AppSOC Integrations

SonarQube

Featured

by

SonarSource

Open-source platform for inspection of code quality to detect bugs, code smells, and security vulnerabilities.

appScreener

Featured

by

Solar

Analyzes source code for vulnerabilities without requiring access to the source code.

Black Duck SCA

Featured

by

Black Duck

Tool to manage open source security, license compliance and code quality risks in software portfolios.

Snyk Code

Featured

by

Snyk

Analyzes source code to identify and fix vulnerabilities in developer workflows and CI/CD pipelines

PHP Security Checker

Featured

by

SensioLabs

Analyzes PHP projects for security vulnerabilities checking composer.lock files against a database of reported issues.

bundler-audit

Featured

by

RubySec

Provides patch-level verification for Bundler, identifying gems with known vulnerabilities in Ruby applications.

DevAudit

Featured

by

Sonatype

Open-source tool for vulnerability assessments for applications, dependencies, and operating systems.

Fusion API

Featured

by

Trustwave

Integrates security data, automates processes, and orchestrates responses across cybersecurity environments.

Nessus

Featured

by

Tenable

Identifies vulnerabilities, misconfigurations, and security risks in network devices, systems, and applications.

Trustwave DAST

Featured

by

Trustwave

Automatically finds vulnerabilities in web applications by simulating external hacking attacks in real-time.

Web App Scanning

Featured

by

Tenable

Identifies vulnerabilities in web applications helping secure web environments from security threats.

Trufflehog3

Featured

by

Truffle Security

Updated version enhanced to scan deeper and faster for exposed secrets and sensitive information in codebases.

Coverity API

Featured

by

Synopsys

Integrates of static code analysis into development pipelines for scanning and management of code quality.

TruffleHog

Featured

by

Truffle Security

Searches through git repositories for high entropy strings, secrets, exposed passwords and security tokens.

WhiteHat Sentinel

Featured

by

Synopsys

Comprehensive WAS solution with both SAST and DAST to identify and remediate vulnerabilities.

Crashtest

Featured

by

Veracode

Scans running web applications to identify vulnerabilities like SQL injection and XSS from an external perspective.