Average Ratings 11 Ratings
Average Ratings 0 Ratings
Similar Products
-
Aikido SecurityAikido is the all-in-one security platform for development teams to secure their complete stack, from code to cloud. Aikido centralizes all code and cloud security scanners in one place. Aikido offers a range of powerful scanners including static code analysis (SAST), dynamic application security testing (DAST), container image scanning, and infrastructure-as-code (IaC) scanning. Aikido integrates AI-powered auto-fixing features, reducing manual work by automatically generating pull requests to resolve vulnerabilities and security issues. It also provides customizable alerts, real-time vulnerability monitoring, and runtime protection, enabling teams to secure their applications and infrastructure seamlessly.
-
ParasoftParasoft's mission is to provide automated testing solutions and expertise that empower organizations to expedite delivery of safe and reliable software. A powerful unified C and C++ test automation solution for static analysis, unit testing and structural code coverage, Parasoft C/C++test helps satisfy compliance with industry functional safety and security requirements for embedded software systems.
-
TrustInSoft AnalyzerTrustInSoft commercializes a source code analyzer called TrustInSoft Analyzer, which analyzes C and C++ code and mathematically guarantees the absence of defects, immunity of software components to the most common security flaws, and compliance with a specification. The technology is recognized by U.S. federal agency the National Institute of Standards and Technology (NIST), and was the first in the world to meet NIST’s SATE V Ockham Criteria for high quality software. The key differentiator for TrustInSoft Analyzer is its use of mathematical approaches called formal methods, which allow for an exhaustive analysis to find all the vulnerabilities or runtime errors and only raises true alarms. Companies who use TrustInSoft Analyzer reduce their verification costs by 4, efforts in bug detection by 40, and obtain an irrefutable proof that their software is safe and secure. The experts at TrustInSoft can also assist clients in training, support and additional services.
-
Rocket z/Assure VAPYour mission-critical systems carry the weight of your entire organization. Protecting them shouldn't leave you guessing about hidden vulnerabilities or compliance risks. Rocket® z/Assure™ Vulnerability Analysis Program (VAP) is a specialized mainframe security solution built to proactively scan and safeguard your most valuable environments. By identifying system-level risks before they become active threats, we partner with you to ensure your infrastructure remains locked down, resilient, and fully compliant. We understand the responsibility of managing enterprise security, and our tool gives you the exact insights you need to confidently eliminate weak points. Key benefits for your security team: - Identify and resolve hidden vulnerabilities with deep, automated scanning. - Protect your mission-critical data from evolving external and internal threats. - Streamline compliance reporting with clear, actionable security insights. Take control of your mainframe security. Partner with Rocket Software to protect your digital foundation today.
-
Orca SecurityOrca Security is the pioneer of agentless cloud security that is trusted by hundreds of enterprises globally. Orca makes cloud security possible for enterprises moving to and scaling in the cloud with its patented SideScanning™ technology and Unified Data Model. The Orca Cloud Security Platform delivers the world's most comprehensive coverage and visibility of risks across AWS, Azure, Google Cloud and Kubernetes.
-
FerootFeroot Security is a global leader in AI-powered website and web application compliance and security. Feroot AI protects digital experiences from hidden threats while continuously enforcing compliance with PCI DSS 4.0.1, HIPAA rules on online tracking technologies, CCPA/CPRA, GDPR, CIPA, and over 50 global laws and standards. The Feroot AI Platform replaces manual compliance work and operational overhead with continuous automation. What once required months of effort across security, engineering, and legal teams can now be deployed in minutes, delivering real-time protection and audit-ready evidence. Feroot unifies critical capabilities into a single platform, including JavaScript behavior analysis, web compliance scanning, third-party script monitoring, consent enforcement, and data privacy posture management. It is purpose-built to detect and stop web-based threats such as Magecart, formjacking, e-skimming, and unauthorized tracking on high-risk assets like payment pages, login flows, iframes, and healthcare portals. Trusted by Fortune 500 enterprises, healthcare providers, retailers, SaaS platforms, utilities, payment service providers, universities, and public sector organizations, Feroot safeguards hundreds of millions of users worldwide. Feroot AI solutions include PaymentGuard AI, HealthData Shield AI, AlphaPrivacy AI, CodeGuard AI, and MobileGuard AI. Visit feroot for more information.
