4 of the 10 security scanning tools we list have a self-hosted version, confirmed on their own website. Here they are side by side.
Listed alphabetically. A tool is ranked by its reviews once it has 3.
| Tool | Reviews | Lowest paid plan | Free plan | Free trial | Public API | Runs on | Main features |
|---|---|---|---|---|---|---|---|
Aikido SecurityContinuous, autonomous security that gets developers back to building. | ReviewsNone yetWrite one for Aikido Security | Lowest paid plan$350per monthBasic, as of November 14, 2026 | Free planYes | Free trialNot confirmed | Public APIYes | Runs onNot confirmed | Main features
|
Burp Suite DASTDAST with pentester depth, using the same scanning engine as Burp Suite Professional. | ReviewsNone yetWrite one for Burp Suite DAST | Lowest paid planNot confirmed | Free planNot confirmed | Free trialNot confirmed | Public APIYes | Runs onWindows, Linux, Kubernetes | Main features |
| ReviewsNone yetWrite one for Semgrep | Lowest paid plan$30per contributor per monthTeams, as of November 14, 2026 | Free planYes | Free trialNot confirmed | Public APIYes | |||
SocketSocket blocks malicious packages before they reach your code. | ReviewsNone yetWrite one for Socket | Lowest paid plan$25per dev seat per monthTeam, as of November 14, 2026 | Free planYes | Free trialNot confirmed | Public APIYes |
From each tool's own website. “Not confirmed” means we couldn't confirm it there, not that the tool doesn't have it. Each tool's page says when its facts were checked.
A tool is listed here only when we've confirmed on its own website that it has a self-hosted version. Tools we couldn't confirm it for are left out, even if they may have it. Vendors can't pay for a place on this list. Add a tool we missed
Main features
|
Main features
|