# Application security & pentesting: the tools companies use

70 companies on usedby use at least one of the 3 tools in this category with a public customer. Snyk leads with 33 companies. Counts are of companies on usedby, not of the whole market. Latest check 2026-10-07: 71 of 71 public lines checked.

> AI that finds and fixes vulnerabilities in code, dependencies, apps and networks before attackers do.

Family: [Security](https://www.usedby.ai/tools/category/security.md)

## Ranking

Public customers count every public line, job-post signals included; ties share a rank.

| Rank | Tool | Public customers | Confirmed | Observed | Signals |
|---|---|---|---|---|---|
| 1 | [Snyk](https://www.usedby.ai/tools/snyk.md) | 33 | 9 | 24 | 0 |
| 2 | [Endor Labs](https://www.usedby.ai/tools/endor-labs.md) | 24 | 0 | 24 | 0 |
| 3 | [XBOW](https://www.usedby.ai/tools/xbow.md) | 14 | 6 | 8 | 0 |

Tools in this category without a public customer yet: [Horizon3.ai NodeZero](https://www.usedby.ai/tools/horizon3-ai.md).

---
Source: https://www.usedby.ai/tools/category/application-security · How we check: https://www.usedby.ai/methodology