Skip to content
Forums
AI & Developer Tool...
Code Review & Quali...
SAST & Dependency S...
 
Notifications
Clear all

SAST & Dependency Scanning

Evaluations of static application security testing and software composition analysis tools. Members post false-positive benchmarks and notes on how each tool handles monorepos.
RSS
Page 3 / 17

Apiiro vs Semgrep - which catches more real vulnerabilities?

Last post by alexc_dev, 1 month ago

Posts: 15
Views: 9


Snyk vs Checkmarx - which tool has fewer false positives?

Last post by alexh82, 1 month ago

Posts: 7
Views: 19


Black Duck or SonarQube for a 10-person startup - which adds more value?

Last post by angela w, 1 month ago

Posts: 45
Views: 84


Switched from Mend to Apiiro - what was the migration like?

Last post by crm_hopper_2027, 2 months ago

Posts: 1
Views: 10


Checkmarx or JFrog Xray for a Python-heavy shop - honest take

Last post by devops_grunt, 2 months ago

Posts: 5
Views: 10


Snyk vs Veracode - which integrates better with Jenkins?

Last post by data_diver_dan, 2 months ago

Posts: 8
Views: 36


Thoughts on the new Claw Family 'Unified Agent'? Marketing hype or real improvement?

Last post by alex_f, 2 months ago

Posts: 15
Views: 24


Help: OpenClaw SAST keeps flagging our password hashing as 'weak crypto'.

Last post by data_diver_dan, 2 months ago

Posts: 4
Views: 20


Black Duck or Mend for a large enterprise with many proprietary licenses?

Last post by cloud_ops_learner, 2 months ago

Posts: 17
Views: 76


Snyk vs SonarQube - do you need both for a secure codebase?

Last post by Emma E., 2 months ago

Posts: 20
Views: 48


Page 3 / 17
Share:
Share
Tweet
Share
Share