Skip to content
Bearer CLI Launches Free SAST Tool for Code Security Scanning

Bearer CLI Launches Free SAST Tool for Code Security Scanning

First seen 19 Oct 2026, 13:49 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 20, 2026 at 13:49 UTC
  • •Bearer CLI is a free SAST tool for scanning source code vulnerabilities.
  • •It prioritizes findings based on sensitive data exposure, aiding developers in triaging issues.
  • •The tool supports multiple programming languages and is available under the Elastic License 2.0.

Bearer has released Bearer CLI, a free static application security testing (SAST) tool designed to scan source code for vulnerabilities and prioritize them based on the sensitive data they handle. The tool identifies risks according to the OWASP Top 10 and CWE Top 25, covering issues like SQL injection and cross-site scripting. It supports multiple programming languages, including Go, Java, and Python, and is available under the Elastic License 2.0 for internal use. Bearer CLI also offers a privacy report feature that flags components handling sensitive data, aiding in compliance with regulations like GDPR. The tool is open-source and can be accessed on GitHub. Organizations are encouraged to utilize it for better security practices without commercial obligations for internal use.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Timeline

2026-10-19
Bearer CLI launched
Bearer released Bearer CLI, a free SAST tool for scanning source code vulnerabilities, available on GitHub.
Helpnetsecurity

More articles in this cluster (2)

Common questions

What vulnerabilities does Bearer CLI scan for?
Bearer CLI scans for vulnerabilities listed in the OWASP Top 10 and CWE Top 25, including SQL injection and cross-site scripting.
Is Bearer CLI truly free to use?
Yes, Bearer CLI is free for internal use under the Elastic License 2.0, but commercial distribution requires approval.
Which programming languages are supported?
Bearer CLI supports Go, Java, JavaScript, TypeScript, PHP, Python, and Ruby.