Vulnerability Scanning & Code Security

HI

Have I Been Pwned

4.7/5.01 verified review

Paid·$4.39/mo

Data breach search and notification service for security teams and developers.

• Comprehensive database with tens of billions of historical breached records.
• Efficient REST API for programmatic integration into corporate systems.
• Continuous monitoring of entire domains for early breach alerts.

SE

Semgrep

4.6/5.01 verified review

Freemium·Open Source·LGPL-2.1

Application security platform offering SAST, SCA, and AI-assisted secrets detection.

• Fast semantic analysis engine with highly customizable YAML rules.
• Broad support for numerous programming languages and modern frameworks.
• Open-source community edition with unlimited local execution via CLI.

17.4kstars on GitHub

AS

Aikido Security

4.6/5.01 verified review

Freemium·Open Source·LGPL-2.1

Unified security platform for code, cloud infrastructure, and developer workflows.

• Significant reduction in false positives through contextual analysis.
• Automated remediation capabilities integrated into development workflows.
• Unified coverage spanning code, cloud, and supply chain.

3.3kstars on GitHub

GI

GitGuardian

4.5/5.01 verified review

Freemium

Credential layer security platform for detecting leaked secrets and managing risks

• Automated secret detection across multiple code repositories and workflows
• High accuracy in identifying false positives through contextual analysis
• Native integration with developer toolchains and CI/CD pipelines

WI

Wiz

4.5/5.01 verified review

Contact Sales

Cloud native and AI cybersecurity platform powered by a unified context security graph.

• Unified context graph correlating vulnerabilities across code, cloud, and runtime.
• Agentless architecture for rapid deployment and scanning across cloud environments.
• Comprehensive coverage for cloud-native workloads and artificial intelligence layers.

MR

Mend Renovate

4.5/5.01 verified review

Freemium·Open Source·AGPL-3.0

Automated dependency management and package update tool.

• Significant reduction in time spent on manual dependency maintenance.
• Broad compatibility with multiple language ecosystems and package managers.
• High configuration flexibility to tailor update frequency and formats.

22.9kstars on GitHub

SO

Socket

4.5/5.01 verified review

Freemium

Developer-first software supply chain security platform

• Proactive detection of malicious packages and zero-day attacks before installation.
• Broad coverage across multiple package registries including npm, PyPI, Go, and Cargo.
• Native GitHub integration to block pull requests containing risky dependencies.

SN

Snyk

4.4/5.01 verified review

Freemium

Developer-first security platform for code, dependencies, containers, and infrastructure.

• Early vulnerability detection directly inside the IDE workflow.
• Broad language and package manager support.
• Automated fix generation via pull requests.

SO

Sonar

4.4/5.01 verified review

Freemium

Static code analysis platform ensuring quality, security, and automated code review.

• Early detection of security vulnerabilities and logical bugs.
• Native integration with major CI/CD platforms and development environments.
• Comprehensive support for analyzing AI-generated code snippets.

RU

Ryzova UCE

4.4/5.01 verified review

Free·Open Source·MPL-2.0

Deterministic, rule-based software compatibility analyzer for Git repositories and project archives.

• Deterministic engine ensuring consistent results without hallucinations.
• Local-first architecture protects source code confidentiality.
• Database of 6,500 schema-validated rules for precise diagnostics.

1stars on GitHub

SE

SetRepo

4.4/5.01 verified review

Freemium

Automated security scanners for web apps and AI-generated software.

• Comprehensive scanning covering source code, dependencies, secrets, and the live website.
• Provides specific code fixes for every detected vulnerability.
• Read-only access to GitHub repositories without making changes to the source code.

TM

Trend Micro

4.4/5.01 verified review

Paid

Global enterprise cybersecurity platform with cloud and endpoint protection.

• Advanced layered protection for endpoints and cloud
• Broad global coverage with integrated threat intelligence
• Support for AI-driven security workflows