We need to test our mobile app code for vulnerabilities before our next launch. What are the best automated AST tools right now?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
We need to test our mobile app code for vulnerabilities before our next launch. What are the best automated AST tools right now?
3 real searches · 1 real-search pass
2026 best AST-based static application security testing tools mobile app Swift Kotlin Java JavaScript Semgrep CodeQL MobSFGoogle ↗
OBSERVEDComparison
Semgrep official documentation mobile security rules Swift Kotlin Java Android iOSGoogle ↗
OBSERVEDOther / navigational
GitHub CodeQL supported languages Swift Kotlin Java JavaScript official documentationGoogle ↗
OBSERVEDOther / navigational
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (3)
Classes come from the query-classifier (a local Laya model). 2 of 3 calls are low-confidence (under 50%) — hover a query in the table to see its confidence.
Searches and sources
ChatGPT3 real searches · gpt-6
2026 best AST-based static application security testing tools mobile app Swift Kotlin Java JavaScript Semgrep CodeQL MobSF Google ↗
Semgrep official documentation mobile security rules Swift Kotlin Java Android iOS Google ↗
GitHub CodeQL supported languages Swift Kotlin Java JavaScript official documentation Google ↗
- Official website · semgrep.dev
- OWASP mobile integration · mas.owasp.org
- Official website · codeql.github.com
- GitHub repository · github.com
- Official website · oversecured.com
- GitHub repository · github.com
- Source Code Analysis Tools · community.owasp.org
- 10 Best SAST Tools for Mobile Apps in 2026 · oversecured.com
- Static Application Security Testing (SAST) · owasp.github.io
Queries
3 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
2026 best AST-based static application security testing tools mobile app Swift Kotlin Java JavaScript Semgrep CodeQL MobSF OBSERVED | Google ↗ AI Mode ↗ | — | Comparison | — | — | 1x of 1 | |
Semgrep official documentation mobile security rules Swift Kotlin Java Android iOS OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 | |
GitHub CodeQL supported languages Swift Kotlin Java JavaScript official documentation OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 |