#sca

SAST

InsomniaSAST

Inline secret + vulnerability scanning for your editor. Catches AWS/Stripe/JWT secrets, SQLi, command-injection and dependency CVEs as you save, and blocks git pushes that would leak them.

Cycode

cycode

Run Cycode security scans (Secrets, SAST, SCA, IaC) in Azure Pipelines and view an aggregated HTML report in a build results tab.

VulTech — Enterprise Application Security

vultechio

Unified SAST, SCA & compliance in VS Code and Cursor. Enterprise SSO, air-gapped on-prem, and the same detection engine as the VulTech platform.

DepAnalyzer Security

DepAnalyzerUPT

Detecta dependencias vulnerables y desactualizadas desde Visual Studio Code.

StarGuard

starbridge

Análise de segurança no editor com a sua conta StarGuard: código, dependências, regras de negócio e skills — cada uma por conta própria, com correção assistida. Requer conta da Starbridge.

HCL AppScan MCP

HCLTechnologies

Connect HCL AppScan on Cloud and HCL AppScan 360º to VS Code via the Model Context Protocol.

SecurStack

SecurStackio

Run SecurStack security scans from VS Code.