information that might have been accidentally committed, aiding in the prevention of data leaks and other security issues.
A Golang security checker that inspects Go source code to identify security flaws and other issues through static analysis, helping developers to maintain secure and reliable Go codebases.
An open-source tool used for identifying vulnerabilities in the source code during the development process, helping teams to maintain a high-security standard in their applications by catching issues early on.
A tool designed to perform network logon cracking, helping security professionals and ethical hackers to identify weak passwords and potential vulnerabilities in network authentication mechanisms.
A tool that scans project dependencies to identify known security vulnerabilities and license issues, helping teams to maintain secure and compliant code by managing their third-party dependencies effectively.
A tool by Mozilla that helps developers, sysadmins, and security researchers to analyze and improve the security of their web servers and web applications by scanning them for known best practices and common misconfigurations.
A security scanning solution that focuses on identifying vulnerabilities in Node.js applications, helping developers to maintain secure JavaScript and Node.js codebases.
Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data. It is useful both for offensive and defensive security testing.
A tool leveraging OpenSCAP library, used for scanning hosts to identify vulnerabilities based on known CVEs and configuration issues, aiding organizations in maintaining secure and compliant environments.
An auditing tool designed to analyze PHP applications for security vulnerabilities, using a set of predefined rules to identify potential security risks and help maintain secure PHP codebases.
A source code analyzer for Java, JavaScript, Salesforce.com Apex, PL/SQL, XML, XSL and others, used to detect coding issues, potential bugs, and other discrepancies in code bases, encouraging the maintenance of high-quality code.
This parser imports the Progpilot SAST JSON output.
A Static Application Security Testing (SAST) tool by PWN which analyzes source code to identify security vulnerabilities early in the development process, helping to maintain secure applications.
A Ruby static code analyzer based on the community Ruby style guide, aiding Ruby developers in maintaining clean and idiomatic Ruby code by identifying and optionally fixing style issues and bugs in Ruby programs.
A security scanning tool that identifies secrets and credentials in codebases, leveraging various scanning techniques to help organizations find and mitigate potential security risks arising from hardcoded secrets in their applications.
A report generated by Semgrep, a customizable, open-source code scanning tool, that outlines the findings in a JSON format, facilitating integration with other tools and in-depth analysis of the scan results.
A tool that identifies and fixes vulnerabilities and license violations in open-source dependencies and container images, helping to secure the application and its open-source components.
A feature in SonarQube that allows for the importation of data via its API, facilitating integration with other tools and enabling organizations to leverage SonarQube’s static code analysis capabilities in diverse environments.
A static code analysis solution that detects bugs, vulnerabilities, and code smells in source code, helping development teams to maintain high code quality and secure applications.
An extended feature of the SonarQube scan that provides detailed reports on the source code analysis, offering in-depth insights and facilitating a comprehensive understanding of the codebase’s health.
A static code analysis tool used to identify bugs in Java code, helping developers maintain high-quality code by finding and fixing bugs early in the development process.
A tool that identifies potential secrets in the code before it is pushed to the repository, helping to prevent secret leakage and maintain secure codebases.
A Python tool that searches through git repositories for high entropy strings, which often indicate secret keys, helping to prevent secrets leakage in codebases.
An iteration of the Trufflehog scanner with additional features and improvements, offering enhanced performance in identifying secrets and sensitive information in code repositories.
A tool that scans code repositories for vulnerabilities using various plugins and integrations, helping organizations to identify and remediate vulnerabilities in their codebases.
An open-source web application vulnerability scanner that identifies various vulnerabilities by “black-box” testing, helping organizations secure their web applications against different threats.
A static code analysis tool that identifies hard-coded secrets and sensitive information in source code, helping to prevent security issues arising from secret leakage.
A static code analysis tool that identifies security vulnerabilities in web applications, aiding developers in finding and fixing security issues in the early stages of development.
Get Started Today