Global Tool Radar

Subcategory research

Application Security Testing Software

Software for finding security vulnerabilities in application code, open source dependencies, APIs, and running web applications. Includes SAST, DAST, SCA, IAST, and API security testing; excludes general software testing, CI/CD platforms, and developer IDEs.

View tool shortlistCompare tools

Application Security Testing Software product list

10 published tools. Filter the complete list below.

#1

Snyk AI Security Platform

Snyk AI Security Platform combines Snyk Code SAST, Snyk Open Source SCA, Snyk Container, and Snyk IaC with IDE, repository, pull-request, CLI, CI/CD, prioritization, remediation, reporting, and enterprise governance workflows.

83Strong pick
Pricing
  • Free plan available — see plan limits
  • Paid · Team · $25 USD · per contributing developer · per month · starting at · Development teams purchasing one or more Snyk products at the Team plan level
  • Paid · Ignite · $1260 USD · per contributing developer · per year · starting at · Organizations with fewer than 50 developers
  • Custom quote required for some paid plans
  • Quote required
  • Free plan — check scope
Best for
  • Mid-market
  • Enterprise
  • Small business
#2

HCL AppScan

HCL AppScan is an application security testing family spanning hosted and self-managed SAST, DAST, IAST, SCA, API, secrets, container, and infrastructure-as-code testing with developer workflows, centralized risk management, and remediation guidance.

81Consider
Pricing
  • Free plan available — see plan limits
  • Paid · Professional · $29.99 USD · per scan · per usage unit · Limited single-scan offer · promotional · minimum 1 scan · Professional credit-card purchase in a listed country; 1 to 100 scans per order
  • Paid · Professional · $299 USD · per scan · per usage unit · Displayed regular reference price · reference · Professional plan reference price displayed beside the limited offer
  • Custom quote required for some paid plans
  • Quote required
  • Free plan — check scope
Best for
  • Mid-market
  • Enterprise
  • Small business
#6

Semgrep AppSec Platform

Semgrep AppSec Platform unifies Semgrep Code SAST, Semgrep Supply Chain SCA, and Semgrep Secrets with Pro Engine analysis, AI-assisted triage and remediation, policy controls, developer integrations, reporting, and managed or customer-run scanning.

80Consider
Pricing
  • Free plan available — see plan limits
  • Paid · Teams · $30 USD · per contributor · per month · Teams Code license · Teams customers selecting Semgrep Code
  • Paid · Teams · $30 USD · per contributor · per month · Teams Supply Chain license · Teams customers selecting Semgrep Supply Chain
  • Custom quote required for some paid plans
  • Usage charges
  • Quote required
  • Free plan — check scope
Best for
  • Small business
  • Mid-market
  • Enterprise
#9

GitHub Advanced Security

GitHub Advanced Security is GitHub's application-security product family. Its current standalone offers are GitHub Secret Protection for secret detection and prevention, and GitHub Code Security for CodeQL scanning, premium dependency security, Copilot Autofix, and organization-level security workflows.

79Consider
Pricing
  • Paid · GitHub Secret Protection · $19 USD · per active committer · per month · Metered monthly billing · usage based · billed monthly · GitHub Team or GitHub Enterprise organization using metered billing for licensed repository use
  • Paid · GitHub Code Security · $30 USD · per active committer · per month · Metered monthly billing · usage based · billed monthly · GitHub Team or GitHub Enterprise organization using metered billing for licensed repository use
Best for
  • Mid-market
  • Enterprise
  • Small business