Save or Share this Report

For Security & Risk Professionals

The Forrester Wave™: Static Application Security Testing, Q4 2017

The 10 Vendors That Matter Most And How They Stack Up

December 12, 2017

Primary author headshot


Why Read This Report

In our 29-criteria evaluation of the static application security testing (SAST) market, we identified the 10 most significant vendors — CAST, CA Veracode, Checkmarx, IBM, Micro Focus, Parasoft, Rogue Wave Software, SiteLock, SonarSource, and Synopsys — and researched, analyzed, and scored them. This report shows how each measures up and helps security professionals make the right choice.

Get Access

Already a Client?

Log in to read this document.

Become a Forrester Client

Customers are the new market-makers, reshaping industries and changing how businesses compete and win. Success depends on how well and how fast you respond. Forrester Research gives you insights and frameworks aligned to your role to shorten the time between a great idea and a great outcome, helping your teams win in the age of the customer. Contact us to learn more.

Purchase Report

This report is available for individual purchase ($2495 USD).


Table of Contents

  • SAST Remains Critical To Eliminate Proprietary Software Vulnerabilities
  • Static Application Security Testing Evaluation Overview
  • Vendor Profiles
  • Supplemental Material
  • Related Research Documents

Recommended Research