Application security testing vendors in the United States

Black Duck provides application security testing tools for software development.

Checkmarx provides application security testing software that scans code for vulnerabilities.

Endor Labs provides an agentic application security platform for AI-generated and open source code.

GitHub is a software development platform where developers, agents, and code come together.

Harness provides an AI-native software delivery platform for DevOps, testing, security, and cost optimization.

Legit Security provides application security for AI-generated code and software development.

Mend.io provides application security and AI security software for code and AI systems.

Veracode provides a platform that identifies and fixes security flaws in software.

Contrast Security provides runtime application security that detects and blocks attacks from inside running applications.

Invicti provides web application and API security testing software for enterprises.

Puma Security provides .NET static analysis tools and application security services.

Semgrep provides a platform for scanning code and dependencies to find security issues.

Snyk provides a security platform that finds and fixes vulnerabilities in code, dependencies, containers, and cloud infrastructure.

Qualys provides an enterprise cyber risk and security platform.

Creators of OSCP, Kali Linux, and Exploit-DB, offering penetration testing services from the team that trains the world's ethical hackers.

Elite security research firm specializing in source code review, blockchain auditing, and building industry-standard open-source security tools.

Cloud security penetration testing specialists known for the Pacu AWS exploitation framework and deep expertise across AWS, Azure, and GCP environments.

AISLE provides AI-native vulnerability management that finds, fixes, and verifies software vulnerabilities.

Appdome provides a no-code platform for building security and anti-fraud defenses into mobile apps.

Data Theorem provides application security for mobile, API, cloud, and AI-driven applications.

Software supply chain security and artifact management platform that blocks risky open source packages, scans for exploitable vulnerabilities and governs releases and AI models.

NowSecure provides mobile app security and AI governance.

ReversingLabs provides software supply chain security and threat intelligence to verify and secure enterprise software.

Safeguard is a software supply chain security platform.

Sonatype provides tools to manage and secure open source components and AI models in software development.

Zimperium provides mobile security for devices and applications.