AppSOC Integrations

SCA (JSON)

Featured

by

Veracode

Identifies vulnerabilities in open-source components to manage security risks associated with these libraries.

DSOP

Featured

by

US DoD

SAST framework tailored for the U.S. DoD that identifies vulnerabilities in source code during development.

Prowler

Featured

by

Verica

Open-source tool for AWS environments for security assessments, hardening guidance, and compliance auditing.

Wfuzz

Featured

by

Xavi Mendez

Tool for brute-forcing or fuzzing web applications to identify security vulnerabilities and issues such as XSS or SQLI.

SAST (JSON)

Featured

by

Veracode

Scans source code, binaries, and bytecode to identify security vulnerabilities without executing the application.

yarn audit

Featured

by

Yarn

Learn about yarn audit integration with AppSOC, enhancing your security by consolidating data and prioritizing critical threats. Contact us for a demo today.

Horusec

Featured

by

Zup Innovation

Analyzes source code for vulnerabilities to identify and fix security issues early in the development process.

Wapiti Scanner

Featured

by

Wapiti

Open-source vulnerability scanner with black-box testing, identifying security flaws such as SQL injection and XSS.

detect-secrets

Featured

by

Yelp

Prevents sensitive information such as passwords, API keys, and tokens from being committed to version control systems.

Terrascan

Featured

by

Tenable

Detects compliance violations across Infrastructure-as-Code before provisioning cloud infrastructure.

Hub Component Risk

Featured

by

Black Duck

Provides risk assessments open-source components analyzing vulnerabilities, license risks, and operational risks.

Crashtest

Featured

by

Veracode

Scans running web applications to identify vulnerabilities like SQL injection and XSS from an external perspective.

WhiteHat Sentinel

Featured

by

Synopsys

Comprehensive WAS solution with both SAST and DAST to identify and remediate vulnerabilities.

TruffleHog

Featured

by

Truffle Security

Searches through git repositories for high entropy strings, secrets, exposed passwords and security tokens.

Coverity API

Featured

by

Synopsys

Integrates of static code analysis into development pipelines for scanning and management of code quality.

Trufflehog3

Featured

by

Truffle Security

Updated version enhanced to scan deeper and faster for exposed secrets and sensitive information in codebases.