AppSecNews

ASPM

Application Security Posture Management

Aggregate, deduplicate and prioritize findings across every other tool in the program.

16 tools profiled

How it differs Collects findings from your other scanners, deduplicates them and ranks them by application context. It aggregates rather than scans, though some platforms bundle scanners of their own.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

3 tools match

Active Burp Suite Clear all

  • Faraday

    Faraday Security

    ASPM

    A vulnerability management and collaboration platform built for offensive teams, importing output from security tools into a shared workspace with reporting.

    Freemium
    Established

  • Software Risk Manager

    Black Duck (originally Code Dx)

    ASPM

    A correlation and triage platform, descended from Code Dx, that normalizes output from many analysis tools and merges overlapping findings into a single review queue.

    Commercial
    Established

  • ThreadFix

    Coalfire (originally Denim Group)

    ASPM

    A vulnerability resolution platform that normalizes scanner output, correlates static and dynamic findings, and can emit WAF rules as temporary mitigation.

    Commercial
    Established

  • Faraday

    Faraday Security

    A vulnerability management and collaboration platform built for offensive teams, importing output from security tools into a shared workspace with reporting.

    Freemium Established
    ASPM

  • Software Risk Manager

    Black Duck (originally Code Dx)

    A correlation and triage platform, descended from Code Dx, that normalizes output from many analysis tools and merges overlapping findings into a single review queue.

    Commercial Established
    ASPM

  • ThreadFix

    Coalfire (originally Denim Group)

    A vulnerability resolution platform that normalizes scanner output, correlates static and dynamic findings, and can emit WAF rules as temporary mitigation.

    Commercial Established
    ASPM
Tick up to 4 tools above.