Application Security

Risk Assessment

DerSecur Software Composition Analysis (SCA) on SecurityListing: SCA tool for SBOM generation, dependency analysis, and open-source risk mgmt.

API Security

Miggo WAF Copilot on SecurityListing: AI-powered WAF rule automation for instant vulnerability protection

API Security

Offensive 360 on SecurityListing: SAST tool using virtual compilers to analyze source code for vulnerabilities

Secure Code Training

Hacksplaining on SecurityListing: Comprehensive security training platform for web developers, offering hands-on experience with real, vulnerable applications and concrete advice for securing code.

Security Scanning

DeepSource SAST on SecurityListing: SAST engine that scans code commits for security vulnerabilities

Vulnerability Assessment

Invicti Software Composition Analysis on SecurityListing: SCA tool with proof-based validation and runtime analysis for open-source risks

API Security

Citrix NetScaler on SecurityListing: Application delivery controller for optimizing app performance and security

API Security

Flyingduck Software Composition Analysis on SecurityListing: SCA tool for identifying & resolving vulnerabilities in dependencies

Static Application Security Testing

Delphos Labs Analyze on SecurityListing: AI-powered reverse engineering tool for analyzing compiled binaries

API Security

Miggo Security Observability on SecurityListing: Runtime app security observability platform with attack path detection

Container Security

Conviso AppScan on SecurityListing: Orchestrates and centralizes app security testing results from multiple scanners

Vulnerability Assessment

Acunetix Vulnerability Scanner on SecurityListing: A comprehensive web application security testing solution that offers built-in vulnerability assessment and management, as well as integration options with popular software development tools.

Dynamic Application Security Testing

N-Stalker on SecurityListing: A web security tool that scans for vulnerabilities and known attacks.

Container Security

Anchore Enterprise on SecurityListing: Anchore Enterprise is a platform that protects and secures software supply chains end-to-end.

Penetration Testing

ISE Vulnerability Assessment Services on SecurityListing: Manual vulnerability assessment services with custom exploit development

Dynamic Application Security Testing

Caido on SecurityListing: A lightweight web security auditing toolkit that simplifies security tasks and enhances productivity.

Container Security

BoostSecurity Continuous AppSec Testing on SecurityListing: Continuous AppSec testing platform with zero-touch provisioning for CI/CD

Threat Intelligence Platforms

Ossprey on SecurityListing: Ossprey is a software supply chain security platform that uses AI-powered scanning to detect malicious open source code and prevent supply chain attacks through automated policy enforcement and dependency analysis.

Penetration Testing

Conviso Platform on SecurityListing: AppSec platform for managing application security posture with consulting services

Software Composition Analysis

BoostSecurity Software Supply Chain Protection on SecurityListing: Software supply chain security platform for SDLC infrastructure protection

Application Security Posture Management

Heeler Response Orchestration on SecurityListing: Automates vulnerability remediation workflows between security and dev teams

Static Application Security Testing

DARPA Bin2Math on SecurityListing: Extracts mathematical algorithms from binary programs for CPS analysis.

Application Security Posture Management

Miggo Prove Next-Gen Runtime Vulnerability Prioritization on SecurityListing: Runtime vulnerability prioritization using code execution and attack path analysis

Static Application Security Testing

Offensive 360 O360 on SecurityListing: SAST tool using virtual compilers to analyze source code for vulnerabilities

API Security

Operant Cloud Application Detection and Response on SecurityListing: Runtime CADR platform for API security, K8s protection, and L7+ visibility

API Security

Plexicus ASPM on SecurityListing: ASPM platform with automated remediation for code, dependencies, IaC, and APIs

API Security

F5 NGINX App Protect on SecurityListing: A lightweight web application firewall that protects modern applications and APIs across distributed architectures with integrated DoS protection, bot defense, and DevOps-friendly deployment options.

Static Application Security Testing

Vidoc Security on SecurityListing: VIDOC is an AI-powered security tool that automates code review, detects and fixes vulnerabilities, and monitors external security, ensuring the integrity of both human-written and AI-generated code in software development pipelines.

