What Is SAST and How Does Static Code Analysis Work?

✕ Synopsys Software Integrity Group is now operating as Black Duck Software, Inc., a subsidiary of Synopsys. Click to learn more.

Integrated SaaS Platform

Polaris Platform
fAST Static
fAST SCA
fAST Dynamic

Application Security Tools

Coverity SAST
Black Duck SCA
WhiteHat Continuous Dynamic
Seeker IAST
Software Risk Manager ASPM
Defensics Protocol Fuzzing

DevOps & Security Integrations

Code Sight IDE Plug-in
DevSecOps Integrations

Services

Security Training
Security Testing Services
Penetration Testing
Mobile Application Security Testing (MAST)

Polaris Platform | Integrated, cloud-based AST solution optimized for development and DevSecOps teams
fAST Static | Easy-to-use, cloud-based static application security testing (SAST)
fAST SCA | Automated, cloud-based software composition analys (SCA)
fAST Dynamic | Streamline dynamic application security testing

Coverity SAST | Address security and quality defects in code as it's being developed
Black Duck SCA | Secure and manage open source risks in applications and containers
WhiteHat Dynamic | Continuous web application security testing in production
Seeker IAST | Automate web security testing within your DevOps pipelines
Software Risk Manager ASPM | Manage application security programs at enterprise scale
Defensics Protocol Fuzzing | Identify defects and zero-day vulnerabilities in services and protocols

Code Sight IDE Plugin | Secure code as you write it in your IDE
DevSecOps Integrations | Integrate AppSec tools into DevOps workflows

Program Strategy & Planning | Measure, scale, and optimize your AppSec program
Threat & Risk Assessments | Understand and address internal and external security risks
Security Training | Equip development teams with the skills they need to produce more secure software
Implementation & Deployment | Optimize utilization, management and deployment of AppSec tools
Security Testing Services | On-demand AppSec testing resources and expertise
Penetration Testing | Identify business-critical vulnerabilities with on-demand testing expertise
Mobile Application Security Testing (MAST) | Security testing, optimized for the unique risks of mobile applications
Open Source & Security Audits | Comprehensive technical due diligence services for M&A

Solutions

go back

Use Cases

AI-generated code
API Security Testing
AppSec Consolidation
Application Security Testing
DevSecOps
Software Supply Chain Security
Manage AppSec Risk
Open Source License Compliance

By Technology

Static Analysis (SAST)
Software Composition Analysis (SCA)
Dynamic Analysis (DAST)
Interactive Analysis (IAST)
Penetration Testing
Mobile Application Security Testing (MAST)
Application Security Posture Mangagement (ASPM)
Fuzz Testing

By Industry

Financial Services
Automotive
Telecommunications
Public Sector
Medical Device

By Role

Dev and DevOps Teams
Security Teams
Legal Teams

AI-generated code | Harness the power of AI coding assistants while managing the risks
API Security Testing | Manage software risks with a holistic API security testing program
AppSec Consolidation | Simplify your application security program
Application Security Testing | Solutions to address security risks at all stages of the application life cycle
DevSecOps | Solutions to help shift security left without slowing down your development teams
Software Supply Chain Security | Solutions to identify and manage software supply chain risks end-to-end
Manage AppSec Risk | Scale your application security program without increasing complexity or adding friction
Cloud & Container Security | Optimize your applications for secure deployment and operation in the cloud
Open Source License Compliance | Effective solutions for ensuring open source license compliance
M&A Due Diligence | Identify software risks that could negatively impact the value of acquired IP
Quality & Security Standards Compliance | Ensure your software complies with the standards critical to customers and regulators

Static Analysis (SAST) | Address security and quality defects in code as it's being developed
Software Composition Analysis (SCA) | Secure and manage open source risks in applications and containers
Dynamic Analysis (DAST) | Continuous web application security testing in production
Interactive Analysis (IAST) | Automate web security testing within your DevOps pipelines
Penetration Testing | Identify business-critical vulnerabilities with on-demand testing expertise
Mobile Application Security Testing (MAST) | On-demand security testing, optimized for the unique risks of mobile applications
Application Security Posture Mangagement (ASPM) | Manage application security programs at enterprise scale
Fuzz Testing | Identify defects and zero-day vulnerabilities in services and protocols

Financial Services | Protect sensitive customer and financial data from rapidly evolving security threats
IoT & Embedded | Ensure your embedded and IoT devices are safe, secure, and reliable
Automotive | Build software security & reliability into the modern connected car
Telecommunications | Create seamless and safe mobile experiences, from silicon to software
Aerospace & Defense | Solutions for automating mission-critical development
Public Sector | Application security for government agencies and their suppliers
Medical Device | Safeguard medical devices and applications

Dev and DevOps Teams | Build secure software while maintaining developer productivity and pipeline velocity.
Security Teams | Align people, processes, and technology to minimize software risk and transform your business.
Legal Teams | Solutions to protect your IP and manage risk.

Customer Success

go back

Customer Success

Our Commitment
Meet Your Team
Customer Testimonials

Support

Documentation
Synopsys Academy
Search Knowledge Base

Add-On Services

AppSec Training

2023 Gartner® Magic Quadrant™ for AppSec TestingSee why Synopsys is a Leader

Our Commitment | Gain the confidence to implement, deploy, and grow with your AppSec tools
Meet Your Team | Achieve your AppSec goals with support from Synopsys experts.
Customer Testimonials | Application security customer success stories

Documentation | Comprehensive user guides and how-to articles.
Synopsys Academy | Explore online courses and quick tutorials.
Search Knowledge Base | Browse content by product, language, or source.
Community Q&A | Ask a question or browse answers to questions.

Premium & Designated Support | Support with expedited response times and access to specialized technical, tactical, and operational knowledge.
Implementation & Deployment | Discover how to best utilize, manage, and deploy your application testing tools.
AppSec Training | Equip development teams with the skills they need to produce more secure software.

Resources

go back

Application Security News

Manage Security Risks
Build Security into DevOps
Secure the Software Supply Chain

Content Library

Case Studies
eBooks
Glossary
Reports
Webinars
White Papers

Cybersecurity Research Center

Overview
Research

News Room

Press Releases

2023 Gartner® Magic Quadrant™ for AppSec TestingSee why Synopsys is a Leader

Manage Security Risks News | Read the latest information on how to manage application security risks.
Build Security into DevOps News | Get insights from Synopsys on building security into DevOps.
Secure the Software Supply Chain News | Discover software supply chain risk management tips and best practices.
Security News & Trends | Get an analysis of today’s application security news and trends.

Case Studies | Application security customer stories
eBooks | Browse the latest ebooks on software security trends and best practices
Glossary | Glossary of Application Security, EDA & Semiconductor IP terms
Reports | Browse the latest application security reports from Synopsys and industry-leading analysts.
Webinars | Browse the latest webinars on application security solutions, trends, and strategies.
White Papers | Access the latest white papers for technical knowledge on application security solutions.

Overview | Learn more about the Synopsys Cybersecurity Research Center.
Research | Access the latest first-party research and analysis from the Synopsys Cybersecurity Research Center.

Press Releases | Browse our most recent news releases.

What Is SAST and How Does Static Code Analysis Work? | Synopsys (2024)