Security and development leaders use static application security testing (SAST) solutions to find, prioritize, and fix security weaknesses in proprietary code. As part of the research for The Forrester Wave™: Static Application Security Testing Solutions, Q3 2025, we collected data from reference customers about their top priorities and adoption trends. Security and development leaders should use this report to inform best practices when selecting a SAST solution vendor or as a benchmark for their current vendor.