Best IT Security Software for JavaScript - Page 2
View:
Compare the Top IT Security Software that integrates with JavaScript as of October 2026 - Page 2
Sort By:
This a list of IT Security software that integrates with JavaScript. Use the filters on the left to add additional filters for products that have integrations with JavaScript. View the products that work with JavaScript in the table below.
-
1
Hacker AI
Hacker AI
Hacker AI is an artificial intelligence system that scans source code to identify potential security weaknesses that may be exploited by hackers or malicious actors. By identifying these vulnerabilities, organizations can take steps to fix the issues and prevent security breaches. Hacker AI is created by a French company based in Toulouse that uses a GPT-3 model. Please compress your project source code into a single Zip archive and upload it. Check your email, as you will receive the vulnerability detection report within 10 minutes. The Hacker AI is in the beta phase and the results it provides are not useful without the guidance of a cybersecurity expert with a background in code analysis. We do not sell or use your code source for malicious purposes. It is strictly used for the detection of vulnerabilities. If necessary, you can request a dedicated non-disclosure agreement (NDA) from us. You can also request a private instance.Starting Price: Free -
2
AppMap
AppMap
Runtime code reviews for every code change in the code editor and in CI. Catch runtime performance, security, and stability problems while you code, before they hit production. Collaborate on a team member’s application behavior problem without having to replicate their environment. Automate AppMap generation in CI, get alerts for performance and security flaws, and compare observability and alerts across branches and teams. Run AppMap in CI to automate observability, create OpenAPI docs, and much more. AppMap code reviews link to rich resources that enable you to uncover the root causes of unexpected behavior. Sequence diagrams diffs vividly showcase behavioral changes in your code.Starting Price: $15 per user per month -
3
Betterscan.io
Betterscan.io
Reduce MTTD & MTTR with full coverage within minutes of using. Full DevSecOps toolchain across your all environments, implementing and collecting evidence as part of your continuous security. Unified and de-duplicated across all the layers we orchestrate. One line to add several thousand checks + AI. It was built with security in mind, and we have avoided common security mistakes and pitfalls. Understands modern technologies. All are callable via REST API. Integrateable with CI/CD systems, lightweight and fast. You can self-host it for 100% code control and transparency, or run source available binary only in your own CI/CD. Use a source-available solution for complete control and transparency. Trivial setup, no software installation, compatible with many programming languages. Detects more than several thousand code and infrastructure issues and counting. You can review the issues, mark them as false positives, and collaborate on issues.Starting Price: €499 one-time payment -
4
Wink
Wink
Wink enables any institution to offer simpler and superior identity and payment experiences through biometrics. The Wink platform brings facial and voice recognition-based multi-factor authentication and payments that can eliminate passwords, SMS/OTP, usernames, card numbers, and other older technologies that are memory or device-based. Integrate the Wink streaming checkout plug-in to eliminate fraud with our unique face- and voice-based user recognition. Dramatically improve conversions and eliminate cart abandonments as consumers simply smile to check out. Make long checkout forms and forgotten passwords a thing of the past. The industry’s first multi-factor biometric authentication combines the convenience and security of face-id type experience enhanced by strong digital voice printing. Our unique and patented one-way anonymous encryption technology ensures full privacy protection as the unique Wink ID represents the user’s face and voice data as a 3D model.Starting Price: $499 per month -
5
Kontra
Security Compass
Kontra + Courses helps organizations build application security skills across development teams through a combination of 50+ video courses and 300+ hands-on vulnerability labs. Developers learn to identify, exploit, and remediate real vulnerabilities across 25+ technology stacks using practical code examples in their actual frameworks. Each Kontra lab walks through a real-world vulnerability scenario—like the 2021 Log4Shell exploit—then guides users through hands-on remediation with stack-specific code. This practical approach leads to 3x higher completion rates than traditional security training and helps AppSec teams scale secure coding practices without pulling developers out of their workflow. Most labs take under 10 minutes to complete. The platform is SCORM-compliant and integrates with existing LMS systems or can be delivered via hosted environment. Role-based curriculum aligns with NIST, ISO 27001, and PCI-DSS, and supports ISC2 co-branded certification.Starting Price: $400 per year -
