Aikido Security
Founded 2022
Developer security platform bundling code, dependency, cloud, and runtime scanning.
AppSec & Code Security
SAST, SCA, DAST, ASPM, AI code review, and API and application testing.
AppSec and Code Security spans SAST, SCA, DAST, ASPM, API and application testing, and AI code review. Application security posture management (ASPM) sits over the scanners to consolidate and prioritize their findings, and some listings focus specifically on scanning and securing AI-generated code.
Who this is for: Application security and platform engineering teams standardizing SAST, SCA, DAST, and ASPM coverage, and anyone evaluating security for AI-assisted or AI-generated code.
35 vendors; newest added 2026-08-13. Ordered by name. No paid placement.
Application security platform connecting security findings to engineering team workflows.
Black Duck Software
Founded 2002
Application security testing tools spanning software composition analysis, static analysis, and audits.
Checkmarx
Founded 2006
Application security platform combining SAST, SCA, API security, and supply chain scanning.
Clearly AI
Founded 2024
AI system that performs security and privacy reviews of product designs and changes.
Clover Security
Founded 2023
Application security platform embedding AI agents into design and coding stages of development.
London-based platform for finding and fixing security flaws in AI-generated code.
Corridor
Founded 2025
Security layer for AI-assisted coding that catches flaws before code is generated.
Cytix
Founded 2022
Platform that matches each code change to the appropriate security testing automatically.
Dam Secure
Founded 2025
Tool that turns plain-English security policies into real-time guardrails for developers and AI agents.
DefendLab
Founded 2004
AI-driven product security testing that uses source code context to find business logic flaws.
depthfirst
Founded 2024
AI systems that analyze code, infrastructure, and business logic to uncover exploitable vulnerabilities.
DevArmor
Founded 2024
San Francisco startup building application security tooling for AI-assisted development.
Endor Labs
Founded 2021
Application security platform prioritizing and fixing risks in dependencies and AI-written code.
Fencer
Founded 2025
AI agents that operate as a security team, from finding vulnerabilities through remediation.
Gecko Security
Founded 2024
AI code analysis engine that finds business logic vulnerabilities traditional scanners cannot detect.
GitHub
Founded 2008
US developer platform. Advanced Security and Copilot security features cover code scanning, secrets, and AI-assisted review.
GitLab
Founded 2014
DevSecOps platform covering source control, CI/CD, planning, and built-in security scanning.
Harness
Founded 2016
Software delivery platform with built-in code scanning, supply chain security, and WAAP.
Heeler
Founded 2023
Application security platform for AI-driven development, spanning prevention, fixes, and audit.
Impart
Founded 2021
Runtime protection for APIs and applications, built as a modern WAF alternative.
Invicti Security
Founded 2018
Web application and API security testing combining DAST scanning with ASPM.
Mend.io
Founded 2011
Application security platform combining open source scanning, static analysis, and controls for AI-generated code.
Nullify
Founded 2022
AI application security engineer that finds, triages, and fixes code vulnerabilities autonomously.
OX Security
Founded 2021
Application security posture management platform covering code from AI-assisted authoring through production.
Pi Security
Founded 2025
Product security platform applying AI agents across the SDLC from design to production.
PrimeSec Inc.
Founded 2023
AI agents for product security work such as design reviews and threat modeling in development.
Qodo
Founded 2022
AI code integrity platform reviewing, testing, and validating code written by humans and AI.
Salt Security
Founded 2016
API security platform discovering APIs and blocking attacks using behavioral analysis.
Seezo
Founded 2023
Tool that automates security design reviews using AI, generating requirements before code is written.
Semgrep
Founded 2017
Code security platform combining static analysis, dependency scanning, and secrets detection.
Snyk
Founded 2015
Developer security platform scanning code, open source dependencies, containers, and infrastructure as code.
StackHawk
Founded 2019
API and application security testing that runs in CI/CD, built for developers.
Veracode
Founded 2006
Application security platform providing static, dynamic, and software composition analysis with AI-assisted fixes.
ZeroPath
Founded 2024
AppSec platform that finds, verifies, and patches exploitable code vulnerabilities using AI.