Source code scans
Source scans inspect uploaded source files, archives, or Git repositories.
Compiled artifact scans
Compiled artifact scans (binary scans) inspect shipped artifacts rather than
Remote target scans
Remote scans actively probe a running web application, API, or SaaS endpoint.
Dependency scanning
The dependency stage reads a project's manifests and lockfiles, resolves the
Infrastructure-as-code detection
Source repositories increasingly contain the infrastructure as well as the