Introducing
The Slant team built an AI & it’s awesome
Find the best product instantly
Add to Chrome
Add to Edge
Add to Firefox
Add to Opera
Add to Brave
Add to Safari
Try it now
4.7 star rating
0
Log in
•
Sign up
Add Question
Follow
DevOps
Security
Continuous Integration
What are the best DevOps security tools?
8
Options
Considered
11
User
Recs.
Apr 19, 2023
Last
Updated
Related Questions
Activity
Here’s the Deal
Slant is powered by a community that helps you make informed decisions. Tell us what you’re passionate about to get your personalized feed and help others.
Let's go!
Have feedback or ideas?
Join our community
on Discord
Ad
8
Options
Considered
Best DevOps security tools
Price
Platforms
Technology
--
SonarQube
Free / paid
Windows, Linux, Mac, Web
Java
--
FlexNet Code Aware
Free / paid
-
-
--
Teqnix
Free / paid
Web
-
--
OpenVAS
Free / Paid
Linux, Docker
C
--
OWASP Dependency-Track
Free
Windows, Linux, Mac, Docker
-
See Full List
--
SonarQube
My Rec
ommendation
for
SonarQube
My Recommendation for
SonarQube
Add Video or Image
All
7
Experiences
2
Pros
4
Specs
Top
Pro
•••
Continuous code quality as a service
Quick installation/configuration and code review. This follows rules that support industry standards (across of installation of plugins). Quality model (Bugs track code, Vulnerabilities, Code Smells all are raised on code in a simple user interface).
See More
Erich Gehrsitz's Experience
Excellent automatic checking of sources for security related issues. Good tips for improving the programming style.
See More
Specs
Platforms:
Windows, Linux, Mac, Web
Technology:
Java
Top
Pro
•••
Good integration with Jenkins
See More
RickZeeland's Experience
SonarQube is an open-source quality management platform that is available in a Community Edition and a paid Enterprise Edition. The free version supports: C#, CSS, Flex, Go, HTML, Java, JavaScript, Kotlin, PHP, Python, Ruby, Scala, TypeScript, VB.NET, XML.
See More
Top
Pro
•••
Automatic checking for security issues
See More
Top
Pro
•••
Improves programming style
See More
Hide
See All
Free / paid
Recommend
2
--
FlexNet Code Aware
My Rec
ommendation
for
FlexNet Code Aware
My Recommendation for
FlexNet Code Aware
Add Video or Image
Hide
Free / paid
Recommend
2
--
Teqnix
My Rec
ommendation
for
Teqnix
My Recommendation for
Teqnix
Add Video or Image
All
1
Specs
Specs
Platforms:
Web
Hide
Free / paid
Recommend
1
--
OpenVAS
My Rec
ommendation
for
OpenVAS
My Recommendation for
OpenVAS
Add Video or Image
All
1
Specs
Specs
Platforms:
Linux, Docker
Technology:
C
Hide
Free / Paid
Recommend
1
--
OWASP Dependency-Track
My Rec
ommendation
for
OWASP Dependency-Track
My Recommendation for
OWASP Dependency-Track
All
3
Pros
1
Cons
1
Specs
Top
Con
•••
CI integrations
Limited support for CI systems, only Jenkins is officially supported.
See More
Top
Pro
•••
Free
See More
Specs
Platforms:
Windows, Linux, Mac, Docker
Hide
See All
Free
Recommend
2
--
Snyk
My Rec
ommendation
for
Snyk
My Recommendation for
Snyk
All
5
Pros
3
Cons
2
Top
Con
•••
ASP.NET Core is "High risk"
The TeamCity plugin fails the build for all ASP.NET Core applications stating that it is vulnerable to DOS attacks and that "there is no fix available".
See More
Top
Pro
•••
Multi language support
Snyk supports .NET, GO, Java. Node.js, PHP, Python, Ruby, Scala.
See More
Top
Con
•••
Shallow .NET support
Only seems to check the NuGet packages and not much else.
See More
Top
Pro
•••
TeamCity plugin
TeamCity plugin available.
See More
Top
Pro
•••
Integrations
Snyk can connect directly to GitHub, GitLab, Heroku, AWS Lambda, Bitbucket Server etc. It is also possible to use the CLI.
See More
Hide
See All
Free / paid
Recommend
1
--
WhiteSource Bolt
My Rec
ommendation
for
WhiteSource Bolt
My Recommendation for
WhiteSource Bolt
All
5
Experiences
1
Pros
3
Cons
1
Top
Pro
•••
Supports over 200 programming languages
See More
Top
Con
•••
Limited free version
Free version is limited to 5 scans per repo a day.
See More
RickZeeland's Experience
Scans projects and detects open source components and license vulnerabilities. Free version available for GitHub and as an extension for Azure DevOps.
See More
Top
Pro
•••
CI integration
The paid version supports Azure pipelines, TeamCity, Jenkins, Bamboo, CircleCI and Travis CI.
See More
Top
Pro
•••
Free
Free version available.
See More
Hide
See All
Free / paid
Recommend
1
--
OWASP Dependency-Check
My Rec
ommendation
for
OWASP Dependency-Check
My Recommendation for
OWASP Dependency-Check
All
7
Experiences
1
Pros
3
Cons
2
Specs
Top
Pro
•••
Free
See More
Top
Con
•••
Needs Java
Needs Java to be installed.
See More
RickZeeland's Experience
Open-source security tool, a lot better than Snyk for .NET projects!
See More
Specs
Platforms:
Windows, Linux, Mac, Docker
Technology:
Java
Top
Pro
•••
Jenkins plugin
See More
Top
Con
•••
No TeamCity plugin
There is no official TeamCity plugin, but there seems to be an unofficial tool: PacMon.
See More
Top
Pro
•••
Azure DevOps Extension
An Azure DevOps Extension is available on the Visual Studio Marketplace.
See More
Hide
See All
Free
Recommend
1
Don't see your favorite option? Add it.
I Recommend...
Built By the Slant team
Find the best product instantly.
4.7 star rating
Add to Chrome
Add to Edge
Add to Firefox
Add to Opera
Add to Brave
Add to Safari
Try it now - it's free
One sec!
Are you sure that you want to abandon your hard work?
Delete Work
Continue working
{}
undefined
url next
price drop
Add to Chrome
Add to Edge
Add to Firefox
Add to Opera
Add to Brave
Add to Safari
Join our community