Thursday, October 22, 2026 4,350 lists 78,055 records on file
List your app or device

  1. Home
  2. Security & Privacy
  3. Application Security Testing
Ranked on the record · 28 apps

Best Application Security Testing 2026

Every product here is ranked by Samsung Mobile US Press's record score: what its maker publishes about it, where it runs (Android first), whether it is free to try, and how recently the facts were read.

02

Detectify Surface Monitoring

Surface Monitoring suits security teams that need ongoing visibility into internet-facing assets and a way to organize remediation findings.

WebAPI
Record5.4 Visit
03

OWASP ZAP

ZAP is intended for developers, testers new to security testing, and security testing specialists.

WindowsMacLinux+3
Record5.4 Visit
04

Beagle Security

Beagle Security may suit teams testing web applications, APIs, or GraphQL and integrating results into development or collaboration tools.

WebAPI
Record5.3 Visit
05

Endor Labs

Endor Labs suits developers and security teams working with code, open-source dependencies, or AI coding agents.

WebWindowsMac+4
Record5.0 Visit
6
FOSSA

FOSSA suits developers, security teams, and legal counsel working with software dependencies, vulnerabilities, licenses, or SBOMs.

WebLinuxAPI+1 Free plan Record4.9 Visit
7
PVS-Studio

PVS-Studio suits developers and teams analyzing source code for bugs and security issues.

WindowsMacLinux Free plan Record4.9 Visit
8
w3af

w3af suits developers and penetration testers conducting web application vulnerability assessments.

WebMacLinux+2 Free plan Record4.9 Visit
9
Acunetix

Acunetix is aimed at small and mid-size organizations managing web security.

WebWindowsLinux+2 $500 one-time Record4.6 Visit
10 WebWindowsMac+3 $10 a month Record4.6 Visit
11 WebLinuxAPI+1 Free plan Record4.4 Visit
12 WebWindowsLinux+1 — Record4.3 Visit
13
Mend.io

Mend.io is suited to teams securing application code and AI components, especially those managing dependencies and using AI coding tools.

Web $250 a year Record4.3 Visit
14
Bright Security DAST

Bright DAST is intended for security experts and developers securing web applications, APIs and mobile applications on the server side.

WebWindowsMac+3 — Record4.2 Visit
15
Contrast Assess

Assess is intended for developers and AppSec teams working in IDE, test, and QA environments.

WebWindowsMac+3 — Record4.2 Visit
16 Web $15 a month Record4.0 Visit
17 WebWindowsLinux+2 — Record3.9 Visit
18 WindowsLinuxSelf-hosted — Record3.8 Visit
19
Invicti

It suits organizations managing application risk across code, infrastructure, APIs, and containers.

WebAPISelf-hosted $500 one-time Record3.8 Visit
20 Web Free plan Record3.0 Visit
21 WebWindowsLinux — Record2.8 Visit
22 WebWindows $175 a month, billed yearly Record2.8 Visit
23 WebWindowsLinux — Record2.6 Visit
25 Web — Record2.5 Visit