Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Uncover security weaknesses within a codebase using CodeQL, our premier semantic analysis tool for code. CodeQL empowers you to treat code as if it were data, enabling the writing of queries to identify every variant of a vulnerability, thereby eliminating it for good. By sharing your findings, you can assist others in this vital task. CodeQL is available at no cost for both research and open source projects. Execute real queries against widely-used open source codebases with CodeQL integrated into Visual Studio Code, experiencing firsthand the effectiveness of identifying poor coding practices and pinpointing similar issues throughout the entire codebase. You also have the option to create your own CodeQL databases for any project that complies with an OSI-approved open source license. It’s important to note that GitHub CodeQL is restricted to use on codebases that are either released under an OSI-approved open source license, utilized for academic research, or employed to generate CodeQL databases for automated analyses. To get started, simply download and incorporate the project's CodeQL database into VS Code, or generate a CodeQL database using the CodeQL command-line interface, allowing you to enhance your code's security comprehensively. Utilizing CodeQL not only improves your project but contributes to a safer coding environment for everyone.
Description
The YAG Suite is a French-made innovative tool that takes SAST to the next level. YAGAAN is a combination of static analysis and machine-learning. It offers customers more than a sourcecode scanner. It also offers a smart suite to support application security audits and security and privacy through DevSecOps design processes. The YAG-Suite supports developers in understanding the vulnerability causes and consequences. It goes beyond traditional vulnerability detection. Its contextual remediation helps them to quickly fix the problem and improve their secure coding skills. YAG-Suite's unique 'code mining' allows for security investigations of unknown applications. It maps all relevant security mechanisms and provides querying capabilities to search out 0-days and other non-automatically detectable risks. PHP, Java and Python are currently supported. Next languages in roadmap are JS, C and C++.
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
GitHub
Yes
Visual Studio Code
Yes
Earthly Lunar
Yes
Eclipse IDE
No
GitLab
No
Java
Yes
Jenkins
No
Opsera
Yes
Python
No
Integrations
GitHub
Yes
Visual Studio Code
Yes
Earthly Lunar
No
Eclipse IDE
Yes
GitLab
Yes
Java
No
Jenkins
Yes
Opsera
No
Python
Yes
Pricing Details
Free
Free Trial
No
Free Version
Yes
Pricing Details
From €500/token or €150/mo
Subscription: SaaS from €150/month/100kLoc
On premise from €215/month/100kLoc
Subscriptions are based on the number of lines of code to scan, no limit on the number of scans / users / projects.
Tokens are valid for per application
On premise from €215/month/100kLoc
Subscriptions are based on the number of lines of code to scan, no limit on the number of scans / users / projects.
Tokens are valid for per application
Free Trial
Yes
Free Version
Yes
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
GitHub
Founded
2008
Country
United States
Website
codeql.github.com
Vendor Details
Company Name
YAGAAN
Founded
2017
Country
France
Website
yagaan.com
Product Features
Static Code Analysis
Analytics / Reporting
No
Code Standardization / Validation
No
Multiple Programming Language Support
No
Provides Recommendations
No
Standard Security/Industry Libraries
No
Vulnerability Management
No
Product Features
Static Application Security Testing (SAST)
Application Security
Yes
Dashboard
Yes
Debugging
No
Deployment Management
No
IDE
Yes
Multi-Language Scanning
Yes
Real-Time Analytics
No
Source Code Scanning
Yes
Vulnerability Scanning
Yes
Static Code Analysis
Analytics / Reporting
Yes
Code Standardization / Validation
Yes
Multiple Programming Language Support
Yes
Provides Recommendations
Yes
Standard Security/Industry Libraries
Yes
Vulnerability Management
Yes
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No