Devsecops

Top devsecops tools and platforms

Ad Space (728x90)

Trivy

Open source vulnerability scanner

⭐ 4.6/5

containersopen source
Visit → Free

GitHub Advanced Security

Security features built into GitHub

⭐ 4.5/5

githubcode-scanningsecrets
Visit → From $49/committer/mo

HashiCorp Vault

Secrets management

⭐ 4.5/5

secretsinfrastructure
Visit → Free/Custom

Semgrep

Code analysis tool

⭐ 4.5/5

SASTcode review
Visit → Free/$40+/dev/mo

Snyk

Developer security platform

⭐ 4.5/5

DevSecOpsopen source
Visit → Free/$25+/dev/mo

Snyk Cloud

Cloud security for developers

⭐ 4.5/5

DevSecOpsIaC
Visit → Free/$25+/dev/mo

Auth0 (Okta)

Developer identity platform

⭐ 4.4/5

developerauthentication
Visit → Free/$23+/mo

Dependabot

Dependency updates by GitHub

⭐ 4.4/5

GitHubdependencies
Visit → Free

Invicti (Acunetix)

Automated web application security scanner

⭐ 4.4/5

web-scanningdastapi-testing
Visit → Custom pricing

OWASP ZAP

Free open-source web app security scanner

⭐ 4.4/5

dastopen-sourceowasp
Visit → Free

SonarQube

Code quality and security

⭐ 4.4/5

code qualitySAST
Visit → Free/$150+/mo

tfsec

Static analysis for Terraform security

⭐ 4.4/5

terraformiacopen-source
Visit → Free

Anchore

Container security and compliance platform

⭐ 4.3/5

containersbomcompliance
Visit → Free / Enterprise

Checkmarx

Application security platform

⭐ 4.2/5

SASTSCA
Visit → Custom pricing

CyberArk Conjur

Open-source secrets management for DevOps

⭐ 4.2/5

open-sourcedevopssecrets
Visit → Free / Enterprise

Lacework Code Security

Cloud code security with behavioral analysis

⭐ 4.2/5

iacbehavioralcode-scanning
Visit → Custom pricing

Prisma Cloud

Cloud-native security

⭐ 4.2/5

Palo AltoCNAPP
Visit → Custom pricing

Veracode

Application security testing

⭐ 4.1/5

SASTDASTSCA
Visit → Custom pricing