Best Runtime Application Self-Protection (RASP) Software in Germany
View:
Compare the Top Runtime Application Self-Protection (RASP) Software in Germany as of October 2026
Sort By:
What is Runtime Application Self-Protection (RASP) Software in Germany?
Runtime Application Self-Protection (RASP) software is a security solution designed to protect applications in real time while they are running, providing active defense against attacks by detecting and mitigating vulnerabilities as they occur. Unlike traditional security tools, which primarily focus on perimeter defense or static scanning, RASP operates within the application itself and monitors its behavior during runtime. It can automatically block malicious activity, such as SQL injection, cross-site scripting (XSS), and unauthorized access, by analyzing both application traffic and the application's internal behavior. RASP is particularly valuable for protecting web applications, mobile apps, and APIs from advanced threats, ensuring the security of applications even if they are deployed in dynamic or cloud environments. Compare and read user reviews of the best Runtime Application Self-Protection (RASP) software in Germany currently available using the table below. This list is updated regularly.
-
1
Reflectiz
Reflectiz
Runtime application self-protection instruments the application server to detect and block attacks as code executes. Reflectiz applies that same runtime principle to the half of a modern web application RASP cannot see: the code executing in the visitor's browser. Third-party scripts, tag managers, trackers, and iFrame-embedded content run outside the server entirely, so a skimmer injected through a vendor's CDN never touches instrumented application code. Reflectiz observes real browser execution continuously, baselines what each script does, and alerts the moment behavior deviates, catching cases such as a legitimate analytics tool that starts reading checkout form fields or a pixel exfiltrating data to an unapproved endpoint. It deploys with no agent, no code change, and no performance cost. Reflectiz complements server-side RASP rather than replacing it, and mature programs run both.Starting Price: $5000/year -
2
Jscrambler
Jscrambler
Modern applications execute in environments attackers can inspect, manipulate, and automate. AI has accelerated that risk, giving attackers and free AI-powered tools the ability to analyze, reverse-engineer, and weaponize exposed application logic at scale. Jscrambler makes client-side applications self-defending by combining resilient code protection with active runtime defenses. Proprietary business logic, authentication flows, algorithms, and AI-generated code are hardened against AI-assisted analysis, while runtime protections detect and respond to tampering, debugging, code poisoning, and unauthorized manipulation. Each build is uniquely protected, raising the cost of automated reverse engineering and preventing exposed code from becoming an attacker’s roadmap. Extend application protection into the code itself—so applications can resist and respond to attacks where they execute. -
3
DoveRunner
DoveRunner
DoveRunner - the AI-powered next-gen AppShielding solution crafted to enable organizations to prevent mobile app attacks and deal with sophisticated threat landscapes with perfect precision in just 3 simple steps. DoveRunner brings the benefits of DevSecOps to Mobile Apps with a ZERO-FRICTION, ZERO-CODING Approach. Get the best of Defense-in-depth security and regulatory compliance in a single solution for mobile apps DoveRunner is trusted by industries like Fintech/Banking, O2O, Movie Apps, Gaming, Healthcare, Public apps, E-commerce, and others globally.Starting Price: $129/app/month -
4
Appdome
Appdome
Appdome changes the way people build mobile apps. Appdome’s industry defining no-code mobile solutions platform uses a patented, artificial-intelligence coding technology to power a self-serve, user-friendly service that anyone can use to build new security, authentication, access, enterprise mobility, mobile threat, analytics and more into any Android and iOS app instantly. There are over 25,000 unique combinations of mobile features, kits, vendors, standards, SDKs and APIs available on Appdome. Over 200+ leading financial, healthcare, government, and m-commerce providers use Appdome to consistently deliver richer and safer mobile experiences to millions of mobile end users, eliminating complex development and accelerating mobile app lifecycles.Starting Price: $0 -
5
Contrast Security
Contrast Security
Modern software development must match the speed of the business. But the modern AppSec tool soup lacks integration and creates complexity that slows software development life cycles. Contrast simplifies the complexity that impedes today’s development teams. Legacy AppSec employs a one-size-fits-all vulnerability detection and remediation approach that is inefficient and costly. Contrast automatically applies the best analysis and remediation technique, dramatically improving efficiencies and efficacy. Separate AppSec tools create silos that obfuscate the gathering of actionable intelligence across the application attack surface. Contrast delivers centralized observability that is critical to managing risks and capitalizing on operational efficiencies, both for security and development teams. Contrast Scan is pipeline native and delivers the speed, accuracy, and integration demanded by modern software development.Starting Price: $0 -
