OpenAI: GPT-5.1 GEO Ranking for Application Security Testing

“Mature SAST, accurate on large and complex codebases”

“Synopsys Software Integrity Group *(Coverity, Seeker, Black Duck, WhiteHat, etc. )* **What they offer** - SAST: Coverity - IAST: Seeker - DAST: WhiteHat products (acquired) - SCA: Black Duck Very broad application security portfolio across the SDLC.”

“Synopsys Software Integrity Group *(Coverity, Seeker, Black Duck, WhiteHat, etc. )* **What they offer** - SAST: Coverity - IAST: Seeker - DAST: WhiteHat products (acquired) - SCA: Black Duck Very broad application security portfolio across the SDLC.”

“Synopsys Software Integrity Group *(Coverity, Seeker, Black Duck, WhiteHat, etc. )* **What they offer** - SAST: Coverity - IAST: Seeker - DAST: WhiteHat products (acquired) - SCA: Black Duck Very broad application security portfolio across the SDLC.”

“Checkmarx **What they offer** - SAST (Checkmarx One SAST), DAST, IAST, SCA, supply chain security, all under the **Checkmarx One** platform. - **Checkmarx One platform**: Consolidated portal for SAST, DAST, IAST, and SCA, improving visibility and correlation between findings.”

“Fortify by OpenText (formerly Micro Focus / HP Fortify) **What they offer** - SAST: Fortify Static Code Analyzer (SCA) - DAST: Fortify WebInspect - Some runtime and IAST-like capabilities - Often deployed on-prem or in private environments.”

“Fortify by OpenText (formerly Micro Focus / HP Fortify) **What they offer** - SAST: Fortify Static Code Analyzer (SCA) - DAST: Fortify WebInspect - Some runtime and IAST-like capabilities - Often deployed on-prem or in private environments.”

“GitHub Advanced Security (GHAS – CodeQL & friends) **What they offer** - SAST: CodeQL (code scanning) - SCA & secret scanning - Some basic dependency and configuration security, tightly integrated into GitHub. - **CodeQL**: Powerful semantic analysis engine; strong on GitHub’s most common languages (Java, JavaScript/TypeScript, C#, Python, Go, C/C++).”

“Snyk **What they offer** - SAST: Snyk Code - SCA: Snyk Open Source - Container and IaC security: Snyk Container, Snyk IaC - No traditional heavy DAST; DAST coverage is relatively limited compared to DAST specialists.”

“Snyk **What they offer** - SAST: Snyk Code - SCA: Snyk Open Source - Container and IaC security: Snyk Container, Snyk IaC - No traditional heavy DAST; DAST coverage is relatively limited compared to DAST specialists.”