swap_horiz Checkmarx SAST Alternatives

1

Wireshark

Wireshark is a free and open-source packet analyzer used for network troubleshooting and security monitoring, allowing u...

Open Source Packet Analysis 1990S Network Forensics

9.4 Excellent

2

Cobalt Strike

Cobalt Strike is a commercial penetration testing and red teaming platform utilized by cybersecurity teams to simulate s...

Pentest Adversary Simulation Red Team Fortra

9.1 Excellent

3

Wiz Cloud Security Platform

Wiz Cloud Security Platform analyzes network traffic in real-time to detect and prevent sophisticated threats like ranso...

Enterprise Cloud Security Agentless Cspm

9.0 Excellent

4

Metasploit Pro

Metasploit Pro is a commercial penetration testing framework offering a comprehensive suite of tools and modules for vul...

Penetration Testing Offensive Rapid7 Exploit Framework

8.9 Great

5

Shodan

Shodan is a search engine that indexes internet-connected devices – including servers, routers, and industrial control s...

IOT Asset Discovery Osint Internet Scanner

8.9 Great

6

Tenable Nessus

Tenable Nessus is a vulnerability scanner that identifies weaknesses in systems and applications by analyzing configurat...

Enterprise Compliance Vulnerability Scanner Assessment

8.8 Great

7

Cisco Duo

Cisco Duo Security offers multi-factor authentication (MFA) solutions that verify user identities using multiple methods...

Zero Trust Cisco Identity Security Mfa

8.8 Great

8

Suricata

Suricata is an open-source network threat detection system that performs deep packet inspection and intrusion prevention...

Open Source Network Intrusion Detection 2010S

8.8 Great

9

SentinelOne Singularity Platform

The SentinelOne Singularity Platform employs AI and machine learning to autonomously detect and respond to malware threa...

Enterprise AI Driven Xdr Edr

8.7 Great

10

Zeek

Zeek (formerly Bro) is an open-source network monitoring framework that analyzes network traffic in real-time, detecting...

Traffic Analysis Open Source Network Monitoring 1990S

8.7 Great

11

Snyk Developer Security Platform

Snyk Developer Security Platform provides automated vulnerability scanning and remediation for applications built with p...

Cloud Native Developer Sca Sast

8.2 Great

12

Veracode Static Analysis

Veracode Static Analysis automatically scans application source code for known vulnerabilities like SQL injection and cr...

Enterprise Sast Appsec Veracode

8.1 Great

13

Aqua Security Platform

Aqua Security Platform is a comprehensive software solution that automates container and cloud workload security by prov...

Cloud Native Kubernetes Container Security Aqua

7.9 Good

14

Black Duck SCA

Black Duck Software’s SCA Analyzer automatically identifies and manages open-source components within software projects,...

Open Source Supply Chain Sca Appsec

7.8 Good

15

Qualys Web Application Scanning

Qualys Web Application Scanning automatically identifies vulnerabilities in web applications by testing them against kno...

Cloud Web Security Dast Appsec

7.5 Good

16

Sonatype Nexus Lifecycle

Sonatype Nexus Lifecycle is an open-source repository manager that automates the management of software artifacts across...

Supply Chain DEVOPS Sca Appsec

7.4 Good

17

Contrast Security

Contrast Security is a runtime protection platform that utilizes behavioral analysis and machine learning to detect and...

Developer Appsec Iast Rasp

7.3 Good

18

Rapid7 InsightAppSec

Rapid7 InsightAppSec is a web application vulnerability scanner that performs continuous assessments of applications thr...

Web App Dast Appsec Rapid7

7.1 Good

19

Mend SCA

Mend SCA continuously monitors software supply chains for vulnerabilities and misconfigurations across open-source compo...

Open Source Devsecops Sca Mend

6.9 Fair

20

HCL AppScan

HCL AppScan is a dynamic application security testing (DAST) tool that automatically scans web applications and APIs for...

Enterprise Hcl Dast Sast

6.6 Fair