6
KloudMate
KloudMate
Squash latencies, detect bottlenecks, and debug errors. Join a rapidly expanding community of businesses from around the world, that are achieving 20X value and ROI by adopting KloudMate, compared to any other observability platform. Quickly monitor crucial metrics, and dependencies, and detect anomalies through alarms and issue tracking. Instantly locate ‘break-points’ in your application development lifecycle, to proactively fix issues. View service maps for every component in your application, and uncover intricate interconnections and dependencies. Trace every request and operation, providing detailed visibility into execution paths and performance metrics. Whether it's multi-cloud, hybrid, or private architecture, access unified Infrastructure monitoring capabilities to monitor metrics and gather insights. Supercharge debugging speed and precision with a complete system view. Identify and resolve issues faster.Starting Price: $60 per month -
7
Halo Security
Halo Security
Get a complete picture of your attack surface with Halo Security. Our easy-to-use, all-in-one solution to external cybersecurity testing and monitoring helps thousands of enterprises protect their customer data. Modern business moves fast. Developers add new websites, services, and software. Old assets are forgotten and new acquisitions are brought into the fold. Every website, server, certificate, or third-party JavaScript creates another way for attackers looking to steal customer data. Our agentless and recursive discovery engine discovers the assets you’re not aware of, so you can prioritize your efforts from a single pane of glass. From firewall monitoring to penetration testing, you can easily apply the right resources to every asset from our centralized dashboard. With quick access to the specifications of each asset, you can be confident that everything you control is being monitored appropriately.Starting Price: $399 per month -
8
NextAuth.js
NextAuth.js
NextAuth.js is an open source authentication solution tailored for Next.js applications, offering seamless integration with popular services like Google, Facebook, Auth0, and Apple. It supports various authentication methods, including OAuth 1.0 & 2.0, email/passwordless sign-ins, and custom username/password systems. Designed for flexibility, NextAuth.js operates efficiently in serverless environments and supports multiple databases such as MySQL, PostgreSQL, MSSQL, and MongoDB, allowing developers to choose between database sessions or JSON Web Tokens (JWT). Security features include signed, prefixed, server-only cookies, HTTP POST with CSRF token validation, and encrypted JWTs using JWS/JWE/JWK standards. The platform facilitates easy setup, enabling developers to add authentication in minutes with minimal configuration. Comprehensive documentation and a supportive community further enhance its accessibility for developers seeking a robust authentication system.Starting Price: Free -
9
Auth.js
Auth.js
Auth.js is an open-source authentication library designed to integrate seamlessly with modern JavaScript frameworks, providing a flexible and secure authentication experience. It supports various authentication methods, including OAuth (e.g., Google, GitHub), credentials, and WebAuthn, allowing developers to choose the most suitable approach for their applications. Auth.js is compatible with multiple frameworks, such as Next.js, SvelteKit, Express, Qwik, and SolidStart, enabling developers to implement authentication across different platforms. The library offers built-in support for popular databases like Prisma, Drizzle ORM, Supabase, Firebase, and TypeORM, facilitating user data management. Security features include signed cookies, CSRF token validation, and encrypted JSON Web Tokens (JWTs), ensuring robust protection for user data. Auth.js is designed to operate efficiently in serverless environments and provides comprehensive documentation and examples.Starting Price: Free -
10
OpenFGA
The Linux Foundation
