Side by side
Horusec vs Puma Scan
Both stand on static application security testing software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APIExtensionLinux+4
Horusec combines configurable static analysis with CLI, editor, and CI/CD workflows. Teams considering its web platform should note that its repository is read-only and that it requires RabbitMQ and PostgreSQL.
Visit Horusec Free plan LinuxMacSelf-hosted+1
Puma Scan provides Visual Studio scanning for supported C# projects and pipeline options for automated checks. Check the project and editor limitations first; the 30-day trial does not include reporting.
Visit Puma ScanThe facts
| Horusec | Puma Scan | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | API, Extension, Linux, Mac, Self-hosted, Web, Windows | Linux, Mac, Self-hosted, Windows |
| Lowest paid plan | Free or on request | End User: $299 a year |
| Plans published | 1 | 5 |
| Maker | Not published | Not published |
| Website | github.com | pumasecurity.io |
| On static application security testing software | #9 of 25 | #13 of 25 |
Horusec: what it does well
- Free and open-source under Apache License 2.0.
- Scans source code and searches Git history for leaked keys.
- Can run in CI/CD pipelines.
- Includes a Visual Studio Code extension.
- Offers vulnerability dashboards and false-positive controls.
What to know first
- Full tool use requires Docker.
- Disabling Docker reduces analysis capabilities.
- The platform repository is archived and read-only.
- The platform requires RabbitMQ and PostgreSQL.
Puma Scan: what it does well
- Scans C# code as developers write in Visual Studio.
- Reports vulnerabilities as compiler warnings before code is committed.
- Lists integrations for GitHub Actions, GitLab CI, and Azure DevOps.
- CI editions can stop builds at configured severity thresholds.
- Community Edition is available for free.
What to know first
- End User extension does not support VS Code.
- Legacy Web Site projects are unsupported.
- Trials last 30 days and do not include reporting.
- Static-analysis findings may include false positives and false negatives.
Alternatives to Horusec Alternatives to Puma Scan The whole list