# Application Security Testing (SAST/DAST) SaaS

> 478 Application Security Testing (SAST/DAST) SaaS products listed on SaaS Browser, 68 added in the last 30 days. Figures as of 2026-11-04.

Web page: https://saasbrowser.com/en/category/application-security-testing-sast-dast
All categories: https://saasbrowser.com/en/categories.md

## Key figures

- SaaS products: 478
- Added in the last 30 days: 68
- Median domain rating (0-100): 12.0
- Median domain rating across all SaaS: 14.0
- Median company age: 5.0 years
- Running an affiliate program: 3.1%
- Median affiliate commission: 25.0%
- Customers: B2B and B2C 17.1%, B2B 82.9%
- Top countries: United States (43), India (9), United Kingdom (7), Germany (4), France (3)

## Most established

- Snyk
- PortSwigger
- Checkmarx
- Acunetix
- Semgrep
- Exact Sciences
- Endor Labs
- Edgescan
- NetSPI
- DeepSource

## Recently added

- CyberSafeAI
- Holefind
- UmbraGlass
- PR Devs
- Probus
- RLSProof
- Cheqvo
- BearWatch
- RLS Watch
- Svace

## Products (page 1 of 10)

- [Bearer](https://saasbrowser.com/en/saas/22755/bearer): Bearer offers a developer-first static application security testing (SAST) solution designed to enhance code security and privacy throughout the software development lifecycle. With seamless integrations and a focus on actionable insights, Bearer empowers security leaders and software engineers to identify and remediate vulnerabilities efficiently, ensuring secure software delivery.
- [Snyk](https://saasbrowser.com/en/saas/59651/snyk): Snyk is a developer-first security platform designed to help teams secure their applications throughout the development lifecycle. With tools for code security, open source vulnerability management, container security, and infrastructure as code, Snyk empowers developers to identify and fix vulnerabilities quickly and efficiently.
- [PortSwigger](https://saasbrowser.com/en/saas/194258/portswigger): This software platform offers comprehensive web security testing solutions designed to identify, analyze, and remediate vulnerabilities in web applications, APIs, and APIs. It provides features such as dynamic application security testing (DAST), automated vulnerability scanning, attack surface mapping, CI/CD integration for proactive threat detection, manual testing tools, and support for penetration testers, security engineers, and developers aiming to improve security posture, ensure compliance, and reduce cyber risks efficiently. Its primary users are cybersecurity professionals, ethical hackers, penetration testers, application developers, and security teams seeking to strengthen web application defenses, streamline vulnerability management, and accelerate secure software development.
- [Checkmarx](https://saasbrowser.com/en/saas/38199/checkmarx): Checkmarx offers a comprehensive application security testing solution designed to secure applications from code to cloud, integrating multiple capabilities within the software development lifecycle. With a focus on enhancing developer experience and reducing risks, the platform provides tools for static and dynamic testing, API security, and vulnerability management, ensuring organizations can effectively manage application security without compromising productivity.
- [DeepSource](https://saasbrowser.com/en/saas/132760/deepsource): DeepSource is a comprehensive code health platform designed to enhance software quality and security through advanced static analysis and automated remediation. With features like proactive source code security, infrastructure-as-code analysis, and seamless integration with popular version control systems, it empowers development teams to identify and resolve issues efficiently while maintaining compliance with industry standards.
- [FailPack](https://saasbrowser.com/en/saas/1548552/failpack): FailPack is a comprehensive diagnostic and reporting tool designed to capture detailed failure contexts from software builds, command executions, and regressions directly on a developer’s local machine, ensuring sensitive information is redacted before sharing. Its main features include local-first data collection of command outputs, git state, and project metadata; automated redaction of secrets and credentials; structured context generation for AI reasoning and automation; offline test scaffolding; targeted bug and security analysis; and seamless integration with cloud services for report synchronization. This solution addresses issues related to debugging, reproducibility, security, and collaborative troubleshooting, making it ideal for software developers, quality assurance teams, security analysts, and support engineers involved in complex, collaborative software development and maintenance.
- [RedTesters](https://saasbrowser.com/en/saas/1563089/redtesters): This security platform leverages artificial intelligence to autonomously identify and demonstrate vulnerabilities within web applications and APIs by simulating realistic attack scenarios, chaining multiple security flaws into exploit paths, and providing concrete evidence such as screenshots and network traces. It offers features like automated discovery without hardcoded selectors, comprehensive evidence-based reporting, seamless integration into continuous integration pipelines, real-time dashboards for monitoring and managing scans, and programmatic access via REST APIs, thereby solving problems related to inefficient manual testing, false positives, and incomplete vulnerability validation. Designed for cybersecurity professionals, developers, and security teams, it enables organizations to proactively detect, validate, and prioritize security weaknesses before exploits can be maliciously leveraged, ensuring robust application defenses.
- [SecOpsium](https://saasbrowser.com/en/saas/1573773/secopsium): This comprehensive security platform performs continuous automated scans of code repositories to identify secrets, hardcoded credentials, misconfigurations, vulnerabilities, and web exposure signals, providing real-time insights and risk assessments. Its main features include secrets detection, repository security auditing, prioritized fix recommendations, security grading, detailed reporting, and artificial intelligence-based secret leak detection, all designed to streamline security workflows without requiring a dedicated security team. It addresses challenges faced by fast-moving development teams, startups, small and medium-sized enterprises, CTOs, and enterprise sales teams by offering scalable, easy-to-integrate security validation, risk visualization, and actionable insights to improve overall repository security, ensure compliance, and facilitate secure software delivery.
- [Osto](https://saasbrowser.com/en/saas/643625/osto): Osto offers a complete cybersecurity solution designed for modern businesses, ensuring protection against various online threats. With affordable pricing and essential security modules, it helps startups focus on growth while maintaining strong security measures.
