Thursday, October 22, 2026 4,350 lists 78,084 records on file
List your app or device

  1. Home
  2. Developer Tools
  3. Static Application Security Testing Sast
Ranked on the record · 24 apps

Best Static Application Security Testing Sast 2026

Every product here is ranked by Samsung Mobile US Press's record score: what its maker publishes about it, where it runs (Android first), whether it is free to try, and how recently the facts were read.

01

MobSF suits developers and security teams assessing mobile applications, binaries, or source code.

Free plan Open source From $2,999.99 a year WebWindowsMacLinuxAPISelf-hosted
02

Semgrep Code

It suits development teams looking to scan source code and integrate security checks into pull-request or CI workflows.

WebWindowsMac+4
Record6.0 Visit
03

GitHub CodeQL

CodeQL suits developers and security researchers who need to analyze code for security and other quality issues.

WebWindowsMac+3
Record5.7 Visit
04

gosec

gosec suits developers and teams scanning Go source code, including those integrating results into CI workflows.

MacLinuxAPI+1
Record5.0 Visit
05

Horusec

Horusec suits developers seeking source analysis through a CLI or Visual Studio Code extension, and DevSecOps teams using CI/CD pipelines.

WebWindowsMac+4
Record5.0 Visit
6 WebWindowsMac+4 Free plan Record5.0 Visit
7
Flawfinder

Flawfinder suits developers looking for potential security problems in C or C++ source before release.

WindowsMacLinux+1 Free plan Record4.9 Visit
8
NodeJsScan

It suits teams scanning Node.js source as part of pull request reviews or CI/CD and DevSecOps pipelines.

WebMacLinux+2 Free plan Record4.9 Visit
9
Joern

It suits security researchers and development teams analyzing source, bytecode or binaries across multiple languages.

WindowsMacLinux+2 Free plan Record4.6 Visit
10
GitHub Secret Scanning

It suits development and security teams that need repository-wide credential detection, push blocking, custom patterns, and remediation workflows.

WebAPISelf-hosted Free plan Record4.5 Visit
11
Brakeman

Brakeman suits developers and teams maintaining Ruby on Rails applications who want automated source-code security checks in development or CI workflows.

LinuxSelf-hosted Free plan Record4.4 Visit
12 WebWindowsMac+2 $1,000 a year Record4.4 Visit
13 WebWindowsLinux+1 — Record4.3 Visit
14
Bearer

Bearer CLI suits development and security teams scanning application source code and data flows.

MacLinux Free plan Record4.2 Visit
15 WindowsMacLinux Free plan Record3.2 Visit
16 WebWindowsMac+1 — Record3.0 Visit
17 Web Free plan Record3.0 Visit
18 Web Free plan Record2.9 Visit
19 WebWindowsLinux — Record2.8 Visit
20 Free plan Record2.7 Visit
21 Free plan Record2.7 Visit
22 WebWindowsLinux — Record2.6 Visit
23 WindowsMacLinux — Record2.6 Visit
24 Web — Record2.5 Visit