-
Astra PentestAstra's Pentest is a comprehensive solution for penetration testing. It includes an intelligent vulnerability scanner and in-depth manual pentesting. The automated scanner performs 10000+ security checks, including security checks for all CVEs listed in the OWASP top 10 and SANS 25. It also conducts all required tests to comply with ISO 27001 and HIPAA. Astra provides an interactive pentest dashboard which allows users to visualize vulnerability analysis, assign vulnerabilities to team members, collaborate with security experts, and to collaborate with security experts. The integrations with CI/CD platforms and Jira are also available if users don't wish to return to the dashboard each time they want to use it or assign a vulnerability for a team member.
-
RealCISORealCISO is a compliance intelligence platform for two audiences: MSPs and MSSPs managing security across multiple clients, and enterprise teams running compliance in-house. MSPs, MSSPs, and security consultants use it to run compliance assessments, manage cyber risk, track remediation, and report to boards — all in one place. Assessments map directly to NIST CSF, SOC 2, NIST 800-171, HIPAA, CIS Controls, CMMC, and 30+ other frameworks. Instead of months of spreadsheet work, clients get a clear picture of where they stand and what to fix — in days. Over 3,000 security providers rely on RealCISO to deliver vCISO services at scale. Built by practitioners. Founded by Brian Haugli — former DoD, former VP & CSO at The Hanover Insurance Group, CISSP, and co-author of the NIST CSF book published by Wiley.
-
Criminal IP ASMCriminal IP's Attack Surface Management (ASM) is an intelligence-driven platform designed to continuously identify, catalog, and oversee all internet-connected assets linked to an organization, including overlooked and shadow resources, enabling teams to understand their actual external exposure from the perspective of potential attackers. This solution integrates automated asset detection with open-source intelligence (OSINT) methods, artificial intelligence enhancements, and sophisticated threat intelligence to reveal exposed hosts, domains, cloud services, IoT devices, and other internet-facing entry points, while also collecting evidence such as screenshots and metadata, and linking findings to known vulnerabilities and attacker techniques. By evaluating exposures through the lens of business relevance and risk, ASM emphasizes vulnerable elements and misconfigurations, providing instantaneous alerts and interactive dashboards that facilitate quicker investigations and remediation efforts. Furthermore, this comprehensive tool empowers organizations to proactively manage their security posture, ensuring that they remain vigilant against emerging threats.
-
JosysJosys is an AI-native identity security and governance platform built for the age of enterprise AI. As AI adoption accelerates, identity has become the fastest-growing attack surface and the hardest to govern. Josys discovers, governs, and secures every identity in the enterprise, human, machine, and AI agent, across every application. Its policy-led model lets security and IT teams set access policies once and enforce them autonomously: risk gets surfaced, access gets controlled, and identity threats get remediated in real time, with no manual oversight required. Over 1,000 organizations and MSPs worldwide trust Josys to turn identity from a liability into an autonomously governed advantage. Learn more at josys.com.
Description
Security Solutions for Your DevOps Process
Automate scanning your code to find and fix vulnerabilities. Kiuwan Code Security is compliant with the strictest security standards, such OWASP or CWE. It integrates with top DevOps tools and covers all important languages.
Static application security testing and source analysis are both effective, and affordable solutions for all sizes of teams. Kiuwan provides a wide range of essential functionality that can be integrated into your internal development infrastructure.
Quick vulnerability detection: Simple and quick setup. You can scan your area and receive results in minutes.
DevOps Approach to Code Security: Integrate Kiuwan into your Ci/CD/DevOps Pipeline to automate your security process.
Flexible Licensing Options. There are many options. One-time scans and continuous scanning. Kiuwan also offers On-Premise or Saas models.
Description
Visual Expert is a static code analyzer for Oracle PL/SQL, SQL Server T-SQL and PowerBuilder.