OpenFGA is an open source authorization solution that enables developers to implement fine-grained access control using a user-friendly modeling language and APIs. Inspired by Google's Zanzibar paper, it supports various access control models, including Relationship-Based Access Control (ReBAC), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC). OpenFGA offers SDKs for multiple programming languages, such as Java, .NET, JavaScript, Go, and Python, facilitating seamless integration into diverse applications. The platform is designed for high performance, capable of processing authorization checks in milliseconds, making it suitable for projects ranging from small startups to large enterprises. Operating under the Cloud Native Computing Foundation (CNCF) as a sandbox project, OpenFGA emphasizes transparency and community collaboration, inviting contributions to its development and governance.Starting Price: Free -
11
GitHub Advanced Security
GitHub
With AI-powered remediation, static analysis, secret scanning, and software composition analysis, GitHub Advanced Security helps developers and security teams work together to eliminate security debt and keep new vulnerabilities out of code. Code scanning with Copilot Autofix detects vulnerabilities, provides contextual explanations, and suggests fixes in the pull request and for historical alerts. Solve your backlog of application security debt. Security campaigns target and generate autofixes for up to 1,000 alerts at a time, rapidly reducing the risk of application vulnerabilities and zero-day attacks. Secret scanning with push protection guards over 200 token types and patterns from more than 150 service providers, even elusive secrets like passwords and PII. Powered by security experts and a global community of more than 100 million developers, GitHub Advanced Security provides the insights and automation you need to ship more secure software on schedule.Starting Price: $49 per month per user -
12
Zebra Enterprise Browser
Zebra Technologies
Zebra's Enterprise Browser is an Android-based industrial browser that enables the development of web-based applications tailored to leverage the full capabilities of Zebra devices. It allows developers to create feature-rich applications using standard web technologies such as HTML5, CSS, and JavaScript, ensuring compatibility across various Zebra devices, including mobile computers, tablets, kiosks, wearables, and vehicle-mounted devices. The browser provides access to Zebra's extensive API library, facilitating seamless integration with device features like barcode scanning, RFID, and cameras. Additionally, Enterprise Browser supports integration with leading Enterprise Resource Planning (ERP) systems, such as SAP, through the Zebra Picking Plus API, enabling real-time updates to backend databases and streamlining operational workflows. By offering a consistent and intuitive user interface, Enterprise Browser enhances worker productivity and simplifies the development process.Starting Price: Free -
13
TrustCaptcha
TrustCaptcha
TrustCaptcha protects your website from bots and spam—without any user interaction. Unlike traditional CAPTCHAs that rely on image puzzles and clicks, TrustCaptcha works invisibly in the background. It activates as users type, completing before they hit submit—reducing bounce rates and improving conversions. Behind the scenes, a smart trust scoring system evaluates each request, while a lightweight proof-of-work mechanism makes spam attacks costly for bots but unnoticeable for real users. This combination blocks abuse without disrupting the user experience. Fully GDPR-compliant and customizable, TrustCaptcha lets you adjust language, design, and visibility—even run it completely hidden. Integration is fast with clear documentation and support for major frameworks. Choose between fixed pricing or pay-per-use, so you only pay for what you need. TrustCaptcha delivers secure, seamless protection that boosts performance—not friction.Starting Price: €8/month -
14
jsObf
jsObf
jsObf is a powerful, web-based JavaScript encryption and obfuscation tool that enables users to transform readable JavaScript code into obfuscated, secure versions via direct input or file uploads (up to 5 MB). It also serves developers through its API, offering two endpoints, one for raw code and another for file uploads, with configurable output formats (JSON or XML) and adjustable complexity levels. It simplifies protection workflows with intuitive, drag-and-drop interfaces and backend API support, empowering users to quickly mask logic, thwart reverse engineering, and secure proprietary scripts without complex setup or tooling.Starting Price: $49.99 per month -
15
JS-Confuser
JS-Confuser
JS-Confuser is a powerful, open source JavaScript obfuscation tool that transforms your source code into a highly unreadable form, deterring reverse engineering, tampering, and unauthorized reuse while preserving full functionality. It offers multiple obfuscation techniques, including variable renaming, control flow flattening, string concealing, and function obfuscation, along with locks such as domain-based or date-based execution constraints and integrity checks to detect runtime modifications. Designed for flexibility, it provides obfuscation presets, ranging from 10 to 21+ transformation layers, and also allows fully customizable configurations to suit performance and protection needs. The tool operates entirely in the browser for fast, private obfuscation workflows, and includes advanced tooling features such as a playground for interactive experimentation, customizable options via JavaScript, integrated code prettification, and debugging support.Starting Price: Free -
