Sparrow SAST Description
Support over 20 languages including Java, JSP, C/C++, C#, Python, Swift, ASP(.NET), ABAP, Object C, etc. Conforms to international security standards and guidelines. Analysis of MVC structure, associated files, and analysis function call relationship at various levels. Incremental analysis: Reduce analysis time by only analysing newly added, modified files as well as their associated files. To identify vulnerabilities and improve search results, you can interact with other Sparrow AST solutions (DAST or RASP). Track and track vulnerabilities from their origin to the actual code with the issue navigator. Automated real-source code correction guide. Automated classification and analysis of vulnerabilities. Dashboard for analysis results management and statistics. Management of centralized rules (Checker), based on information such as risk levels, option, and other.
Sparrow SAST Alternatives
Kiuwan Code Security
Security Solutions for Your DevOps Process
Automate scanning your code to find and fix vulnerabilities. Kiuwan Code Security is compliant with the strictest security standards, such OWASP or CWE. It integrates with top DevOps tools and covers all important languages.
Static application security testing and source analysis are both effective, and affordable solutions for all sizes of teams. Kiuwan provides a wide range of essential functionality that can be integrated into your internal development infrastructure.
Quick vulnerability detection: Simple and quick setup. You can scan your area and receive results in minutes.
DevOps Approach to Code Security: Integrate Kiuwan into your Ci/CD/DevOps Pipeline to automate your security process.
Flexible Licensing Options. There are many options. One-time scans and continuous scanning. Kiuwan also offers On-Premise or Saas models.
Learn more
Visual Expert
Visual Expert is a static code analyzer for Oracle PL/SQL, SQL Server T-SQL and PowerBuilder.
It identifies code dependencies to let you modify the code without breaking your application.
It also scans your code to detect security flaws, quality, performance and maintenability issues.
Identify breaking changes with impact analysis.
Scan the code to find security vulnerabilities, bugs and maintenance issues.
Integrate continuous code inspection in a CI workflow.
Understand the inner workings and document your code with call graphs, code diagrams, CRUD matrices, and object dependency matrices (ODMs).
Automatically generate source code documentation in HTML format.
Navigate your code with hyperlinks.
Compare two pieces of code, databases or entire applications.
Improve maintainability. Clean up code. Comply with development standards.
Analyze and improve database code performance: Find slow objects and SQL queries, optimize a slow object, a call chain, a slow SQL query, display a query execution plan.
Learn more
PT Application Inspector
PT Application Inspector is a source code analyzer that provides high-quality analysis and easy tools to automatically confirm vulnerabilities. This allows security specialists and developers to work more efficiently and speed up the process of creating reports. Combining static, dynamic, as well as interactive application security testing (SAST+ DAST+ IAST) yields unparalleled results. PT Application Inspector only identifies the real vulnerabilities, so you can concentrate on the issues that really matter. Special features such as automatic vulnerability verification, filtering and incremental scanning for each vulnerability, as well interactive data flow diagrams (DFDs) for each vulnerability, make remediation much faster. Reduce vulnerabilities in the final product, and reduce the cost of fixing them. Analyze the software at the very beginning of its development.
Learn more
Snappytick
Snappy Tick Source Edition is a source-code review tool that helps to identify vulnerabilities in source code. We offer Source Code Review and Static Code Analysis tools. An In-line auditing approach will help you identify the most important security issues in your application. It will also verify that there are adequate security controls. SnappyTick Standard Edition (DAST), is a Dynamic application security tool that performs grey box and black box testing. Analyze the responses and requests to find vulnerabilities in an application. This can be done while the applications are still running. SnappyTick has amazing features. Multilingual scanning is possible. The best reporting that highlights the exact source files, line numbers, subsections, and even lines that are affected.
Learn more
Pricing
Pricing Information:
one-time payment
Integrations
Company Details
Company:
Sparrow
Year Founded:
2018
Headquarters:
South Korea
Website:
www.sparrowfasoo.com/en/product/sast
Media
Recommended Products
Secure your business by securing your people.
Take the guesswork out of password management, shadow IT, infrastructure, and secret sharing so you can keep your people safe and your business moving.
Product Details
Platforms
SaaS
Type of Training
Documentation
Customer Support
Online
Sparrow SAST Features and Options
Sparrow SAST User Reviews
Write a Review- Previous
- Next