Vulnerability Assessment

Paros on SecurityListing: A Java based HTTP/HTTPS proxy for assessing web application vulnerability with various useful features.

Software Composition Analysis

Phylum on SecurityListing: Identifies 137 malicious npm packages and gathers system information to a remote server.

Secure Code Training

The Matasano Crypto Challenges on SecurityListing: A set of 48 practical programming exercises in cryptography and application security

Security Information and Event Management

Dynatrace on SecurityListing: Unified observability and security platform with AI-powered analytics

Container Security

MatosSphere Software Composition Analysis on SecurityListing: SCA tool for detecting vulnerabilities & license risks in open-source deps

API Security

Penta Security WAPPLES on SecurityListing: Web application firewall protecting enterprise web apps and APIs

Risk Assessment

OctoXLabs CAASM on SecurityListing: CAASM platform for asset discovery, vulnerability mgmt, and inventory tracking

Mobile App Security

App Detonator on SecurityListing: A tool for dynamic analysis of mobile applications in a controlled environment.

Mobile App Security

class-dump on SecurityListing: A command-line utility for examining Objective-C runtime information in Mach-O files and generating class declarations.

Dynamic Application Security Testing

Boman.ai AppSec Tool on SecurityListing: ASPM platform for monitoring, prioritizing, and remediating risks across SDLC

VPN

Huawei MDM Security on SecurityListing: Enterprise mobile device & app management platform for BYOD, COPE, and COBO

API Security

F5 BIG-IP Advanced WAF on SecurityListing: WAF protecting apps and APIs from attacks, bots, and OWASP Top 10 threats

API Security

Ammune API Discovery on SecurityListing: API security platform with discovery, WAF, bot protection, and DDoS defense

Software Composition Analysis

FossID Software Composition Analysis on SecurityListing: SCA tool for code scanning, license identification, and SBOM generation

Dynamic Application Security Testing

Heeler ASPM on SecurityListing: ASPM platform that correlates security findings and reduces alert noise by 99%

Container Security

Kodem C.O.R.E. on SecurityListing: Unified engine correlating static & runtime analysis for app security

API Security

Impart on SecurityListing: A web application firewall and API security platform that combines API discovery, runtime protection, vulnerability testing, and security posture management.

Software Composition Analysis

DeepSource SCA on SecurityListing: SCA platform with reachability analysis, AI-powered fixes, and license compliance

Application Security Posture Management

StepSecurity on SecurityListing: StepSecurity is a platform that enhances GitHub Actions security by providing network egress control, risk discovery, action replacement, and security best practices orchestration.

Software Composition Analysis

Flyingduck Secure Every Commit on SecurityListing: Commit-level code security scanning for vulnerabilities, secrets, and licenses

API Security

Jsmon 2.0 on SecurityListing: JavaScript security scanner for detecting vulnerabilities in third-party scripts

Penetration Testing

Strobes ASPM on SecurityListing: A threat exposure management platform that unifies security operations by discovering assets, prioritizing vulnerabilities based on risk, and providing guided remediation across an organization's attack surface.

Threat Intelligence Platforms

Heeler Runtime, Fixability-First SCA on SecurityListing: Runtime SCA tool prioritizing fixable & exploitable open-source vulnerabilities

Next-Generation Firewalls

F5 BIG-IP Local Traffic Manager on SecurityListing: Application delivery controller with load balancing and traffic management

Static Application Security Testing

SearchCode on SecurityListing: SearchCode is an extensive code search engine that indexes 75 billion lines of code from millions of projects to help developers find coding examples and libraries.

Security Scanning

DeepSource IaC Security on SecurityListing: IaC security scanner that detects misconfigurations in infrastructure code

Static Application Security Testing

Arnica on SecurityListing: Arnica is an application security platform that offers real-time scanning, risk mitigation, and management across various aspects of the software development lifecycle.

