Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

Static Code Analysis (SAST)

Tools for examining source code without execution to find security flaws.

Kitploit recommended

Top tools

10 selected
semgrep preview#1

semgrep

GitHubsemgrep/semgrep
16.2k5 days ago
codeql preview#2

codeql

GitHubgithub/codeql
10.1k0 days ago
sonarqube preview#3

sonarqube

GitHubsonarsource/sonarqube
11.0k17h 3m ago
infer preview#4

infer

GitHubfacebook/infer
15.7k5 days ago
bandit preview#5

bandit

GitHubpycqa/bandit
8.2k10 days ago
gosec preview#6

gosec

GitHubsecurego/gosec
8.9k1 day ago
bearer preview#7

bearer

GitHubbearer/bearer
2.7k16 days ago
horusec preview#8

horusec

GitHubzupit/horusec
1.3k3 years ago
ApplicationInspector preview#9

ApplicationInspector

GitHubmicrosoft/applicationinspector
4.4k13 days ago
njsscan preview#10

njsscan

GitHubajinabraham/njsscan
43629 days ago
NewestRelevanceMost popularRecently updated
153 results
gokart preview
Archived

gokart

GitHubpraetorian-inc/gokart

A static analysis tool for securing Go code

static-code-analysisvulnerability-analysiscode-analysis+3
2.2k2 years ago
needle preview
Archived

needle

GitHubreverseclabs/needle

The iOS Security Testing Framework

dynamic-analysis-sandboxingios-securitystatic-code-analysis+4
1.4k5 years ago
gradle-static-analysis-plugin preview
Archived

gradle-static-analysis-plugin

GitHubnovoda/gradle-static-analysis-plugin

Easy setup of static analysis tools for Android and Java projects.

android-securitystatic-code-analysiscode-analysis+3
4034 years ago
LambdaGuard preview
Archived

LambdaGuard

GitHubskyscanner/lambdaguard

AWS Serverless Security

cloud-infrastructure-securityvulnerability-scannersstatic-code-analysis+3
4004 years ago
DevAudit preview
Archived

DevAudit

GitHubsonatype-nexus-community/devaudit

Open-source, cross-platform, multi-purpose security auditing tool

vulnerability-scannerscontainer-securitystatic-code-analysis+7
3593 years ago
raptor preview
Archived

raptor

GitHubdpnishant/raptor

Web-based Source Code Vulnerability Scanner

android-securityvulnerability-scannersios-security+6
3568 years ago
RiskAssessmentFramework preview
Archived

RiskAssessmentFramework

GitHubowasp/riskassessmentframework

The Secure Coding Framework

static-code-analysisvulnerability-analysiscode-analysis+1
2726 years ago
route-sixty-sink preview
Archived

route-sixty-sink

GitHubmandiant/route-sixty-sink

Link sources to sinks in C# applications.

static-analysisstatic-code-analysisvulnerability-analysis+3
1503 years ago
AuraBorealisApp preview
Archived

AuraBorealisApp

GitHubiqtlabs/auraborealisapp

Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data

static-code-analysisvulnerability-analysiscode-analysis+2
194 years ago
Previous1…89Next