Outils SAST

DeepSource is the code health solution, providing organizations with everything they need to build maintainable and secure software while elevating the velocity of their software development cycle. Most organizations use many... En savoir plus

Bytesafe est une plateforme de sécurité native cloud qui réduit les risques et protège les revenus, sans pour autant que les développeurs ne se sentent freinés dans leurs efforts. Dans le monde peu sécurisé d'aujourd'hui, les... En savoir plus

GitHub est une plateforme de gestion de projet et de partage de code qui permet aux utilisateurs de partager leurs codes avec d'autres personnes et de créer/reproduire à l'aide de l'intelligence collective. Le logiciel peut être... En savoir plus

GitLab is a cloud-based project management platform that allows software developers to develop and manage codes collaboratively. The platform can be deployed either on-premise or in the cloud. GitLab helps developers manage the... En savoir plus

Dynatrace est une solution AIOps conçue pour aider les entreprises à automatiser les processus multi-cloud et à rationaliser la collaboration entre plusieurs équipes grâce à des cas d'utilisation spécifiques. Ses capacités de... En savoir plus

SonarQube est un outil de pointe pour l'inspection continu de la sécurité et de la qualité du code dans vos bases de code ainsi que pour l'orientation des équipes de développement au cours des révisions de code. Couvrant 27... En savoir plus

Kiuwan est une solution statique de test de sécurité des applications SAST (Static Application Security Testing) conçue pour aider les entreprises à identifier et à corriger les vulnérabilités dans le code source tout au long du... En savoir plus

SiteLock is a cloud-based security platform, which helps accelerate website performance, conversions and protects the online business against hackers. Designed for all industries, the platform provides solutions for vulnerability... En savoir plus

Le développement moderne d’applications logicielles est passé du déploiement périodique de produits à leur construction quotidienne ou horaire à l’aide de serveurs CI. Les développeurs et les équipes DevOps doivent prendre en... En savoir plus

Snyk is an application security and testing platform designed to help businesses find, prioritize and remediate vulnerabilities across open source libraries, codes and containers. The platform enables developers to scan and... En savoir plus

AutoRABIT is the only complete DevSecOps platform for Salesforce developers. Incorporate static code analysis, data security, and CI/CD capabilities to increase the security, release velocity, and quality of your Salesforce code... En savoir plus

CodeScene is a tool that maps hotspots in a codebase and pinpoints the exact lines of unhealthy code threatening software delivery flow. CodeScene helps development teams build more sustainable, safer software with healthier... En savoir plus

Klocwork is a web-based static application security testing (SAST software designed to help businesses identify and fix software security issues in compliance with security standards such as OWASP, CWE, PCI DSS, CERT and ISO/IEC... En savoir plus

Checkmarx Static Application Security Testing (CxSAST) is a static analysis platform that enables businesses to identify security vulnerabilities across source codes. It allows software development teams to automate workflows,... En savoir plus

SonarCloud is an online service that catches bugs and security vulnerabilities in pull requests and throughout code repositories. SonarCloud pairs with existing cloud-based CI/CD workflows and provides clear resolution guidance... En savoir plus

Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security... En savoir plus

GuardRails is a security platform that empowers developers to build secure applications by giving them continuous protection. GuardRails provides a seamless experience for you and your team by securing all the critical... En savoir plus

Nexus Lifecycle by Sonatype helps developers streamline open-source governance operations and scan and fix issues in the software development process via a unified portal. The platform enables security professionals to establish... En savoir plus

Apiiro invented a code risk platform to remediate critical risks from cloud to code and secure all cloud-native application components in a single platform. Once connected to a source control manager, Apiiro will identify all... En savoir plus

BuildPiper is a microservices and Kubernetes delivery platform. It helps businesses with the entire software delivery process, starting right from the developer's workstation to the final product release. With BuildPiper,... En savoir plus

Argon’s first-to-market holistic security solution protects the integrity of software development environments’ CI/CD pipelines, eliminating risks from misconfigurations, vulnerabilities, and preventing major scale software... En savoir plus

IDA Pro est un outil d'analyse de code binaire. Il est capable de créer des cartes de l'exécution du logiciel pour afficher les instructions binaires qui sont réellement exécutées par le processeur dans une représentation... En savoir plus

Conviso is a Static Application Security Testing tool that helps businesses secure application development pipelines via vulnerability scanning, automated testing, and more. This platform is designed for businesses in finance,... En savoir plus

Fortify is an application security platform designed to help organizations address the evolving threats of today and tomorrow. By combining established next-gen technologies with best practices, Fortify allows organizations to... En savoir plus

ThunderScan is a static application security testing and white-box testing tool designed to help businesses perform extensive security analysis of application source codes. The application requires minimal user input and can also... En savoir plus

ShiftLeft CORE is the only suite of Application Security tools and services capable of analyzing the complete flow of data through a modern application in minutes so dev teams can release secure code at scale. ShiftLeft can match... En savoir plus

AppSonar is a code security and quality analysis software designed to help you quickly find bugs in your application while also providing details how to fix each finding. The scanner is very fast and provides accurate results... En savoir plus

Ostorlab is a platform that discovers and scans mobile applications, web applications, and external attack surfaces to identify vulnerabilities and security & privacy weaknesses. - Manage attack surfaces and discover assets. -... En savoir plus

Veracode is a static application security testing (SAST) solution that helps businesses manage security risk across the application building pipeline. It enables software developers to monitor source codes to identify vulnerabilit... En savoir plus

Bearer is a Static Application Security Testing (SAST) tool that brings the principles and the benefits of the DevSecOps model to the data security practice. Bearer enables security and engineering teams to implement data... En savoir plus

esChecker, votre compagnon d'automatisation MAST (Mobile Application Security Testing) Réduisez le temps perdu à qualifier vos protections d'applications mobiles grâce à l'automatisation MAST (tests statiques SAST [Static... En savoir plus