Dynamic Application Security Testing

Miggo Security on SecurityListing: Application monitoring and security platform that provides runtime visibility, threat detection, and automated response capabilities for application-layer security

API Security

Cequence CQAI on SecurityListing: AI-powered API threat detection using behavioral fingerprinting & threat intel

Software Composition Analysis

Finite State Platform on SecurityListing: Platform for vulnerability detection in firmware, binaries, and SBOMs

Dynamic Application Security Testing

GuardRails on SecurityListing: DevSecOps platform for vulnerability detection and developer security training

Software Composition Analysis

Raven Runtime Prevention on SecurityListing: Runtime protection preventing supply-chain attacks & exploits via library-level policies

Security Scanning

Qualys Web Application Scanning (WAS) on SecurityListing: A cloud-based DAST solution that discovers, inventories, and tests web applications and APIs for security vulnerabilities across diverse environments.

Dynamic Application Security Testing

DigitSec Automated Application Security Testing on SecurityListing: Automated app security testing platform for Salesforce and B2C Commerce

Penetration Testing

PortSwigger on SecurityListing: A comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities and improving security posture.

Static Application Security Testing

DerSecur DerScanner on SecurityListing: SAST tool that scans source code and binaries for security vulnerabilities

API Security

Ghost Security Exorcist on SecurityListing: AI-driven code analysis tool for API discovery and vulnerability detection

Static Application Security Testing

Entropy Source Evaluation on SecurityListing: Using high-quality entropy sources for CSPRNG seeding is crucial for security.

Application Security Posture Management

Layer Seven Security Cybersecurity Extension for SAP Solutions on SecurityListing: Cybersecurity protection platform for SAP systems including S/4HANA and HANA

API Security

Akto Agentic AI Security Benchmark 2025 on SecurityListing: AI-powered API security platform for discovery, testing, and protection

Container Security

BoostSecurity Secrets Detection on SecurityListing: Scans source code and containers for 130+ types of hardcoded secrets

Software Composition Analysis

Endor Labs Application Security on SecurityListing: AI-powered AppSec platform for code, dependencies, and container security

API Security

Equixly The Agentic AI Hacker on SecurityListing: AI-powered API security testing platform for continuous vulnerability scanning

API Security

Operant AI API Threat Protection on SecurityListing: Runtime API threat protection for Kubernetes environments with discovery

API Security

Cequence API Security on SecurityListing: API security platform for discovery, testing, and protection of APIs

API Security

Ostorlab Mobile Security on SecurityListing: Mobile security testing platform for Android and iOS apps with SAST and DAST

Mobile App Security

SmaliHook on SecurityListing: Original SmaliHook Java source for Android cracking and reversing.

Penetration Testing

AppUse on SecurityListing: A VM for mobile application security testing, Android and iOS applications, with custom-made tools and scripts.

Risk Assessment

Koi Platform on SecurityListing: Tracks, governs, and secures software installs across endpoints and marketplaces.

Threat Intelligence Platforms

Heeler Runtime Threat Modeling on SecurityListing: AI-powered continuous threat modeling for cloud applications in runtime

Application Security Posture Management

Invicti ASPM on SecurityListing: ASPM platform for vulnerability mgmt, deduplication, triage & remediation

API Security

Detectify API Scanning on SecurityListing: Dynamic API vulnerability scanner with payload-based testing and fuzzing

Software Composition Analysis

Flyingduck Code Security Intelligence on SecurityListing: SAST tool that detects logical flaws and business logic vulnerabilities

Software Composition Analysis

pac-resolver on SecurityListing: Pac-resolver, a popular NPM package with 3 million weekly downloads, has a severe remote code execution flaw.

