Skip to content
Forums
AI & Developer Tool...
Code Review & Quali...
SAST & Dependency S...
 
Notifications
Clear all

SAST & Dependency Scanning

Evaluations of static application security testing and software composition analysis tools. Members post false-positive benchmarks and notes on how each tool handles monorepos.
RSS
Add topic
Page 3 / 17

Apiiro vs Semgrep - which catches more real vulnerabilities?

Last post by alexc_dev, 3 months ago

Posts: 15
Views: 80


Snyk vs Checkmarx - which tool has fewer false positives?

Last post by alexh82, 3 months ago

Posts: 7
Views: 106


Black Duck or SonarQube for a 10-person startup - which adds more value?

Last post by angela w, 3 months ago

Posts: 45
Views: 365


Switched from Mend to Apiiro - what was the migration like?

Last post by crm_hopper_2027, 3 months ago

Posts: 1
Views: 59


Checkmarx or JFrog Xray for a Python-heavy shop - honest take

Last post by devops_grunt, 3 months ago

Posts: 5
Views: 45


Snyk vs Veracode - which integrates better with Jenkins?

Last post by data_diver_dan, 3 months ago

Posts: 8
Views: 100


Thoughts on the new Claw Family 'Unified Agent'? Marketing hype or real improvement?

Last post by alex_f, 3 months ago

Posts: 15
Views: 71


Help: OpenClaw SAST keeps flagging our password hashing as 'weak crypto'.

Last post by data_diver_dan, 3 months ago

Posts: 4
Views: 95


Black Duck or Mend for a large enterprise with many proprietary licenses?

Last post by cloud_ops_learner, 3 months ago

Posts: 17
Views: 223


Snyk vs SonarQube - do you need both for a secure codebase?

Last post by Emma E., 3 months ago

Posts: 20
Views: 208


Page 3 / 17
Share:
Share
Tweet
Share
Share