Contributed a review of Veracode: Helps to reduce false positives and prevent vulnerable code from entering production, but does not support incremental scanning

Contributed a review of Snyk: Developer-friendly with many useful features in the works, but lacks in language and framework coverage

Contributed a review of Synopsys API Security Testing [EOL]: Useful threat vectors, beneficial results, but implementation needed support