Static Application Security Testing

DeepSource Autofix™ AI on SecurityListing: AI-powered code cleanup tool that automatically fixes security and quality issues

API Security

APIsec API Security on SecurityListing: AI-powered API security testing platform with continuous attack simulation

Penetration Testing

PentesterLab Master Advanced Web Hacking on SecurityListing: Online platform for web app security training via hands-on labs and code review

Threat Intelligence Platforms

DBAppSecurity DAS Web Application Firewall on SecurityListing: WAF protecting websites and web apps from OWASP Top 10 and zero-day attacks

API Security

OWASP API Security Top 10 on SecurityListing: A community website for API security news, vulnerabilities, and best practices

Dynamic Application Security Testing

Wapiti on SecurityListing: Web-application vulnerability scanner with extensive coverage of security testing modules.

Risk Assessment

BoostSecurity ASPM on SecurityListing: ASPM platform for monitoring and hardening app security across SDLC

Vulnerability Assessment

DerScanner Mobile Application Security Testing (MAST) on SecurityListing: Mobile app security testing platform for Android and iOS apps

Container Security

Jit on SecurityListing: An integrated application security platform that combines multiple security scanning tools with developer-focused workflows for automated code and infrastructure security testing.

API Security

Levo Runtime Application Security on SecurityListing: Runtime application security platform for API and AI stack protection

API Security

StackHawk on SecurityListing: A DAST solution that performs automated security testing of APIs and web applications within development workflows and CI/CD pipelines.

Application Security Posture Management

Boman.ai Boman on SecurityListing: AI-powered application security platform with automated scanning and analytics

Static Application Security Testing

SonarSource SonarQube Cloud on SecurityListing: Cloud-based SAST platform for code quality and security analysis

Software Composition Analysis

SonarSource Advanced Security on SecurityListing: SAST and SCA platform for code security analysis with taint analysis

API Security

Cequence Bot Management on SecurityListing: Bot detection and mitigation platform for web, mobile, and API applications

Risk Assessment

SCANOSS Geo Provenance Dataset on SecurityListing: Identifies geographic origin and authorship of open source code components

Dynamic Application Security Testing

DerScanner Dynamic Application Security Testing (DAST) on SecurityListing: DAST tool that scans live web apps to detect vulnerabilities in real-time

API Security

Traceable AppSec on SecurityListing: Platform for API & app security with discovery, testing, and protection

API Security

Wallarm API Security on SecurityListing: Unified API and AI security platform for discovery, protection, and testing

Static Application Security Testing

DryRun Security AppSec Agents on SecurityListing: AI-native SAST tool providing contextual code security analysis in pull requests

Application Security Posture Management

SaltWorks SaltMiner on SecurityListing: AppSec posture mgmt platform for aggregating & reporting app security data

API Security

TeejLab API Discovery Manager on SecurityListing: API discovery, security, governance & lifecycle mgmt platform for enterprises

API Security

Sense Defence AI Bot Protection on SecurityListing: AI-powered bot detection and management solution for web applications

Privileged Access Management

Securden Endpoint Privilege Manager on SecurityListing: Endpoint privilege mgmt solution for removing local admin rights on endpoints

Offensive Security

Bugstrix is a cybersecurity firm that proactively identifies and fixes vulnerabilities to protect systems from threats and attacks.

Application Security

Force-multiply your AppSec program with Apiiro’s diamond-grade application security posture management (ASPM) platform.

Threat Intelligence Platforms

Phoenix Security ASPM on SecurityListing: ASPM platform with CNAPP integration for vulnerability prioritization & context

Application Security

Accurate and automated application security testing that scales like no other solution. Secure thousands of websites, applications, and APIs with the industry’s only DAST-first AppSec platform.

API Security

Sansec Shield on SecurityListing: Web application firewall for Magento/Adobe Commerce stores

Risk Assessment

Onapsis SAP Cybersecurity Solution on SecurityListing: SAP-focused cybersecurity platform for vulnerability mgmt and threat detection

Application Security

Agentic AppSec platform for code-to-cloud application security testing - SAST, SCA, ASPM. See Checkmarx One; get a demo.

