Static security code scanner (SAST) for Node.js applications with Docker support and integrations with Slack.
Best Application Security Tools — page 7
Compare 235 Application Security tools — 182 free, 0 freemium and 53 paid options, ranked by the security community. Find the right application security tool for your team.
235 tools
A tool that safely installs packages with npm/yarn by auditing them as part of your install process.
Octoscan is a static analysis tool that scans GitHub Actions workflows for security vulnerabilities and misconfigurations.
OpenRASP directly integrates its protection engine into the application server by instrumentation, providing context-aware protection and detailed stack trace logging.
An AI-powered code security tool that analyzes code for vulnerabilities and provides automated fix suggestions to accelerate remediation.
Detect users' operating systems and perform redirection with Apache mod_rewrite.
Open Redirection Analyzer
An advanced mobile security scanner for Android vulnerability scanning, runtime analysis, and SDK security testing.
OWASP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application for client-server communication with numerous vulnerabilities.
A web application security testing platform that helps you test your knowledge on web application security through realistic scenarios with known vulnerabilities.
A serverless application that demonstrates common serverless security flaws and weaknesses
Open-source web application security scanner
A tool for identifying and extracting parameters from HTTP requests and responses
A tool for brute-forcing GET and POST parameters to discover potential vulnerabilities in web applications.
A tool for building and installing PhoneyC with optional Python version configuration and root privileges.
Pint is a PIN tool that exposes the PIN API to lua scripts, allowing dynamic instrumentation of binaries.
An automated code security tool that analyzes repositories, identifies vulnerabilities, and generates pull requests with fixes while integrating with existing development workflows.
A comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities and improving security posture.
Dynamic Java code instrumentation kit for Android applications.
A source code search engine for searching alphanumeric snippets, signatures, or keywords in web page HTML, JS, and CSS code.
An open-source tool developed by LinkedIn that identifies security vulnerabilities in Android applications through static code analysis. Free to use with an active community of contributors.
QIRA is a competitor to strace and gdb with MIT license, supporting Ubuntu and Docker for wider compatibility.
A cloud-based DAST solution that discovers, inventories, and tests web applications and APIs for security vulnerabilities across diverse environments.
Qwiet AI is an application security platform that combines SAST, SCA, container security, secrets detection, and SBOM scanning with AI-powered vulnerability prioritization and automated fix…
Load more tools
Showing 168 of 235