6
ByteHide
ByteHide
ByteHide is an all-in-one, developer-first application security platform designed to protect code, secrets, data, and runtime environments, while minimizing your dependencies and risk. It integrates seamlessly with your development workflows and communication tools, delivering key security insights and alerts without disrupting productivity. Operating under a zero-knowledge model, ByteHide uses client-side encryption so only you hold the keys, and it never stores your source code. With minimal, typically read-only permissions, you remain fully in control of what repositories and data sources are analyzed. ByteHide’s core tools include Shield for next-generation code obfuscation and anti-tampering, Secrets for AI-powered secret detection and decentralized management, Monitor for real-time runtime threat detection, and Radar for unified SAST/SCA scanning. These tools run in secure, isolated environments and automatically mask sensitive personal data.Starting Price: €39.99 per month -
7
Hdiv
Hdiv Security
Hdiv solutions enable you to deliver holistic, all-in-one solutions that protect applications from the inside while simplifying implementation across a range of environments. Hdiv eliminates the need for teams to acquire security expertise, automating self-protection to greatly reduce operating costs. Hdiv protects applications from the beginning, during application development to solve the root causes of risks, as well as after the applications are placed in production. Hdiv's integrated and lightweight approach does not require any additional hardware and can work with the default hardware assigned to your applications. This means that Hdiv scales with your applications removing the traditional extra hardware cost of the security solutions. Hdiv detects security bugs in the source code before they are exploited, using a runtime dataflow technique to report the file and line number of the vulnerability. -
8
Bugsmirror MASST
Bugsmirror
MASST (Mobile Application Security Suite & Tools) is a unified mobile app security platform designed to detect, protect, and monitor mobile applications across development and runtime. The suite’s Threat Detection layer includes modules such as CodeLock for static analysis across 50+ vulnerability vectors, RunLock for runtime testing and attack simulations, APILock for discovering and securing API endpoints, and ThreatLock for deep red-teaming assessments. The Threat Mitigation layer wraps your mobile apps with protections including Defender (RASP-based real-time shielding), Shield (anti-reverse-engineering and IP-theft protection), and Guard (secure local storage of keys, certificates, and sensitive data via white-box cryptography). The Threat Visibility layer offers the ThreatLens Dashboard for real-time monitoring, analytics, and actionable insights into attacks, anomalies, and app security posture. -
9
Trend Cloud One
Trend Micro
Cloud security simplified with Trend Cloud One security services platform. Save time, gain visibility. Automated deployment and discovery lead to operational efficiencies and accelerated, streamlined compliance. Builder’s choice. You choose the cloud, the platforms, and the tools, and we leverage our turn-key integrations and broad APIs, freeing you to procure the way you want and deploy the way you need. One tool that has the breadth, depth, and innovation required to meet and manage your cloud security needs today and in the future. Cloud-native security delivers new functionalities weekly with no impact on access or experience. Seamlessly complements and integrates with existing AWS, Microsoft® Azure™, VMware®, and Google Cloud™ toolsets. Automate the discovery and protection of public, private, and virtual cloud environments while protecting the network layer. This provides flexibility and simplicity in securing your cloud throughout the migration and expansion process. -
10
DashO
PreEmptive
Professional obfuscation and in-app protection for over 20 years. We invest in threat and protection research so you don't have to, and we constantly update our protection to stay ahead of the arms race. Protecting your app shouldn't require an army of consultants. You can make your first protected build for Android, Web, or Java in just a few minutes, in whatever build environment you use. Our customers love our support, and consistently give it the highest ratings. Whether you're protecting a mature app that's facing new risks or a new app that you haven't released yet, DashO has you covered. Application development teams face an ever-growing set of security threats as apps become more central to business and attackers grow in sophistication. These days, intellectual property theft is just the beginning, apps are also gateways to trade secret theft, customer/user data theft, and to identifying further attack vectors. -
11
Zimperium MAPS
Zimperium
