The best FOSSA alternatives
The rest of Best Application Security Testing, in this site's order: each with what it costs, where it runs and its record score.
Surface Monitoring suits security teams that need ongoing visibility into internet-facing assets and a way to organize remediation findings.
ZAP is intended for developers, testers new to security testing, and security testing specialists.
Beagle Security may suit teams testing web applications, APIs, or GraphQL and integrating results into development or collaboration tools.
Endor Labs suits developers and security teams working with code, open-source dependencies, or AI coding agents.
PVS-Studio suits developers and teams analyzing source code for bugs and security issues.
w3af suits developers and penetration testers conducting web application vulnerability assessments.
Acunetix is aimed at small and mid-size organizations managing web security.
Mend.io is suited to teams securing application code and AI components, especially those managing dependencies and using AI coding tools.
Bright DAST is intended for security experts and developers securing web applications, APIs and mobile applications on the server side.
Assess is intended for developers and AppSec teams working in IDE, test, and QA environments.
It suits organizations managing application risk across code, infrastructure, APIs, and containers.
Checkmarx One suits organizations analyzing source code within CI/CD, pull-request, and IDE workflows.