It identifies code dependencies to let you modify the code without breaking your application.
It also scans your code to detect security flaws, quality, performance and maintenability issues.
Identify breaking changes with impact analysis.
Scan the code to find security vulnerabilities, bugs and maintenance issues.
Integrate continuous code inspection in a CI workflow.
Understand the inner workings and document your code with call graphs, code diagrams, CRUD matrices, and object dependency matrices (ODMs).
Automatically generate source code documentation in HTML format.
Navigate your code with hyperlinks.
Compare two pieces of code, databases or entire applications.
Improve maintainability. Clean up code. Comply with development standards.
Analyze and improve database code performance: Find slow objects and SQL queries, optimize a slow object, a call chain, a slow SQL query, display a query execution plan.
API Access
Has API
Yes
API Access
Has API
No
Integrations
GitLab
Yes
Visual Studio
Yes
Azure DevOps Server
No
C#
Yes
C++
Yes
CLion
Yes
CloudBees
Yes
HTML
Yes
IBM i
Yes
Java
Yes
Integrations
GitLab
Yes
Visual Studio
Yes
Azure DevOps Server
Yes
C#
No
C++
No
CLion
No
CloudBees
No
HTML
No
IBM i
No
Java
No
Pricing Details
For both Code Security and Insights pricing is accessible on request, scans and continuous scanning is available.
Free Trial
No
Free Version
No
Pricing Details
$495 per year
Perpetual license available
Floatting license available
Floatting license available
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Kiuwan
Founded
2012
Country
Spain
Website
www.kiuwan.com
Vendor Details
Company Name
Novalys
Founded
1998
Country
France
Website
www.visual-expert.com
Product Features
IT Security
Anti Spam
No
Anti Virus
No
Email Attachment Protection
No
Event Tracking
No
IP Protection
No
Internet Usage Monitoring
No
Intrusion Detection System
No
Spyware Removal
No
Two-Factor Authentication
No
Vulnerability Scanning
Yes
Web Threat Management
No
Web Traffic Reporting
No
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Static Code Analysis
Analytics / Reporting
Yes
Code Standardization / Validation
No
Multiple Programming Language Support
Yes
Provides Recommendations
Yes
Standard Security/Industry Libraries
No
Vulnerability Management
Yes
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
Yes
Threat Intelligence
Yes
Web Inspection
No
Product Features
Application Development
Access Controls/Permissions
No
Code Assistance
No
Code Refactoring
Yes
Collaboration Tools
Yes
Compatibility Testing
No
Data Modeling
No
Debugging
No
Deployment Management
No
Graphical User Interface
No
Mobile Development
No
No-Code
No
Reporting/Analytics
Yes
Software Development
Yes
Source Control
No
Testing Management
No
Version Control
No
Web App Development
No
Performance Testing
API Testing
No
Benchmarking
No
Cross Browser Testing
No
Debugging
No
Historical Reporting
No
Load Testing
No
Mobile Testing
No
Parallel Testing
No
Regression Testing
No
UI Testing
No
Web Testing
No
Source Code Management
Access Controls/Permissions
No
Bug Tracking
No
Build Automation
No
Change Management
Yes
Code Review
Yes
Collaboration
No
Continuous Integration
Yes
Repository Management
No
Version Control
No
SQL Server
CPU Monitoring
No
Credential Management
No
Database Servers
No
Deployment Testing
No
Docker Compatible Containers
No
Event Logs
No
History Tracking
No
Patch Management
No
Scheduling
No
Supports Database Clones
No
User Activity Monitoring
No
Virtual Machine Monitoring
No
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Static Code Analysis
Analytics / Reporting
Yes
Code Standardization / Validation
Yes
Multiple Programming Language Support
Yes
Provides Recommendations
Yes
Standard Security/Industry Libraries
Yes
Vulnerability Management
Yes
Vulnerability Management
Asset Discovery
No
Asset Tagging
No
Network Scanning
No
Patch Management
No
Policy Management
No
Prioritization
No
Risk Management
No
Vulnerability Assessment
Yes
Web Scanning
No
