Best Static Application Security Testing Software in 2026
Updated
In short: Puma Scan is ranked #1 of 24 as of 4 October 2026, ahead of Skylos and Snyk Open Source. The best-ranked option with a free plan is Skylos. The lowest first paid tier on this page is Puma Scan at $24.92/mo.
Static application security testing software analyzes code for potential security issues. Compare analysis targets, supported languages, and IDE or CI/CD support to see how each entry may fit into development workflows. Fix guidance and whether SCA is included offer other distinctions to weigh, alongside deployment, free-plan availability, and paid-from pricing. The ranking opens with Puma Scan, Skylos, and Snyk Open Source, followed by Horusec and OpenGrep. Consider your codebase and workflow when comparing the listed language coverage, integrations, and deployment options across the 24 entries.
24 static application security testing software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 1 Puma Scan No phone app RecognisedPhone appDocumentedFree plan 6.4$24.92/mo Analysis target: sourceSupported languages: 1 languagesIDE support: Yes
- 2 Skylos No phone app RecognisedPhone appDocumentedFree plan 6.4Free Analysis target: sourceSupported languages: 11 languagesIDE support: Yes
- 3 Snyk Open Source No phone app RecognisedPhone appDocumentedFree plan 6.4$25/mo IDE support: Yes
- 4 Horusec No phone app RecognisedPhone appDocumentedFree plan 6.3Free Analysis target: sourceIDE support: Yes
- 5 OpenGrep No phone app RecognisedPhone appDocumentedFree plan 6.3Free Analysis target: source
- 6 Semgrep Code No phone app RecognisedPhone appDocumentedFree plan 6.3$30/mo IDE support: Yes
- 7 Flawfinder No phone app RecognisedPhone appDocumentedFree plan 6.2Free
- 8 Veracode DAST No phone app RecognisedPhone appDocumentedFree plan 5.8 IDE support: Yes
- 9 Black Duck Coverity No phone app RecognisedPhone appDocumentedFree plan 5.7 Analysis target: sourceIDE support: Yes
- 10 Mend SAST No phone app RecognisedPhone appDocumentedFree plan 5.7$83.33/mo Analysis target: sourceIDE support: Yes
- 11 PVS-Studio No phone app RecognisedPhone appDocumentedFree plan 5.7 IDE support: Yes
- 12 Checkmarx API Security No phone app RecognisedPhone appDocumentedFree plan 5.6 Analysis target: sourceIDE support: Yes
- 13 Microsoft DevSkim No phone app RecognisedPhone appDocumentedFree plan 5.4 Analysis target: sourceIDE support: Yes
- 14 Dawnscanner No phone app RecognisedPhone appDocumentedFree plan 5.3 Analysis target: sourceIDE support: No
- 15 CodeSonar No phone app RecognisedPhone appDocumentedFree plan 5.2 IDE support: Yes
- 16 Klocwork No phone app RecognisedPhone appDocumentedFree plan 5.2 IDE support: Yes
- 17 MobSF No phone app RecognisedPhone appDocumentedFree plan 5.2 Analysis target: source and binary
- 18 NodeJsScan No phone app RecognisedPhone appDocumentedFree plan 5.2 Analysis target: source
- 19 Pysa No phone app RecognisedPhone appDocumentedFree plan 5.2 Analysis target: source
- 20 Bandit No phone app RecognisedPhone appDocumentedFree plan 5.1 IDE support: Yes
- 21 Bearer No phone app RecognisedPhone appDocumentedFree plan 4.9
- 22 Brakeman No phone app RecognisedPhone appDocumentedFree plan 4.9 IDE support: Yes
- 23 gosec No phone app RecognisedPhone appDocumentedFree plan 4.9
- 24 HCL AppScan Source No phone app RecognisedPhone appDocumentedFree plan 4.8 IDE support: Yes
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which static application security testing software is ranked first on Samsung Mobile US Press?
Puma Scan is ranked #1 of 24 with a score of 6.4. Skylos is second and Snyk Open Source third.
How many of these have a free plan?
7 of the 24 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Puma Scan has the lowest first paid tier we found: $24.92/mo.
How is this list ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.