Top 20 products relevant to Code Analysis and Security

Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.

Open Source

Veracode's application security software products are simpler and more scalable to increase the resiliency of your application infrastructure.

Bearer is an open source, fast and accurate static application security testing (SAST) tool that analyze your source code to discover, filter and prioritize security and privacy risks.

Open Source freemium

CloudSploit provides continuous security monitoring, detailed reports, and risk detection for cloud...

Automated cryptographic security auditing for applications.

Open source license compliance and dependency analysis.

Open Source

OWASP Dependency-Track is an intelligent Software Composition Analysis (SCA) platform that allows...

Open Source

Black Duck Software Composition Analysis (SCA) provides a solution for managing open source security, quality, and license compliance risks that comes from the use of open source and third-party code.

Combines a powerful Code Editor together with an impressive array of static analysis tools that will change the way you work with code.

paid Free Trial

FlexNet Code Insight is a single integrated solution for open source license compliance and security. Take control of your open source software management.

Dependency-Check is a utility that identifies project dependencies and checks if there are any...

Open Source

JFrog Xray is a universal software composition analysis (SCA) solution that natively integrates with Artifactory.

Semgrep is a fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time.

Open Source

MyGet allows you to create and host your own NuGet feed.

ScanCode is a suite of utilities used to scan a codebase for license, copyright and other...

DeployHub® is a free, agentless & hosted microservice platform to catalog, publish, version & deploy reusable components.

WhiteHat Sentinel Source is a static application security testing (SAST) platform that scans your entire source code & identifies vulnerabilities.

OWASP dependency-check is open-source and can be used to scan Java and .NET applications via the CLI or using plugins.Read articles Continuous Security with OWASP Dependency Check and Integrating OWASP Dependency Check with Jenkins to CI/CD.

Gemalto SafeNet KeySecure is a centralized cryptographic key management platform.

Take a tour of Nexus Auditor - Always know the truth about the things inside your software. Continuously monitor applications in production.