16
Rafter
Rafter
Rafter is a developer-friendly security scanning platform that lets you detect and address vulnerabilities in your GitHub repositories with a single click or command. It integrates seamlessly via a browser-based dashboard, CLI, or REST API to scan JavaScript, TypeScript, and Python code for a range of issues, including exposed API keys, SQL injection, XSS flaws, insecure dependencies, hardcoded credentials, and authentication weaknesses. Results are clearly categorized into “Errors,” “Warnings,” and “Improvements,” each offering detailed explanations, code locations, remediation steps, and formatted prompts ready to paste into AI coding assistants. You can view findings in JSON or Markdown, automate scans within CI/CD pipelines, and pull scan results directly into your workflows. Whether you prefer no-code, low-code, or full-code environments, Rafter adapts flexibly to your setup, making proactive security early in development effortless and scalable.Starting Price: $39 -
17
SnowcatCloud
SnowcatCloud
SnowcatCloud is a cloud-hosted customer data infrastructure platform built on an open source Snowplow fork (OpenSnowcat) that enables organizations to collect, process, route, and integrate behavioral and event-level data at scale across web, mobile, server, and IoT sources so teams can build a real-time, first-party customer 360 view while retaining full ownership and control of their data; it supports multiple deployment models including cloud-hosted, fully managed service, “bring your own cloud,” and self-hosted open-source options to suit different privacy, cost, and infrastructure needs, all with enterprise-grade security (SOC 2 Type II) and real-time data delivery capabilities. It enriches event pipelines with identity resolution techniques like browser fingerprinting and probabilistic/deterministic matching to improve customer profiles, helps create a customer knowledge graph for deeper insights, and integrates with analytics and data warehouses.Starting Price: Free -
18
fingerprint.dev
fingerprint.dev
Fingerprint is a device intelligence platform that works across web and mobile applications to identify every visitor with industry-leading accuracy, even when they are anonymous. It helps businesses stop fraud, detect bots and AI agents, reduce friction for trusted users, and build safer, more seamless products. It recognizes returning browsers and mobile devices without relying on cookies or IP addresses, assigning each visitor a persistent visitor ID that remains stable even across incognito mode, VPN usage, cleared cookies, and tampered devices. Fingerprint combines the original fingerprinting library with more than 100 signals developed by its research team, including VPN detection, IP geolocation, high-activity device detection, raw device attributes, IP blocklist matching, geolocation spoofing, browser bot detection, rooted device detection, browser tampering detection, and other Smart Signals.Starting Price: Free -
19
Dregs
Dregs LLC
Dregs is fraud detection for SaaS applications. A lightweight JavaScript tracking script fingerprints devices and streams user events; Dregs scores every identity across four dimensions: Humanity (bot and automation detection), Authenticity (fake profiles and disposable emails), Uniqueness (duplicate accounts linked through shared devices, IPs, and sessions), and Behavior (activity compared against expected patterns). Scores are transparent — built from individual analyzer observations you can inspect and tune, not an opaque risk number. Rules raise alerts to the dashboard, email, Slack, or webhooks, and teams adopt in four stages — Scoring, Alerts, Escalation, Autonomy — ending in automated responses like rate limiting and account quarantine. Dregs targets free-trial abuse, promo and referral fraud, duplicate accounts, stolen-card testing, SMS pumping, credential stuffing, and scraping. Setup is self-serve with a free trial and published pricing.Starting Price: $17/month -
20
Qwiet AI
Qwiet AI
