Audience
Developers and security champions interested in a powerful SAST tool
About YAG-Suite
The YAG-Suite is a French made innovative tool which brings SAST one step beyond. Based on static analysis and machine learning, YAGAAN offers customers more than a source code scanner : it offers a smart suite of tools to support application security audits as well as security and privacy by design DevSecOps processes. Beyond classic vulnerability detection, the YAG-Suite focuses the team attention on the problems that really matter in their business context, it supports developers in their understanding of the vulnerability causes and impacts. Its contextual remediation support them in fixing efficiently the problems while improving their secure coding skills. Additionally, YAG-Suite's unprecedented 'code mining' support security investigations of an unknown application with mapping all relevant code features and security mechanisms and offers querying capabilities to search for 0-days or non automatically detectable risks. PHP, Java and Python are supported. JS, C/C++ coming soon
Other Popular Alternatives & Related Software
Invicti
Application security is noisy and overly complicated. The good news: you can relieve that unnecessary noise and dramatically reduce your risk of attacks with Invicti. Keeping up with security is more manageable with accurate, automated testing that scales as your needs shift and grow. That's where Invicti shines. With a leading dynamic application security testing solution (DAST), Invicti helps teams automate security tasks and save hundreds of hours each month by identifying the vulnerabilities that really matter. Combining dynamic with interactive testing (DAST + IAST) and software composition analysis (SCA), Invicti scans every corner of an app to find what other tools miss. With asset discovery, it's easier to discover all web assets — even ones that are lost, forgotten, or created by rogue departments. Through tried-and-true methods, Invicti helps DevSecOps teams get ahead of their workloads to hit critical deadlines, improve processes, and communicate more effectively.
Learn more about Invicti
GitGuardian
GitGuardian is an end-to-end NHI security platform that empowers software-driven organizations to enhance their Non-Human Identity (NHI) security and comply with industry standards.
With attackers increasingly targeting NHIs, such as service accounts and applications, GitGuardian integrates Secrets Security and NHI Governance.
This dual approach enables the detection of compromised secrets across your dev environments while also managing non human identities and their secrets lifecycle.
The platform supports over 450+ types of secrets, offers public monitoring for leaked data, and deploys honeytokens for added defense.
Trusted by over 600,000 developers, GitGuardian is the choice of leading organizations like Snowflake, ING, BASF and Bouygues Telecom for robust secrets protection.
Learn more about GitGuardian
Mend.io
Mend.io offers the first AI native application security platform, empowering organizations to build and run a proactive AppSec program tuned for AI powered development. The unified platform secures AI generated code and embedded AI components, drives risk reduction through AI powered remediation, automates compliance, and provides a holistic enterprise scale view of risks and clear actions for developers across your entire codebase.
Learn more about Mend.io
ZeroPath
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with advanced program analysis to find and automatically fix vulnerabilities.
ZeroPath provides complete security coverage:
1. AI-powered SAST for business logic flaws & broken authentication
2. SCA with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code
5. Automated patch generation.
any more...
ZeroPath delivers 2x more real vulnerabilities with 75% fewer false positives.
Our research team has been successful in finding vulns like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more about ZeroPath
Pricing
Starting Price:
From €500/token or €150/mo
Pricing Details:
Subscription: SaaS from €150/month/100kLoc
On premise from €215/month/100kLoc
Subscriptions are based on the number of lines of code to scan, no limit on the number of scans / users / projects.
Tokens are valid for per application
On premise from €215/month/100kLoc
Subscriptions are based on the number of lines of code to scan, no limit on the number of scans / users / projects.
Tokens are valid for per application
Free Version:
Free Version available.
Free Trial:
Free Trial available.
Company Information
YAGAAN
Founded: 2017
France
yagaan.com
Videos and Screen Captures
Other Useful Business Software
Build Agents and Models on One Platform
Gemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
Product Details
Platforms Supported
Cloud
Linux
Training
Documentation
Live Online
Support
Online
YAG-Suite Frequently Asked Questions
Q: What kinds of users and organization types does YAG-Suite work with?
YAG-Suite works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Government, and Startup.
Q: What languages does YAG-Suite support in their product?
YAG-Suite supports these languages: English and French.
Q: What kind of support options does YAG-Suite offer?
YAG-Suite offers support via online.
Q: What other applications or services does YAG-Suite integrate with?
YAG-Suite integrates with: Eclipse IDE, GitHub, GitLab, Jenkins, Python, and Visual Studio Code.
Q: Does YAG-Suite have an API?
Yes, YAG-Suite has an API.
Q: What type of training does YAG-Suite provide?
YAG-Suite provides training in the form of documentation and live online.
Q: Does YAG-Suite offer a free trial?
Yes, YAG-Suite offers a free trial.
Q: How much does YAG-Suite cost?
Pricing for YAG-Suite starts at From €500/token or €150/mo.
Q: What pricing for training is available for YAG-Suite?
YAG-Suite offers training additional fee / premium available.
YAG-Suite Product Features
Static Application Security Testing (SAST)
Application Security
Supported
Dashboard
Supported
IDE
Supported
Multi-Language Scanning
Supported
Source Code Scanning
Supported
Vulnerability Scanning
Supported
Debugging
Not Supported
Deployment Management
Not Supported
Real-Time Analytics
Not Supported
Static Code Analysis
Analytics / Reporting
Supported
Code Standardization / Validation
Supported
Multiple Programming Language Support
Supported
Provides Recommendations
Supported
Standard Security/Industry Libraries
Supported
Vulnerability Management
Supported
