53+ Software Development Tools

Apiiro unifies application risk visibility, prioritization, and remediation by analyzing code, design, and runtime context to help enterprises secure software delivery. It integrates with SCM, CI/CD, and ticketing systems to detect risks early and optimize AppSec workflows.

Contrast Security helps teams secure applications and APIs with runtime sensors, application security testing, and detection and response. It surfaces real vulnerabilities in running code, blocks attacks, and gives developers remediation guidance across development and production workflows.

Aikido Security offers automated scanning and fixing of vulnerabilities in source code, open-source dependencies, cloud infrastructure, containers, and runtime environments. It integrates AI-driven pentesting and prioritizes alerts to reduce noise and accelerate security workflows.

Endor Labs delivers an AI-native application security platform that integrates with AI coding workflows to detect, triage, and remediate vulnerabilities in source code, dependencies, secrets, containers, and supply chains with verifiable and audit-ready evidence.

JFrog Xray provides deep recursive scanning to identify security vulnerabilities, license compliance issues, and operational risks in open-source dependencies, binaries, and ML models. It integrates with CI/CD pipelines and artifact repositories to ensure continuous security and compliance from development to runtime.

HCL AppScan provides a suite of application security testing technologies including SAST, DAST, IAST, SCA, and API security to identify and remediate vulnerabilities across the software development lifecycle with AI-driven accuracy and automation.

OpenText Fortify provides broad-spectrum application security testing—including static (SAST), dynamic (DAST), mobile (MAST), and software composition analysis (SCA)—with flexible deployment options such as SaaS, hosted, and on‑premises.

Black Duck offers comprehensive application security testing including SAST, DAST, IAST, and SCA, with AI-powered analysis to secure proprietary, open source, and AI-generated code. It provides visibility, automation, and compliance for software supply chains.

Mend.io offers unified security for application code and AI components, including open source dependencies, AI models, and runtime interactions. It features continuous AI behavioral testing, reachability analysis, runtime protection, and compliance evidence management.

GitHub Advanced Security provides built-in security tools including static code analysis, secret scanning, and dependency monitoring within GitHub repositories. It integrates application security directly into developer workflows to identify and remediate vulnerabilities early in the development lifecycle.

Veracode offers an AI-driven platform to scan code, manage application security risks, and automate flaw fixes across over 100 languages and frameworks. It supports secure development, supply chain protection, and compliance with real-time insights and remediation guidance.

Checkmarx One secures software from code creation to runtime by combining deterministic scanning with AI reasoning to detect vulnerabilities, prioritize risks, and automate remediation across code, supply chain, and runtime environments.