The best FOSSA alternatives
The rest of Best Application Security Testing, in this site's order.
ZAP is intended for developers, testers new to security testing, and security testing specialists.
Surface Monitoring suits security teams that need ongoing visibility into internet-facing assets and a way to organize remediation findings.
Endor Labs suits developers and security teams working with code, open-source dependencies, or AI coding agents.
Beagle Security may suit teams testing web applications, APIs, or GraphQL and integrating results into development or collaboration tools.
PVS-Studio suits developers and teams analyzing source code for bugs and security issues.
w3af suits developers and penetration testers conducting web application vulnerability assessments.
Acunetix is aimed at small and mid-size organizations managing web security.
Bright DAST is intended for security experts and developers securing web applications, APIs and mobile applications on the server side.
Mend.io is suited to teams securing application code and AI components, especially those managing dependencies and using AI coding tools.
Assess is intended for developers and AppSec teams working in IDE, test, and QA environments.
It suits organizations managing application risk across code, infrastructure, APIs, and containers.
Checkmarx One suits organizations analyzing source code within CI/CD, pull-request, and IDE workflows.