Bearer vs Brakeman
Bearer
bearer.comBrakeman
brakemanscanner.orgSide by side
| Figure | Bearer | Brakeman |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 1 |
| Spec score · Static Application Security Testing Sast | 7.7 (#11) | 8.0 (#7) |
| Spec score · SAST Tools | 7.7 (#15) | 8.0 (#10) |
| Spec score · Static Application Security Testing Software | 7.7 (#17) | 7.9 (#11) |
| CI integrations | The CLI documents CI/CD setup for GitHub Actions, GitLab CI/CD, and CircleCI. | The project README also points to GitHub Actions and a Jenkins/Hudson plugin for continuous integration. |
Plans
In their own words
Bearer
Bearer CLI is a free static application security testing tool for Linux and macOS. It scans source code and analyzes data flows to identify security and privacy risks while analyzing code patterns instead of viewing actual data values. The tool supports more than 120 sensitive data types, including personal data, PII, and PHI. Privacy reports can show sensitive data, related data subjects, and internal or third-party components that process it, with information useful for GDPR records of processing activities. Security features include SAST rules and a separate hard-coded-secrets scanner. Bearer documents pull-request and CI/CD use with GitHub Actions, GitLab CI/CD, and CircleCI, plus custom security rules. Listed stacks include Go, Python, PHP, JavaScript, TypeScript, Ruby, and Java. Installation options include scripts, Homebrew, Linux package managers, Docker, and binaries. macOS 12 or later and Git 2.34 or later are required.
Brakeman
Brakeman has no write-up on Specifiction yet; its figures are above.