Cisco AI Deep SAST
Cisco AI Deep SAST: Open-source scanner combining Semgrep OWASP checks, secret detection and AI triage for self-hosted CI/CD. Ranked #24 of 27 in AI Code Security Scanners by our editors (6.9/10); pricing: Open source; best for open-source AI-assisted SAST.
At a glance
- Editor score6.9 / 10
- PricingOpen source
- Best forOpen-source AI-assisted SAST
- Paid fromFree
- Secrets detectionYes
- Facts checked20 Oct 2026
Where it wins
- Semgrep-based OWASP Top 10 and hardcoded-secret detection
- Local LLM triage plus frontier-model API support
- Severity gates, remediation guidance and CI report formats
Where it doesn't
- CI/CD workflows center on Jenkins and Docker
- Self-hosted deployment requires teams to operate the tooling
- Support is provided through documentation and community channels
Our verdict on Cisco AI Deep SAST
Cisco AI Deep SAST is an open-source command-line security scanner for CI/CD pipelines. It combines Semgrep-based OWASP Top 10 vulnerability detection with secret scanning for passwords, API keys and tokens. Development and security teams can run it on macOS or Linux in self-hosted or desktop deployments. The project is aimed at organizations that want code analysis under their own control, from small teams through enterprise environments.
Its analysis stack spans finding triage and deeper repository inspection. A locally runnable Foundation-Sec-8B model handles triage, while tree-sitter indexing supports whole-codebase scanning with configurable frontier models through OpenAI-compatible APIs. Remediation guidance can include corrected code. Severity thresholds and configurable quality gates help teams enforce findings in pipelines, and reports are available in Markdown, JSON and JUnit XML. Docker and Jenkins workflows provide documented CI/CD paths, with Azure OpenAI and Ollama among the listed model integrations.
Cisco AI Deep SAST fits teams comfortable operating open-source tooling, local models or connected model APIs. Its deployment model keeps scanning self-hosted, and support is provided through documentation and a community channel. The documented ecosystem is concentrated on Jenkins and Docker for CI/CD, so teams centered on other automation systems may need additional integration work. Choose it when Semgrep-based OWASP coverage, secrets detection and AI-assisted triage are priorities; consider an alternative if you need a vendor-hosted service or a broader set of built-in CI integrations.
Your product? Our editors can test Cisco AI Deep SAST in depth and publish a review, labelled as paid · from $149/mo →
Cisco AI Deep SAST pricing
Cisco AI Deep SAST fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Free |
| Secrets detection | Yes |
| Dependency scanning | Not verified |
| IDE integrations | Not verified |
| CI integrations | Jenkins |
| AI fix suggestions | Yes |
| Deployment model | Self_hosted |
| Supported languages | Not verified |
| Deployment | Self-hosted, Desktop |
| Platforms | macOS, Linux |
| Support | Docs, Community |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 5 integrations: Jenkins, Docker, OpenAI-compatible LLM APIs, Azure OpenAI, Ollama |
| Pricing | Open source |
| Website | github.com |
| Facts checked | 20 Oct 2026 |
Cisco AI Deep SAST integrations
Cisco AI Deep SAST lists 5 integrations on its own site.
- Jenkins
- Docker
- OpenAI-compatible LLM APIs
- Azure OpenAI
- Ollama
Alternatives to Cisco AI Deep SAST
- Checkmarx OneEnterprise AppSec coverage from code scanning through governance and remediation.9.3
- OpenText Fortify Software Security PlatformA broad, hybrid AppSec suite for organizations standardizing security across the SDLC.9.2
- Snyk CodeBroad developer SAST with IDE, CI/CD, pull-request checks and AI-assisted fixes.9.1
See all Cisco AI Deep SAST alternatives →
Used Cisco AI Deep SAST? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Cisco AI Deep SAST for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Cisco AI Deep SAST is listed in our AI Code Security Scanners directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/cisco-ai-deep-sast/"><img src="https://www.itechguides.com/best/badge/cisco-ai-deep-sast.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update

