CAST Imaging vs Joern
CAST Imaging
castsoftware.com
Joern
joern.ioSide by side
| Figure | CAST Imaging | Joern |
|---|---|---|
| Price from | $0.17/mo | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 4 | 0 |
| Spec score · Static Analysis Tools | 8.6 (#4) | 7.7 (#19) |
| Deployment | CAST Imaging can run locally or on a cloud instance, and CAST Imaging Express is offered as SaaS. | The project documents Docker-based execution, including running Joern in server mode. |
| Purpose | CAST Imaging reads source code and data scripts and derives knowledge about an application's inner workings. | Joern analyzes source code, bytecode, and binary executables to support vulnerability discovery and static program analysis. |
Plans
CAST Imaging
- CAST Imaging Express$2 a year
- CAST Imaging$9.50 a year
- Flex PlansPriced on request
- On DemandPriced on request
In their own words
CAST Imaging
CAST Imaging has no write-up on Specifiction yet; its figures are above.
Joern
Joern analyzes source code, bytecode and binary code for vulnerability discovery and static program analysis research. It converts programs into code property graphs, providing a common structure for cross-language analysis. Users query those graphs with a strongly typed, extensible Scala-based domain-specific language. Features include parsing, taint analysis, search queries and passes that extend the graph representation. Joern Scan runs predefined queries and reports matching issues with their locations; queries can be selected by tag or name, and community contributions are accepted in the default database. Queries can be wrapped into custom scanners for CI. Joern also works as a library or through REST and HTTP APIs, including a server for graph construction and querying. Documented frontends cover C, C++, C#, Go, Java, JavaScript, Kotlin, PHP, Python, Ruby, Swift, x86/x64 and JVM bytecode, with varying maturity. Distributions target Linux, macOS and Windows on x86_64 and ARM64. Joern is free, Apache-2.0 licensed and requires JDK 21.