Puma Scan

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Puma Scan is ranked #7 of 24 in static application security testing software on Inferse. It runs on Linux, macOS, Self-hosted, Windows. There is a free plan. A free trial is offered. Paid plans start at $24.92/mo.

Compared on static application security testing software

Free plan: Yespumasecurity.io
Analysis target: sourcepumasecurity.io
Supported languages: 1 languagespumasecurity.io
IDE support: Yespumasecurity.io
CI/CD support: Yespumasecurity.io
Deployment: hybridpumasecurity.io
SCA included: Yespumasecurity.io
Fix guidance: Yespumasecurity.io

Facts

Purpose: Puma Scan is a static application security testing tool that scans C# code in Visual Studio and reports vulnerabilities as compiler warnings before code is committed.pumasecurity.io · 2 Oct 2026
Real-time scanning: The End User Edition scans C# code in Visual Studio as developers write it.pumasecurity.io · 2 Oct 2026
AI-assisted code: The product page says the scanner covers AI-generated code from GitHub Copilot, Cursor, Claude, ChatGPT, Amazon Q, and Gemini Code Assist.pumasecurity.io · 2 Oct 2026
Supported code: The End User extension supports C# in .NET Framework and .NET Core, including .NET Web Forms and .NET MVC; legacy website projects are unsupported.pumasecurity.io · 2 Oct 2026
CI integrations: The maker lists GitHub Actions, GitLab CI, and Azure DevOps pipeline integrations for automated scanning.pumasecurity.io · 2 Oct 2026
On-premises integration: The Server Edition supports command-line scans and integration with on-premises Azure DevOps through a command-line build task.pumasecurity.io · 2 Oct 2026
Security thresholds: CI editions can apply configurable vulnerability severity thresholds and stop builds when requirements are not met.pumasecurity.io · 2 Oct 2026
Reports: The Server Edition can export findings in HTML, JSON, MSBuild, VSO, VSTest, and CSV formats.pumasecurity.io · 2 Oct 2026
Trial terms: The product page offers 30-day trials with no credit card required and says reporting is unavailable during the trial.pumasecurity.io · 2 Oct 2026
Support: The Professional End User Edition includes email support and scheduled telephone support; the annual subscription includes product support and updates.pumasecurity.io · 2 Oct 2026
Community edition behavior: The Community Edition analyzers run locally in Visual Studio and do not communicate with Puma Scan servers to obtain rule updates.pumasecurity.io · 2 Oct 2026
Notable limitations: Cross-platform code editors such as VS Code are not supported for the End User extension, and legacy Web Site projects are unsupported.pumasecurity.io · 2 Oct 2026
Intended users: Puma Scan describes its product as created for .NET security engineers and developers and positions pipeline editions for development, security, and operations teams.pumasecurity.io · 2 Oct 2026
Security documentation: The maker documents vulnerability-analysis rules and warns that static-analysis findings may include false positives and false negatives.pumascan.com · 2 Oct 2026