Bearer
What it is
Bearer CLI is a free static application security testing tool for Linux and macOS. It scans source code and analyzes data flows to identify security and privacy risks without viewing the actual data values. The CLI recognizes more than 120 sensitive data types, including personal data, PII, and PHI. Privacy reports can identify sensitive data, related data subjects, and internal or third-party components processing that data, providing information for GDPR records of processing activities. Bearer includes SAST rules for security issues and a separate scanner for hard-coded secrets. Documentation covers pull request scans, custom security rules, and CI/CD use with GitHub Actions, GitLab CI/CD, and CircleCI. Listed stacks include Go, Python, PHP, JavaScript, TypeScript, Ruby, and Java. Installation options include an install script, Homebrew, Linux package managers, Docker, and downloadable binaries. macOS 12 or later and Git 2.34 or later are required.
For and against
For
- Free open SAST plan
- Covers more than 120 sensitive data types
- Scans hard-coded secrets separately
- Supports pull requests and custom rules
- Works with major CI/CD services
Against
- Linux and macOS only
- macOS 12 or later required
- Git 2.34 or later required
- Patterns may miss some true positives
The verdict
Bearer CLI combines security scanning with privacy-focused data-flow reporting and CI/CD integration. Its platform, Git, and detection-pattern requirements should be checked against your development environment.
Who it suits
Bearer CLI suits development and security teams scanning application source code and data flows. It is useful for projects using the listed languages and CI/CD systems.
Plans and prices
Bearer CLI
Free and open SAST; no numeric limits stated
Read 8 Oct 2026 · bearer.com
On the record
- CI integrations
- The CLI documents CI/CD setup for GitHub Actions, GitLab CI/CD, and CircleCI.docs.bearer.com · read 8 Oct 2026
- Data handling
- Bearer CLI says it analyzes code patterns without viewing the actual data values.docs.bearer.com · read 8 Oct 2026
- Detection caveat
- Bearer says its data classification patterns aim to reduce false positives, with a potential tradeoff of missing some true positives.docs.bearer.com · read 8 Oct 2026
- Installation
- Installation options include an install script, Homebrew, Linux package managers, Docker, and downloadable binaries; macOS 12 or later is supported and Git 2.34 or later is required.docs.bearer.com · read 8 Oct 2026
- Privacy reports
- Privacy reports can identify sensitive data, data subjects, and internal or third-party components processing that data, including input for GDPR records of processing activities.docs.bearer.com · read 8 Oct 2026
- Product
- Bearer CLI is a static application security testing tool that scans source code and analyzes data flows to find security and privacy risks.docs.bearer.com · read 8 Oct 2026
- Product availability
- Bearer's homepage says Bearer has been acquired by Cycode and invites users to join the early access list for Bearer Cloud.bearer.com · read 8 Oct 2026
- Security scanning
- The CLI includes SAST rules for security risks and a separate scanner for hard-coded secrets.docs.bearer.com · read 8 Oct 2026
- Sensitive data
- Bearer CLI supports more than 120 sensitive data types, including personal data, PII, and PHI.docs.bearer.com · read 8 Oct 2026
- Supported languages
- The documentation lists Go, Python, PHP, JavaScript, TypeScript, Ruby, and Java as supported stacks.docs.bearer.com · read 8 Oct 2026
