Skip to content
SPECIFICTION
Get listed

Bearer

bearer.com

Free plan macOSLinux
Visit bearer.com
Spec score 7.7 #11 of 24 in Static Application Security Testing Sast

What it is

Bearer CLI is a free static application security testing tool for Linux and macOS. It scans source code and analyzes data flows to identify security and privacy risks while analyzing code patterns instead of viewing actual data values. The tool supports more than 120 sensitive data types, including personal data, PII, and PHI. Privacy reports can show sensitive data, related data subjects, and internal or third-party components that process it, with information useful for GDPR records of processing activities. Security features include SAST rules and a separate hard-coded-secrets scanner. Bearer documents pull-request and CI/CD use with GitHub Actions, GitLab CI/CD, and CircleCI, plus custom security rules. Listed stacks include Go, Python, PHP, JavaScript, TypeScript, Ruby, and Java. Installation options include scripts, Homebrew, Linux package managers, Docker, and binaries. macOS 12 or later and Git 2.34 or later are required.

Spec sheet

Product
Bearer CLI is a static application security testing tool that scans source code and analyzes data flows to find security and privacy risks.Read 8 Oct 2026 · docs.bearer.com
CI integrations
The CLI documents CI/CD setup for GitHub Actions, GitLab CI/CD, and CircleCI.Read 8 Oct 2026 · docs.bearer.com
Data handling
Bearer CLI says it analyzes code patterns without viewing the actual data values.Read 8 Oct 2026 · docs.bearer.com
Detection caveat
Bearer says its data classification patterns aim to reduce false positives, with a potential tradeoff of missing some true positives.Read 8 Oct 2026 · docs.bearer.com
Installation
Installation options include an install script, Homebrew, Linux package managers, Docker, and downloadable binaries; macOS 12 or later is supported and Git 2.34 or later is required.Read 8 Oct 2026 · docs.bearer.com
Privacy reports
Privacy reports can identify sensitive data, data subjects, and internal or third-party components processing that data, including input for GDPR records of processing activities.Read 8 Oct 2026 · docs.bearer.com
Product availability
Bearer's homepage says Bearer has been acquired by Cycode and invites users to join the early access list for Bearer Cloud.Read 8 Oct 2026 · bearer.com
Security scanning
The CLI includes SAST rules for security risks and a separate scanner for hard-coded secrets.Read 8 Oct 2026 · docs.bearer.com
Sensitive data
Bearer CLI supports more than 120 sensitive data types, including personal data, PII, and PHI.Read 8 Oct 2026 · docs.bearer.com
Supported languages
The documentation lists Go, Python, PHP, JavaScript, TypeScript, Ruby, and Java as supported stacks.Read 8 Oct 2026 · docs.bearer.com

Plans and prices

Bearer CLI Free Free and open SAST; no numeric limits stated Read 8 Oct 2026 · bearer.com

Every Bearer plan and price →

Strong points and limits

Strong points

  • Free plan with no stated numeric limits
  • More than 120 sensitive data types
  • Privacy reports support GDPR record inputs
  • CI/CD and pull-request scans documented
  • Custom security rules supported

Limits

  • Linux and macOS platforms only
  • macOS 12 or later required
  • Git 2.34 or later required
  • Patterns may miss some true positives

Who it suits

Bearer suits developers and security teams scanning source code for security, privacy, sensitive-data, or hard-coded-secret risks. It also fits teams integrating scans into pull requests and CI/CD workflows.

Verdict

Bearer CLI combines source-code security scanning with data-flow and privacy reporting. Its documented integrations and language coverage suit teams that want command-line and CI/CD analysis, while its classification approach can trade fewer false positives for missed findings.

Where Specifiction places it

Alternatives to BearerAll alternatives →