Side by side
Horusec vs Xygeni
Both stand on static application security testing sast. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APIExtensionLinux+4
Horusec combines configurable static analysis with CLI, editor, and CI/CD workflows. Teams considering its web platform should note that its repository is read-only and that it requires RabbitMQ and PostgreSQL.
Visit Horusec Free plan APIExtensionLinux+4
Xygeni combines local scanning with supply-chain checks, secrets detection, and compliance audits. Its free tier has clear contributor, repository, and monthly scan limits to consider.
Visit XygeniThe facts
| Horusec | Xygeni | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | API, Extension, Linux, Mac, Self-hosted, Web, Windows | API, Extension, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 4 |
| Maker | Not published | Not published |
| Website | github.com | xygeni.io |
| On static application security testing sast | #8 of 24 | #12 of 24 |
Horusec: what it does well
- Free and open-source under Apache License 2.0.
- Scans source code and searches Git history for leaked keys.
- Can run in CI/CD pipelines.
- Includes a Visual Studio Code extension.
- Offers vulnerability dashboards and false-positive controls.
What to know first
- Full tool use requires Docker.
- Disabling Docker reduces analysis capabilities.
- The platform repository is archived and read-only.
- The platform requires RabbitMQ and PostgreSQL.
Xygeni: what it does well
- Scans run within the customer’s network
- Can keep findings locally
- Detects more than 100 secret types
- Free plan includes 200 scans monthly
What to know first
- Free plan is limited to five contributors
- Free plan covers up to 10 repositories
- Free plan caps scans at 200 monthly
Alternatives to Horusec Alternatives to Xygeni The whole list