Scantist

Spec sheet

What it does

Scantist presents an AI-powered security platform spanning autonomous penetration testing, application security and AI runtime protection.Read 15 Oct 2026 · scantist.com

Integrations

The pricing matrix lists CI/CD integrations including Jenkins, GitHub Actions and GitLab, plus cloud source-control integrations and premium chat integrations.Read 15 Oct 2026 · scantist.com

Support

The AppDefender comparison lists customer support for Basic, Premium, and Enterprise, and a dedicated account manager for Premium and Enterprise.Read 9 Oct 2026 · scantist.com

Headquarters

SingaporeRead 28 Sep 2026 · scantist.com

Founded

2016Read 28 Sep 2026 · scantist.com

AI runtime security

AIDefender reviews prompts and responses in runtime and can block, redact, or flag unsafe activity such as prompt injection and data leaks.Read 9 Oct 2026 · scantist.com

AIDefender

AIDefender evaluates prompts and responses in real time to detect jailbreaks, prompt injection and data leakage, then blocks, flags or redacts risky activity.Read 15 Oct 2026 · scantist.com

API evidence

DefectDojo documents a Scantist connector that imports SCA and SAST findings using an API token and the https://api.scantist.io endpoint.Read 15 Oct 2026 · docs.defectdojo.com

AppDefender IaC

The IaC capability checks cloud and infrastructure configurations for security misconfigurations before deployment.Read 15 Oct 2026 · scantist.com

AppDefender SAST

The SAST engine is described as finding coding flaws and security gaps in proprietary code.Read 15 Oct 2026 · scantist.com

AppDefender SCA

AppDefender scans source dependencies and binaries for known vulnerabilities and produces software-bill-of-materials visibility.Read 15 Oct 2026 · scantist.com

AppDefender scanning

AppDefender combines SAST, SCA, and infrastructure-as-code scanning for code flaws, vulnerable dependencies, and cloud misconfigurations.Read 9 Oct 2026 · scantist.com

Build scan behavior

The FAQ explains that build-based scans monitor CI processes and include transitive and environment-specific open-source dependencies.Read 15 Oct 2026 · scantist.atlassian.net

Company location

Scantist identifies itself as a Singapore-based cybersecurity company and lists its office at 71 Ayer Rajah Crescent, #04-01, Singapore 139951.Read 9 Oct 2026 · scantist.com

Documentation scope

Scantist’s documentation site covers language/file support, multiple SCM accounts, CI/CD build scans, UI-triggered scans, compliance rules and access tokens.Read 15 Oct 2026 · docs.scantist.io

Enterprise deployment

Enterprise AppDefender includes cloud and on-site deployment, single sign-on, API access and code patching.Read 15 Oct 2026 · scantist.com

Funding status

Crunchbase lists four funding rounds, including a Series A led by GSR Ventures, but masks the monetary amounts.Read 15 Oct 2026 · crunchbase.com

Headcount estimate

Crunchbase places Scantist in the 51–100 employee range.Read 15 Oct 2026 · crunchbase.com

Independent recognition

Scantist announced on July 15, 2024 that its SCA tool was added to OWASP’s recognized SCA-tool list.Read 15 Oct 2026 · scantist.com

Legacy language limitation

Scantist’s FAQ lists Java, JavaScript, Python, Ruby, C#, C, C++, Vue, Go and TypeScript for scans and says unsupported-language projects do not appear in the repository list.Read 15 Oct 2026 · scantist.atlassian.net

Legal name

Crunchbase lists the legal name as Scantist Pte. Ltd. and the operating status as active.Read 15 Oct 2026 · crunchbase.com

Liability limit

Scantist's terms say its products are designed to identify and validate vulnerabilities but do not guarantee that all vulnerabilities will be found.Read 9 Oct 2026 · scantist.com

Limit: enterprise gating

Code-snippet scanning, fuzzing, API access, SSO, on-site deployment and dedicated account management are reserved for Enterprise.Read 15 Oct 2026 · scantist.com

Limit: free-tier boundaries

The published comparison limits the free AppDefender tier to one user, five projects, 20 monthly scans, 10MB uploads and seven-day retention.Read 15 Oct 2026 · scantist.com

LinkedIn company fact

LinkedIn describes Scantist as founded in 2016 and spun out of Nanyang Technological University’s Cyber Security Lab.Read 15 Oct 2026 · sg.linkedin.com

LinkedIn company size

LinkedIn’s company page shows 10 employees discoverable on LinkedIn and Singapore as the location.Read 15 Oct 2026 · sg.linkedin.com

Marketplace installation

Scantist DevSecOps is listed as a GitHub Marketplace integration with free installation and zero installs shown when the page was opened.Read 15 Oct 2026 · github.com

Package licence

The scantist-karby PyPI project is marked with the OSI-approved MIT License.Read 15 Oct 2026 · pypi.org

PAIStrike

PAIStrike maps attack surfaces, chains weaknesses and supplies reproducible proof-of-exploit for findings.Read 15 Oct 2026 · scantist.com

PAIStrike reconnaissance

Its reconnaissance phase discovers domains, endpoints, and public resources and gathers headers, redirects, and technology fingerprints.Read 9 Oct 2026 · scantist.com

Plan limits

The free AppDefender plan lists one user, five projects, up to 10MB uploads, 20 monthly scans, and seven-day scan retention.Read 9 Oct 2026 · scantist.com

Platform architecture

A 2023 launch post describes Kubernetes-orchestrated cloud or on-premise deployments and parallelized scanning engines.Read 15 Oct 2026 · scantist.com

Praise: integration breadth

The GitHub Marketplace listing highlights single-click remediation, CI/CD integration and continuous monitoring as included capabilities.Read 15 Oct 2026 · github.com

Private-repository limitation

The FAQ says private repositories may be unavailable when the subscribed plan supports only public repositories.Read 15 Oct 2026 · scantist.atlassian.net

Product scope

Scantist describes its work as application security, software supply chain risk, and security for AI agents and LLM-powered products.Read 9 Oct 2026 · scantist.com

Proprietary technology

The GitHub Marketplace description says Scantist uses proprietary static and dynamic analysis technologies for binaries, code snippets and licensing data.Read 15 Oct 2026 · github.com

Python package

PyPI hosts scantist-karby 4.2.0, a Python 3 package released August 1, 2022 for scanning projects and converting results to Scantist format.Read 15 Oct 2026 · pypi.org

Rating on G2

0.0 out of 5 from 0 reviews; the G2 SAST category page shows no user-satisfaction information for Scantist.Read 15 Oct 2026 · g2.com

SBOM and licenses

AppDefender scans dependencies and binaries, provides software bill of materials visibility, and tracks open-source licenses with custom policy controls.Read 9 Oct 2026 · scantist.com

Security certification

Scantist states that it achieved ISO/IEC 27001:2022 certification and uses Vanta for continuous compliance monitoring.Read 15 Oct 2026 · scantist.com

Security certifications

Scantist's site displays badges labeled ISO/IEC 27001 Certified, SG Cyber Safe — Cyber Essentials, and AICPA SOC.Read 9 Oct 2026 · scantist.com

Supported languages

The GitHub Marketplace listing names JavaScript, Ruby, C++, Python, C, PHP, Java, Go, C# and Kotlin as supported languages.Read 15 Oct 2026 · github.com

Vulnerability database

The Marketplace listing says Scantist aggregates advisories and repository or bug-tracker data and updates its 16TB database every six hours.Read 15 Oct 2026 · github.com

Plans and prices

Every Scantist plan and price →

Where Specifiction places it

• Software Composition Analysis Software#7 of 658.6