nowfound

Dev tools · alternatives · 2026

24 alternatives to Offensive360

SAST + DAST + SCA + Malware analysis — one platform, offline

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1AV

    Black Duck delivers True Scale Application Security — SAST, SCA, DAST, and AI-powered AppSec — to help security and development teams detect vulnerabilities, manage open source license risk, and secure the software supply chain. Trusted by 4,000+ organizations.

    2014 · tinfoilsecurity.com · its alternatives →

  2. 2

    Drowning in security reports? Dive into insights with Cyber

    2024 · cyber.deployh.ai · its alternatives →

  3. 3

    AI that spots real risks and keeps your code safe.

    2023 · codethreat.com · its alternatives →

  4. 4

    Black Duck delivers True Scale Application Security — SAST, SCA, DAST, and AI-powered AppSec — to help security and development teams detect vulnerabilities, manage open source license risk, and secure the software supply chain. Trusted by 4,000+ organizations.

    2011 · tinfoilsecurity.com · its alternatives →

  5. 5
    SOOS▲68

    Developer security, license, compliance and testing platform

    2021 · soos.io · its alternatives →

  6. 6

    SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.

    2016 · dependencyci.com · its alternatives →

  7. 7
    GenPT▲60

    One-click AI-native security testing for web apps

    Jan 2026 · siemba.io · its alternatives →

  8. 8BO

    Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…

    2023 · its alternatives →

  9. 9

    Vulnerability intelligence for real-time threat analysis

    2024 · exploitalarm.com · its alternatives →

  10. 10

    World's most intelligent web app & API security scan tool

    2024 · zerothreat.ai · its alternatives →

  11. 11

    Intelligence platform for engineering teams

    2021 · its alternatives →

  12. 12CI

    Black Duck delivers True Scale Application Security — SAST, SCA, DAST, and AI-powered AppSec — to help security and development teams detect vulnerabilities, manage open source license risk, and secure the software supply chain. Trusted by 4,000+ organizations.

    2014 · tinfoilsecurity.com · its alternatives →

  13. 13
    Reignat▲126

    Privacy-friendly web analytics platform built for makers

    Jun 2026 · reignat.com · its alternatives →

  14. 14

    Redteaming LLMs using other LLMs. Contribute to traghav/auto-redteam development by creating an account on GitHub.

    2023 · github.com · its alternatives →

  15. 15

    Turn codebases into interactive maps, graphs, and governance

    Jul 2026 · dev-swat.com · its alternatives →

  16. 16

    Code quality & security platform

    Oct 2025 · its alternatives →

  17. 17

    Real-time AI cheating detection for technical interviews

    May 2026 · zeroassist.in · its alternatives →

  18. 18

    No-Code Plattform zur schnellen Digitalisierung und Automatisierung von Unternehmensprozessen. Flexibel, skalierbar und ohne Programmieraufwand.

    2016 · saas.do · its alternatives →

  19. 19

    AI-powered SAST Security That Actually Understands Your Code

    2025 · enforster.ai · its alternatives →

  20. 20

    A lightweight web app security scanner for your CI pipelines

    2022 · portswigger.net · its alternatives →

  21. 21

    Find, prioritize and manage app vulnerabilities

    Aug 2026 · kronasecurity.es · its alternatives →

  22. 22BG

    We originally set out to solve complex debugging headaches and useless alerts caused by traditional security scanners in our own projects. Static Analysis (SAST) flagged too much noise because it couldn't verify runtime context, while Dynamic Analysis (DAST) missed internal logic bugs because it treated the app like a black box. We built a CLI tool to bridge this gap using grey box testing from a red team approach. We use internal knowledge of the codebase to guide parallel execution, allowing us to find complex or hidden logic errors and attack paths standard linters/scanners miss. The…

    Dec 2025 · bloodhoundsecurity.ca · its alternatives →

  23. 23

    Democratising Cybersecurity

    2025 · thefirewall.org · its alternatives →

  24. 24

    AI security scanner that finds & fixes bugs before they ship

    Aug 2026 · devaiopshub.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →