Best SonarSource Advanced Security alternatives & competitors

BoostSecurity Software Supply Chain Protection

BoostSecurity Software Supply Chain Protection on SecurityListing: Software supply chain security platform for SDLC infrastructure protection

DeepSource SCA

DeepSource SCA on SecurityListing: SCA platform with reachability analysis, AI-powered fixes, and license compliance

Flyingduck Secure Every Commit

Flyingduck Secure Every Commit on SecurityListing: Commit-level code security scanning for vulnerabilities, secrets, and licenses

Raven Runtime Prevention

Raven Runtime Prevention on SecurityListing: Runtime protection preventing supply-chain attacks & exploits via library-level policies

Finite State Platform

Finite State Platform on SecurityListing: Platform for vulnerability detection in firmware, binaries, and SBOMs

Phylum

Phylum on SecurityListing: Identifies 137 malicious npm packages and gathers system information to a remote server.

FossID Software Composition Analysis

FossID Software Composition Analysis on SecurityListing: SCA tool for code scanning, license identification, and SBOM generation

Endor Labs Application Security

Endor Labs Application Security on SecurityListing: AI-powered AppSec platform for code, dependencies, and container security

pac-resolver

pac-resolver on SecurityListing: Pac-resolver, a popular NPM package with 3 million weekly downloads, has a severe remote code execution flaw.

Flyingduck Code Security Intelligence

Flyingduck Code Security Intelligence on SecurityListing: SAST tool that detects logical flaws and business logic vulnerabilities

Wiz Unified Security

Wiz Unified Security on SecurityListing: Unified security platform for code, CI/CD, and cloud environments

Raven Runtime SCA

Raven Runtime SCA on SecurityListing: Runtime SCA tool that identifies exploitable vulnerabilities in cloud environments

MergeBase Software Composition Analysis

MergeBase Software Composition Analysis on SecurityListing: SCA platform for managing open source vulnerabilities across SDLC

The Code Registry Application & Supply Chain Security

The Code Registry Application & Supply Chain Security on SecurityListing: AI-driven app & supply chain security platform with SBOM generation & scanning

Flyingduck Comprehensive SBOM Management

Flyingduck Comprehensive SBOM Management on SecurityListing: SBOM management platform for tracking dependencies and vulnerabilities

Kodem Zero-waste Application Security

Kodem Zero-waste Application Security on SecurityListing: AI-native AppSec platform for code-to-runtime security with automated triaging

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus on SecurityListing: A developer added malicious code to a popular open-source package, wiping files on computers in Russia and Belarus as a protest.