Guides and comparisons for choosing tools, written to the same editorial standard as the profiles.
Ten secret scanning tools compared by where they sit in the lifecycle, whether they verify credentials, and whether they carry a leak through to rotation.
12 min read
Ten software composition analysis tools picked for distinct jobs: reachability triage, license compliance, SBOM monitoring, malicious package detection and patching.
12 min read
A practitioner's guide to ten static analysis tools, chosen for distinct scenarios rather than ranked, with the trade-offs each one brings.
12 min read
A practitioner's guide to runtime application self-protection: true in-process agents, mobile hardening libraries, and the WAF-adjacent tools often filed alongside them.
12 min read
Ten mobile application security tools chosen for distinct scenarios, from automated binary scanning to runtime instrumentation, with honest caveats.
12 min read
A practitioner's guide to interactive application security testing tools, picked for distinct scenarios rather than ranked, with an honest caveat on each.
12 min read
A practitioner's guide to IaC security tools: manifest scanners, policy engines, admission controllers and cloud platforms, and when each one wins.
12 min read
A practitioner's guide to dynamic application security testing tools, picked for distinct scenarios rather than ranked, with an honest caveat on each.
12 min read
A practitioner's guide to eight container and Kubernetes security tools, picked for distinct scenarios rather than ranked, with honest trade-offs.
12 min read
A practitioner's guide to ten application security posture management platforms, chosen for distinct scenarios rather than ranked, with honest caveats.
12 min read
A practitioner's guide to API discovery, testing and runtime protection tools, chosen for distinct scenarios rather than ranked, with an honest caveat on each.
12 min read
A practitioner's guide to AI and LLM security tooling: red teaming, runtime guardrails, model artifact scanning, agent controls and governance.
12 min read