API Security

Invicti API Security on SecurityListing: API security testing platform with discovery, scanning, and remediation

Risk Assessment

SCANOSS Encryption Dataset on SecurityListing: Identifies cryptographic algorithms and libraries in code for compliance

API Security

Fastly API Security on SecurityListing: API security platform for discovery, monitoring, and protection at edge

Static Application Security Testing

Amplify Security Fix Your Code on SecurityListing: Automated vulnerability remediation tool that fixes code security issues

Container Security

Anchore Secure on SecurityListing: Container & source code scanning for vulnerabilities, malware, and secrets

API Security

TrustCaptcha on SecurityListing: A privacy-focused CAPTCHA alternative that protects websites from bot attacks using proof-of-work challenges and AI-based detection while maintaining GDPR compliance.

Application Security

We integrate AI, automated tools, and pentesters to continuously help your development team build secure software without delays.

Application Security

Adaptive application security for the AI era. Build and run secure software from code to cloud with Veracode.

Application Security

Cycode’s AI-native Application Security Platform unites security and development teams with actionable, code-to-runtime context to identify, prioritize, and fix the software risk that matters.

Application Security

Legit Security is the AI-native ASPM platform to detect, fix and prevent AppSec risk from AI-generated code, secrets, and critical vulnerabilities.

API Security

Cequence AI Gateway on SecurityListing: Unified platform for API security, bot management, and AI gateway protection

API Security

CloudDefense.AI QINA (App Security) on SecurityListing: DevSecOps platform for app security with SAST, DAST, SCA, and API testing

Exposure Management

Seemplicity Exposure Management on SecurityListing: Continuous threat exposure management platform for vulnerability remediation

Dynamic Application Security Testing

DerScanner Full Cycle Application Security Testing on SecurityListing: Full-cycle app security platform with SAST, DAST, MAST, SCA & binary analysis

Risk Assessment

DryRun Security Codebase Intelligence on SecurityListing: AI-native SAST tool with natural language query interface for codebase security

Static Application Security Testing

Software Improvement Group Sigrid® on SecurityListing: Software portfolio governance platform for code quality and security analysis

Vulnerability Assessment

The Code Registry Technical Due Diligence on SecurityListing: AI-powered code analysis platform for technical due diligence and audits

Static Application Security Testing

Offensive360 Offensive 360 Virtual Compiler on SecurityListing: AI-driven SAST tool using virtual compilers for source code analysis

API Security

SCANOSS Licence Dataset on SecurityListing: Open source license compliance dataset for detecting code snippets & obligations

API Security

Secure Blink ThreatSpy on SecurityListing: DAST platform for web app & API vulnerability scanning with AI-enabled features

Software Composition Analysis

The Code Registry Application & Supply Chain Security on SecurityListing: AI-driven app & supply chain security platform with SBOM generation & scanning

Security Awareness Training

Symbiotic Security on SecurityListing: Real-time AI-powered code security tool for IDE vulnerability detection & fix

API Security

Sense Defence Advanced Rate Limiting on SecurityListing: Advanced rate limiting solution for web apps and APIs with AI-driven controls

Static Application Security Testing

Perforce Klocwork on SecurityListing: Static code analyzer & SAST tool for C, C++, Java, JavaScript, Python, Kotlin

Static Application Security Testing

Pixee Pixeebot on SecurityListing: AI-powered automated code security remediation bot for vulnerability fixes

API Security

Syhunt SyhuntAPI on SecurityListing: API security testing tool for detecting vulnerabilities in web APIs

Static Application Security Testing

The Code Registry AI-Powered Code Intelligence on SecurityListing: AI-powered code analysis platform for security, quality, and developer insights

Secure Code Training

Secure Coding Guidelines for Java SE on SecurityListing: Guidelines for secure coding in Java SE to avoid bugs that could weaken security and open holes in Java's security features.

Secure Code Training

urandom vs. CSPRNG for Crypto Keys on SecurityListing: Utilize the kernel's CSPRNG for generating crypto keys instead of userspace CSPRNGs to avoid randomness failures.