- [XploitScan](https://saasbrowser.com/en/saas/1509494/xploitscan): This security analysis tool performs automated vulnerability detection on AI-generated code by scanning for issues such as hardcoded secrets, injection flaws, cross-site scripting, and unprotected webhooks, ensuring secure software development. It features multiple scanning methods including CLI, web upload, and GitHub integrations, provides clear plain-English reports with fix suggestions, and supports compliance mappings to frameworks like SOC2, ISO 27001, and OWASP Top 10, making it ideal for solo developers, startup teams, open-source contributors, and enterprises seeking to identify security vulnerabilities quickly and maintain secure, compliant codebases.
- [Sentrint](https://saasbrowser.com/en/saas/1686597/sentrint): This comprehensive security and vulnerability assessment tool analyzes software repositories and source code across multiple programming platforms, utilizing AI-driven technology to detect secrets, access rules, dependencies, and insecure code paths, while providing automated, tailored remediation prompts to ensure secure application deployment. Its key features include multi-layered security scanning, AI-enhanced false alarm filtering, real-time scoring and trending reports, and automatic generation of platform-specific fix suggestions, addressing common vulnerabilities such as hardcoded credentials, open database access, and dependency vulnerabilities, making it ideal for developers, cybersecurity professionals, and organizations seeking automated vulnerability identification and remediation without requiring extensive security expertise.
- [Threatcl](https://saasbrowser.com/en/saas/1602280/threatcl): This platform facilitates comprehensive threat modeling and security management by transforming scattered threat documentation into centralized, organized organizational security intelligence. It offers key features such as collaborative threat registry, real-time executive dashboards, approval workflows, and policy enforcement through code, effectively addressing challenges like siloed threat models, limited discoverability, collaboration barriers, lack of visibility, and governance gaps. Designed for security professionals, developers, legal teams, and compliance officers, it helps organizations proactively identify, analyze, and mitigate security risks across multiple systems and departments.
- [Apona](https://saasbrowser.com/en/saas/327295/apona): Apona Security offers advanced solutions for protecting source code and software applications from vulnerabilities and threats. With tools like Software Composition Analysis and Static Application Security Testing, Apona ensures seamless integration and continuous scanning to enhance security in any development environment.
- [Luchs](https://saasbrowser.com/en/saas/446029/luchs): Luchs Security offers advanced solutions for in-car cybersecurity, focusing on automated testing methods like fuzzing and penetration testing. The platform helps automotive suppliers meet global cybersecurity regulations while ensuring hands-on security assessments of their products.
- [DigitSec](https://saasbrowser.com/en/saas/8552/digitsec): DigitSec offers an automated application security testing platform specifically designed for Salesforce, providing comprehensive scanning and remediation guidelines to enhance security for Salesforce and B2C Commerce environments. With a focus on minimizing false positives and ensuring actionable insights, the platform empowers organizations to effectively manage their security responsibilities within the shared responsibility model.
- [NightVision](https://saasbrowser.com/en/saas/1582978/nightvision): This comprehensive application security platform provides dynamic application security testing (DAST) and API vulnerability detection designed for modern software development teams. It offers features such as rapid setup and scanning within 10-15 minutes, automated API discovery from source code—including undocumented and shadow endpoints—and precise vulnerability validation linked directly to specific lines of code to reduce false positives. Targeted at developers, security engineers, and DevSecOps teams, it addresses challenges like lengthy scan times, noisy findings, and incomplete API visibility by enabling continuous security assessment integrated seamlessly into existing CI/CD workflows.
- [Flawnter](https://saasbrowser.com/en/saas/570800/flawnter): This security testing software employs zero-trust principles to identify vulnerabilities and quality issues within applications by integrating static and dynamic analysis techniques, ensuring comprehensive scans across the entire Software Development Life Cycle. Its main features include static code analysis, container and infrastructure as code testing, software composition analysis, API security testing, and detection of hard-coded secrets, all supporting scalable, cross-platform operation with customizable extensions and seamless integration into continuous integration and delivery pipelines, making it suitable for developers, security teams, and organizations aiming to strengthen application security, maintain compliance, and safeguard sensitive data.
- [Nucleaus](https://saasbrowser.com/en/saas/357769/nucleaus): Nucleaus is an application security platform that helps users monitor and secure their code by identifying vulnerabilities and dependencies. The platform offers easy integration with development tools, providing actionable insights to improve code safety throughout the development process.
- [Hopper](https://saasbrowser.com/en/saas/611493/hopper): This advanced security solution enhances application security by providing precise function-level reachability analysis, enabling teams to identify and prioritize exploitable vulnerabilities while significantly reducing irrelevant alerts. Key features include agentless coverage, AI-powered remediation, and the ability to detect hidden risks across complex software ecosystems, making it ideal for development teams and organizations seeking to streamline their security processes and focus on genuine threats.
- [DefectDojo](https://saasbrowser.com/en/saas/15448/defectdojo): DefectDojo is a comprehensive platform designed for DevSecOps, offering seamless integration with over 180 security tools to automate vulnerability management and enhance security visibility. By centralizing and distilling security data into actionable reports, it empowers teams to prioritize risks and foster a proactive security culture throughout the development lifecycle.

Next page: https://saasbrowser.com/en/category/application-security-testing-sast-dast.md?page=2

Affiliate programs in this category: https://saasbrowser.com/en/affiliate-programs/application-security-testing-sast-dast
Bug bounty programs in this category: https://saasbrowser.com/en/bug-bounty-programs/application-security-testing-sast-dast
Full data is available through the API (https://saasbrowser.com/en/resources/api) and the MCP server (https://saasbrowser.com/en/resources/mcp).