SAST for PHP:
Jit vs. Snyk

Compare the accuracy, coverage, and speed of Jit and Snyk SAST scans.

Book a demo
PHP SAST Comparison between Snyk and Jit's Semgrep
Jit logo
True Positive Rate
False Positive Rate
True Positive Rate
False Positive Rate
Number of Detected Vulnerabilities
Vulnerability Type
Jit
Snyk
Command Injection
12
8
Cross Site Scripting
12
20
SQL Injection
20
17
LFI / RFI
9
7
Local File Manipulation
2
2
Insecure Deserialization
2
2
Path Traversal
10
8
Information Disclosure
5
0
Weak Cryptography
22
0
Total findings
94
64
Scanning Time
Repositories Name
Jit
Snyk
milad00ahmadi/yooz-vulnerable-webapp
1.79
10.75
nikosdano/vulnerable-lfi
1.76
6.43
snyk-labs/php-goof
1.71
6.29
jadz/php-sploits
1.56
6.75
digininja/DVWA
2.53
8.93
bmdyy/tudo
1.95
9.47
Total Scan Time (s)
11.3
48.62

Join more than 180,000 developers who use jit.io

Book a demo