API Security

Wallarm API Security Testing on SecurityListing: Automated API security testing tool integrated into CI/CD pipelines

Application Security Posture Management

WordPress WPMissionControl on SecurityListing: WordPress plugin for site monitoring, security scanning, and observability

Application Security Posture Management

WPMissionControl on SecurityListing: WordPress monitoring platform for uptime, security, and performance tracking

Software Composition Analysis

Raven Runtime SCA on SecurityListing: Runtime SCA tool that identifies exploitable vulnerabilities in cloud environments

Container Security

OX Application Security on SecurityListing: ASPM platform with Code Projection tech for SDLC risk prioritization

Container Security

Wiz Supply Chain Security on SecurityListing: Cloud-native SCA and SBOM platform for supply chain security across code to runtime

Static Application Security Testing

Variegate on SecurityListing: Source code diversification tool that creates program variants with diversity

Software Composition Analysis

Kodem Zero-waste Application Security on SecurityListing: AI-native AppSec platform for code-to-runtime security with automated triaging

Software Composition Analysis

MergeBase Software Composition Analysis on SecurityListing: SCA platform for managing open source vulnerabilities across SDLC

Database Security

Penta Security Encryption on SecurityListing: Data encryption solutions for protecting data at rest and in transit

API Security

Prophaze Advanced AI-Based App & API Security on SecurityListing: AI-based app & API security platform with WAF, DDoS protection, and bot mitigation

API Security

Prophaze API Security on SecurityListing: AI-powered API security platform with threat detection and discovery

Cloud Application Detection and Response

Raven Runtime ADR on SecurityListing: Runtime detection & response for cloud workloads and application libraries

Container Security

Raven Runtime Application Protection on SecurityListing: Runtime app protection with function-level reachability and exploit prevention

Threat Intelligence Platforms

SaltyCloud Dorkbot on SecurityListing: Automated web vulnerability scanner for SQLi, XSS, and other web app flaws

ALPHA DS

AI Security

ALPHA DS is a focused cybersecurity service provider offering strategic consultancy and tailored information security solutions across networks, applications, data, endpoints, and OT/ICS/IOT environme

Static Application Security Testing

CodeThreat AI-Native AppSec Platform on SecurityListing: AI-native AppSec platform for code security analysis and vulnerability detection

Dynamic Application Security Testing

Heeler Application Security Lifecycle Management on SecurityListing: ASPM platform for tracking app security risks from development to deployment

API Security

SCANOSS Security Dataset on SecurityListing: Vulnerability detection dataset for declared & undeclared dependencies in code

Static Application Security Testing

Offensive 360 Secure Code Analysis on SecurityListing: SAST tool that analyzes source code for vulnerabilities using virtual compilers

Security Information and Event Management

Sumo Logic Monitoring and Troubleshooting on SecurityListing: Log analytics platform for monitoring, troubleshooting, and issue detection

API Security

Sucuri Website Firewall on SecurityListing: Cloud-based WAF protecting websites from attacks, DDoS, and exploits

API Security

Invicti DAST on SecurityListing: DAST scanner with proof-based vulnerability validation and CI/CD integration

Exposure Management

Seemplicity Actionable Exposure Management on SecurityListing: Platform for prioritizing and remediating security exposures across tools

Security Scanning

SonarQube Server on SecurityListing: A self-managed static code analysis platform that conducts continuous inspection of codebases to identify security vulnerabilities, bugs, and code quality issues.

Software Composition Analysis

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus on SecurityListing: A developer added malicious code to a popular open-source package, wiping files on computers in Russia and Belarus as a protest.

Software Composition Analysis

Flyingduck Comprehensive SBOM Management on SecurityListing: SBOM management platform for tracking dependencies and vulnerabilities

Static Application Security Testing

Sonarsource SonarQube IDE on SecurityListing: IDE plugin for real-time code quality and security issue detection

API Security

VulnSign Dynamic Application Security Testing on SecurityListing: DAST tool for scanning web apps, microservices, and APIs for vulnerabilities