The Fastest Code Analysis, Hands Down. 40X faster scan times so developers never have to wait for results after submitting pull requests. The Most Accurate Results. Qwiet AI has the highest OWASP Benchmark score, which is nearly triple the commercial average and more than double the 2nd highest score. Developer-Centric Security Workflows. 96% of developers report that disconnected security and development workflows inhibit their productivity. Implementing developer-centric AppSec workflows decreases mean-time-to-remediation (MTTR), typically by 5X - enhancing both security and developer productivity. Automatically Find Business Logic Flaws in Dev. Identify vulnerabilities that are unique to your code base before they reach production. Achieve Compliance. Demonstrate and maintain compliance with security and privacy regulations such as SOC 2, PCI-DSS, GDPR, and CCPA.Starting Price: Free -
21
GuardRails
GuardRails
Empowering modern development teams to find, fix and prevent vulnerabilities related to source code, open source libraries, secret management and cloud configuration. Empowering modern development teams to find, fix, and prevent security vulnerabilities in their applications. Continuous security scanning reduces cycle times and speeds up the shipping of features. Our expert system reduces the amount of false alerts and only informs about relevant security issues. Consistent security scanning across the entire product portfolio results in more secure software. GuardRails provides a completely frictionless integration with modern Version Control Systems like Github and GitLab. GuardRails seamlessly selects the right security engines to run based on the languages in a repository. Every single rule is curated to decide whether it has a high security impact issue resulting in less noise. Has built an expert system that detects false positives that is continuously tuned to be more accurate.Starting Price: $35 per user per month -
22
DexProtector
Licel
Instant protection for iOS and Android apps from static and dynamic attacks. A global leader in app and SDK defense with over ten billion installations. DexProtector’s approach to defending your apps is unique. Its Runtime Application Self Protection (RASP) native engine works at a system level deep within the app. From there, it interacts directly with the OS components. This helps it to control key processes and secure the most sensitive parts of your apps and libraries. DexProtector builds layers of protection on top of one another, creating a solid shield around your valuable code and assets. This hardens your apps and prevents real-time attacks. Instant, one-click integration into your CI/CD with no coding required. Protects your apps as well as the communication channel with servers. Provides a secure layer between your app and the operating system. Defends your app against both static and dynamic attacks. -
23
FortiIsolator
Fortinet
FortiIsolator allows organizations to keep their most critical, high-value targets secure from the onslaught of threats. Remote browser isolation allows users to browse the web in an isolated environment, which renders safe content in a remote container. FortiIsolator is a complete remote browser isolation solution that does not require an install on a user’s computer or device. User activity on the web passes through a remote isolation environment, protecting the end user. Clientless browser isolation quickly renders safe web content for the end user. This added layer of advanced protection increases security for your high-value data. Rendering lighter-weight web content can help prevent PC issues and let personnel focus on support. -
24
CredoLab
CredoLab
Help your risk, fraud, and marketing teams make better decisions with advanced behavioral analytics based on smartphone and web metadata. Join 150+ financial companies, banks, and fintech unicorns already using CredoLab platform to enrich their data and unlock revenue opportunities for sustainable growth and innovation. Designed to be seamlessly embedded into your products, providing unparalleled real-time data-driven solutions for your business needs. Greater predictive power, 100% hit rate, lower cost of risk, higher approval rate. Top-of-the-funnel data, real-time device velocity checks, and predictive behavior-based scores. Better user engagement with personality-based and outcome-based marketing campaigns. Granular and real-time behavioral insights for a deeper understanding of all users. Once embedded in your products, it delivers value across the entire organization. It also works as a standalone or as a complement to existing risk, fraud, and marketing solutions.Starting Price: $600 per month -
25
DeviceID
DeviceID
Our ML-powered platform instantly reveals your traffic allowing you to identify your users even if they try to hide their identity. detect attacks and bots, access extensive real-time analytics, and enjoy the most advanced identification method. We support the most popular browsers and programming languages so you can easily identify your users across all devices and browsers. The culmination of our meticulous identification process is the delivery of a comprehensive response. This response includes a unique and persistent identifier for the device, ensuring reliable user recognition across sessions. Furthermore, you'll receive a detailed analysis of the client's device, encompassing a wealth of information gleaned from our advanced fingerprinting techniques and machine learning analysis. This includes data points such as the user's browser version, operating system, and potential threat scores.Starting Price: $50 per month -
