Bearer CLI: free source-available SAST scanner prioritizes sensitive data paths
Bearer CLI is a free static application security testing tool released under the Elastic License 2.0. It scans source code for OWASP Top 10 and CWE Top 25 flaws and ranks findings by the sensitive data they touch, plus generates a privacy report covering 120+ data types.
- Supports Go, Java, JavaScript, TypeScript, PHP, Python and Ruby
- Rules cover OWASP Top 10 and CWE Top 25, including SQL injection and XSS
- Privacy report detects 120+ data types and components like pgSQL, OpenAI and Sentry
- Elastic 2.0 license: free internal use, third-party hosting needs approval
Read next
Security