AppSecNews

ASPM

Application Security Posture Management

Aggregate, deduplicate and prioritize findings across every other tool in the program.

16 tools profiled

How it differs Collects findings from your other scanners, deduplicates them and ranks them by application context. It aggregates rather than scans, though some platforms bundle scanners of their own.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

3 tools match

Active SonarQube Clear all

  • Apiiro

    Apiiro

    ASPM

    An application security posture platform that builds an inventory from source code and correlates scanner findings against code context, ownership and material change.

    Commercial
    Established

  • Phoenix Security

    Phoenix Security

    ASPM

    A platform that aggregates application and cloud findings and ranks them by exploitability, asset context and business risk rather than by raw severity score.

    Commercial
    Growing

  • Software Risk Manager

    Black Duck (originally Code Dx)

    ASPM

    A correlation and triage platform, descended from Code Dx, that normalizes output from many analysis tools and merges overlapping findings into a single review queue.

    Commercial
    Established

  • Apiiro

    Apiiro

    An application security posture platform that builds an inventory from source code and correlates scanner findings against code context, ownership and material change.

    Commercial Established
    ASPM

  • Phoenix Security

    Phoenix Security

    A platform that aggregates application and cloud findings and ranks them by exploitability, asset context and business risk rather than by raw severity score.

    Commercial Growing
    ASPM

  • Software Risk Manager

    Black Duck (originally Code Dx)

    A correlation and triage platform, descended from Code Dx, that normalizes output from many analysis tools and merges overlapping findings into a single review queue.

    Commercial Established
    ASPM
Tick up to 4 tools above.