About the startup
Tsun is a CLI-first Dynamic Application Security Testing (DAST) tool built on top of OWASP ZAP, designed for small SaaS teams that want real security scanning without enterprise overhead. It runs authenticated scans locally or in CI with predictable runtimes, sane defaults, and low noise — so engineers actually keep it enabled. Key features: Authenticated scans (headers, cookies, login hooks) CI-friendly profiles with time and URL caps Baseline comparisons to show what changed JSON, HTML, and SARIF output (GitHub Code Scanning ready) Fully local execution — no SaaS account required The core CLI is free and open-source. Pro adds baselines, deep scans, and workflow guardrails for teams that want cleaner CI and less noise. Built by a security engineer for developers who want ZAP-level power without heavyweight platforms.
Alternatives to Tsun
Browse category →Reviewed matches are labeled. Other suggestions come from a shared subcategory, use case, source listing or the same category. Compare features and current plans before choosing.
| Product |
|---|
PVS-StudioStatic analyzer | C/C++, C#, Java, JS/TS, Go |
WallarmWallarm specializes in API security |
Appcan.ioMobile application security testing for iOS and Android |
ApyGuardAI-powered API security testing for developers |
PromptBrakeSecurity testing for LLM-powered API endpoints |
AI PTaaS by PentestlySecurity Testing Made Easy for SaaS |
ExfaultAutonomous Android security testing with AI agents |
Mend.ioMend.io offers the first AI native application security platform, purpose-built to secure AI-generated code and embedded AI components. Our unified platform enables companies to manage application risk effectively in mod |
Related products in Application & API security
Browse category →Selected by category and available use-case details. A topic match does not establish equivalent features.
| Product |
|---|
GoMobSecAI-powered mobile app security testing |
HollowByteApplication Security for Founders & SMBs |
MeshaSecDesktop app for web application and API security testing |
Python Code AuditModern Python source code security analyzer. |
OWASP Penetration Testing Kitapplication security, owasp top 10, browser extension |
AktoAkto is an Instant, Open Source API Security product. Discover all your APIs and find vulnerabilities by running 100+built-in tests. Write custom tests and automate in Akto. |
Recently added in Application & API security
Browse category →Added to this directory in the past 30 days. Dates refer to the directory listing, not the product launch.
| Product |
|---|
CorgeaCorgea finds, and fixes insecure code and packages autonomously. |
CascoAutonomous security testing for web apps, APIs, cloud, and AI systems |
ZiosecWe built free adversarial security testing for agents (OpenClaw too) |
Temper Labsopen-source security testing for AI agents |
Explore expertise in Security & Privacy
See all →Profiles grouped by topic. This does not confirm an offer, availability or a connection to this profile.
| Profile |
|---|
The CyberHub PodcastThe Hub of the Infosec Community. |
Harry SintonenInfosec consultant at REVƎЯSEC https://reversec.com - Coding, Research + various other interests |
Sam Stepanyan :verified: 🐘https://twitter.com/securestep9 #OWASP London Chapter Leader(@OWASPLondon). |
Media about Security & Privacy
See all →Shows and channels grouped by topic. A recommendation does not mean this profile was featured or endorsed.
| Show |
|---|
Incrementally BetterNewsletter · Stephan Geering |
Founder stories from Security & Privacy startups
See all →Retold founder accounts from startups in the same category, each linked to the original.
| Story |
|---|
Kleo's $62k MRR sat beside a separate Mentions numberCam Trew says he left a senior engineering job, joined Jake Ward's rebuild of Kleo after Kleo 1.0 already had tens of thousands of users, and later reported Kleo at $62k MRR with Mentions at $20k MRR as a different produ |
Browse Security & Privacy categories
See all →Subcategories in the same part of the directory, with the number of listed products.
| Category |
|---|
Privacy & secure browsing818 listed products |
Identity & authentication600 listed products |
Infrastructure & endpoint security349 listed products |
Threat detection & security testing303 listed products |
Security compliance & training230 listed products |
Data protection & encryption149 listed products |