Apps tagged with 'devsecops'

Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting...

BunkerWeb is a next-generation and open-source Web Application Firewall (WAF).

GitLab Duo is a software suite that leverages Artificial Intelligence (AI) to optimize various aspects of your workflows. This includes enhancing testing procedures, bolstering security measures, and improving documentation processes.

SlowQL is a production-focused offline SQL static analyzer that catches security vulnerabilities, performance regressions, reliability issues, compliance risks, cost inefficiencies, and code quality problems before they reach production.

CERT-X-GEN is a security vulnerability scanning engine that treats detection logic as executable code rather than static YAML configurations. The system orchestrates parallel execution of templates written in Python, Go, Rust, C, C++, Java, JavaScript, Ruby, Perl, PHP, Shell...

Unified application security platform — 12 scanners including SAST, DAST, SCA, and pen-testing in one on-premise deployment. Replaces your entire AppSec stack.

Deep static analysis, direct support from devs| C, C++, C#, Java, JavaScript, TypeScript, Go | Helping you ship calmer releases.

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues and hard-coded secrets.

Guardius is a Software as a Service (SaaS) company designed to streamline and automate various IT needs for companies that operate their own websites or manage their own infrastructure. It is crucial for companies to safeguard their websites and infrastructure against potential...

Beagle Security helps companies to identify vulnerabilities in their web applications & APIs and remediate them with actionable insights before hackers harm them in any manner. While manual penetration testing takes about two to three weeks, with Beagle Security, you can get...

Strobes is an integrated cybersecurity platform that combines Attack Surface Management, Penetration Testing-as-a-service, and Risk-Based Vulnerability Management to continuously manage your threat exposure.

AI-Enabled Attack Surface Management, Dark Web Monitoring, & Application Penetration Testing solutions tailored to reduce complexity & costs.

A completely free, open-source distributed deception platform that deploys high-fidelity network canaries in 60 seconds with no persistent background daemons.

Most security teams don't have a detection problem, they have a sprawl problem. A dozen scanners each flag their own slice of risk, findings pile up without shared context, and nobody can say with confidence which alert actually matters this week.

Mend.io offers the first AI native application security platform, purpose-built to secure AI-generated code and embedded AI components. Our unified platform enables companies to manage application risk effectively in modern software development.

High-precision Python SAST & Dead Code Remover. Finds unused functions, secrets, and security flaws with hybrid static analysis + local LLM agents. Privacy-first & low noise. MCP server for SAST too.

AquilaX Ultimate is a comprehensive software security scanner, designed to detect a wide range of security vulnerabilities in the source code of any application. Is committed to change how contextual analysis is done to eliminate virtually any false positive.

LunaDefend is an end-to-end data security system designed to protect your application by transparently encrypting sensitive data, from browser to database.

Kingfisher is a high-speed, open-source secret scanner and live validation tool. It scans code, Git history, developer platforms, cloud storage, collaboration tools, and containers, then verifies exposed credentials, maps their blast radius across identities, permissions, and...

TokenTimer is a certificate lifecycle automation and expiration management platform for DevOps, SRE, platform engineering, security and IT teams.

Autonomous AI penetration testing for web apps and APIs - it exploits and chains real vulnerabilities and runs on every deploy via CI/CD, a continuous alternative to one-off manual pentests.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile/web application, pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Watch Cortex is an autonomous Linux security platform with on-device AI reasoning. It detects threats, explains what’s happening, and responds automatically — all locally, with no cloud dependency.

NXT1 LaunchIT is the platform to build and run secure SaaS, automating cloud infrastructure for instant availability. Simply code and deploy. Secure by Design, it offers a direct path to FedRAMP-compliance readiness at a fraction of the traditional time and cost—out of the box.

HOL Guard is an open-source, local-first runtime security layer for AI agents and automation. It sits between any AI harness and the tools it wants to run, pausing risky package installs, secret reads, shell commands, and MCP changes for review before execution.