Vulnerability scanning tools

Mature open-source web application scanner and proxy.

Industry-standard web vulnerability scanner and testing platform.

Template-based fast vulnerability scanner.

Automated web vulnerability scanning with broad coverage.

Lightweight static analysis with custom rule support.

Code quality and security analysis across many languages.

Semantic code analysis engine maintained by GitHub.

Enterprise SAST with broad language and framework coverage.

Dependency vulnerability scanning with developer-friendly fixes.

Identifies known-vulnerable dependencies via NVD data.

Interactive application security testing via runtime instrumentation.

All-in-one scanner for containers, IaC, and dependencies.

Policy-as-code IaC scanner for Terraform, CloudFormation, K8s.

Detects hardcoded secrets in git history and working trees.