26
Imperva Client-Side Protection
Imperva
Client-Side Protection provides real-time monitoring of all client-side resources and JavaScript behavior. Gain control over all first and third-party JavaScript code embedded on your website. Actionable insights make it easy to identify risky resources and scripts that should not load on your client side. And if any JavaScript code is compromised, your security team is the first to know. Provides comprehensive inventorying, authorization, dynamic integrity verification, and real-time monitoring, helping streamline regulatory compliance with the new client-side security requirements introduced in PCI DSS 4.0. Protect your website against client-side attacks and streamline regulatory compliance with PCI DSS 4.0. Client-side attacks increase as web applications shift to client-side logic and incorporate more third-party code and resources. These attacks can directly steal sensitive customer data, resulting in breaches and noncompliance with data privacy regulations. -
27
Client-Side Protection helps protect against end-user data exfiltration and shield websites from JavaScript threats. It analyzes script behavior in real-time, provides actionable insights in a single dashboard view, and delivers alerts to mitigate harmful script activity. Designed for PCI DSS v4.0, the solution helps businesses meet new script security requirements and safeguards against client-side attacks. Inject simple scripts into each monitored page without meaningfully impacting performance. Monitor and assess script activity from the browser while machine learning techniques analyze the risk of unauthorized action. Get real-time alerts, with detailed information about mitigation, if an active threat or attack is found. Immediately restrict malicious scripts from accessing and exfiltrating sensitive data on protected pages with one click. Defend your site from client-side threats. Ease compliance with PCI DSS v4.0. Strengthen your web page integrity.
-
28
Noma
Noma Security
Noma Security is the complete enterprise AI security platform designed to deliver confidence in agentic AI at scale. Noma Security was named a Gartner Cool Vendors in AI Security, 2025 for delivering deep visibility and AI discovery, agentic risk mapping, security posture management, automated AI red teaming, and AI runtime protection all in one platform. With seamless integration to your AI stack and workflows, and alignment with regulatory compliance frameworks, Noma Security helps teams embrace AI innovation while addressing the unique threats posed by rapid enterprise AI adoption. -
29
Pixee
Pixee
Pixee is an AI-powered automated product security engineer that integrates seamlessly into your development workflow, monitoring repositories and pull requests to provide high-quality fixes instantly. It triages scanner alerts from tools like Sonar, Snyk, and Semgrep, delivering code fixes and unlocking the velocity of GenAI-driven development. Pixee operates like a trusted specialist teammate, fitting into your workflow and current tooling without being a distraction, supporting languages such as Java, Python, JavaScript, Node.js, .NET/C#, and Go. It provides expert security context on each finding to filter out false positives, elevate true positives, and recommend actions, freeing your team from endless manual review. Pixee turns findings into actionable pull requests that developers can review and merge, enabling auto-remediation at scale without the grind.Starting Price: $29 per month -
30
AgentShield
AgentShield
AgentShield is a next-generation identity platform built to verify both human users and AI agents acting on their behalf. It enables organizations to confirm who an agent is, whether the person behind the agent has provided explicit authority, and that the agent is trustworthy, all through APIs and JavaScript integrations. The product includes tools that detect agentic sessions on a website. and enforces identity and permission checks for agent-to-agent or agent-to-service interactions under the open Model Context Protocol Identity (MCP-I) specification. With KYA, businesses can securely manage agent identities and permissions, institute audit-trails, automation workflows, and finely-tuned access control for autonomous systems, thereby protecting themselves from misuse of digital identities and ensuring transparency when AI systems act on behalf of users.