Mobile application risks start in development & persist throughout the app’s entire lifecycle, including when running on an end user’s device. Zimperium’s Mobile Application Protection Suite consists of four products with a centralized dashboard to view threats & create response policies. It is the ONLY unified platform that combines centralized visibility with comprehensive in-app protection, combining both inside-out & outside-in security approaches to help enterprises build & maintain secure mobile apps. zScan: Helps organizations continuously discover and fix compliance, privacy, & security issues prior to being published. zKeyBox: Protect your keys so they cannot be discovered, extracted, or manipulated. zShield: Protects the source code, intellectual property (IP), & data from potential attacks like reverse engineering and code tampering. zDefend: Provides threat visibility & on-device ML-based runtime protection against device, network, phishing, & malware attacks. -
12
OneSpan Mobile Security Suite
OneSpan
Optimize your customers’ mobile experience, protect your customers’ personal data, and reduce fraud with state-of-the-art authentication and mobile application security. Take action to protect your institution, apps, and users against complex mobile threats resulted from a growing number of data breaches. Optimize user experience with transparent mobile app protection and the right amount of security at the right time. Maintain trust without impacting the customer experience through sophisticated mobile app shielding technology, biometric and behavioral authentication, and the ability to step-up authentication only when necessary. Deploy your app to untrusted environments with confidence. With mobile app shielding from OneSpan, your app can proactively defend itself against the most advanced mobile threats from cybercriminals, scams, and hackers. -
13
OneSpan Mobile App Shielding
OneSpan
Empower your mobile app to operate safely in untrusted environments without interrupting the end-user experience. Fortify your app against the latest mobile threats without hindering deployment frequency or speed. Strengthen your app's resistance to intrusion, tampering, reverse-engineering, and malware. Add strong data protection controls to support compliance with regulations such as PSD2, GDPR, and more. Serve more customers – even on jailbroken or rooted devices – while reducing risk. Automate app shielding via integrations with your dev teams’ favorite CI/CD tools. Financial institutions lack visibility into the security status of their customers’ mobile devices. The OneSpan application shielding solution protects a mobile banking app from the inside out. It allows the app to securely operate even in potentially hostile environments, such as jailbroken or rooted iOS and Android devices – and only deny service when absolutely necessary. -
14
Raven
Raven
Raven is a runtime application security platform designed to protect cloud-native applications by operating directly inside the application during execution, rather than relying on external defenses. It provides real-time visibility into how code actually runs, allowing it to understand execution flows, libraries, and function-level behavior in order to detect and stop malicious activity before it occurs. Unlike traditional tools such as WAF or EDR that monitor from the outside, Raven embeds itself within the application, enabling it to prevent exploits, supply chain attacks, and zero-day threats even when no known vulnerability or CVE exists. It continuously monitors runtime behavior, identifies abnormal patterns or misuse of legitimate logic, and responds immediately to block harmful execution. It also helps teams prioritize security efforts by filtering out the majority of irrelevant vulnerabilities and focusing only on those that are truly exploitable. -
15
JSDefender
PreEmptive
Cutting-edge JavaScript obfuscation techniques with control-flow flattening, tamper detection and other in-app protection transforms. We would not send our own unprotected code to a remote service controlled by third parties and we would not expect you to either. JSDefender supports major JavaScript frameworks, runtimes, and bundlers including Angular, Node, React, React Native, Webpack and others. Unlike languages like .NET and Java that are compiled to intermediate, stack-based assembly instructions before being distributed in binary form, JavaScript apps are typically distributed in source form. This means that your code is directly visible to anyone with access to the execution environment (like a browser). So, potential attackers can very easily step through the running code using a debugger built into their browser, or use other tools to statically analyze the code for vulnerabilities. -
16
Dotfuscator
PreEmptive
Application development teams face an ever-growing set of security threats as apps become more central to business and attackers grow in sophistication. These days, intellectual property theft is just the beginning – apps are also gateways to trade secret theft, customer/user data theft, and to identifying further attack vectors. Breaches in any of these areas can cause serious revenue, reputation, and brand damage. Sophisticated app dev organizations know that investing in app protection is good risk management. Basic renaming obfuscation isn’t enough. PreEmptive Protection Dotfuscator for .NET provides many layers of protection: multiple forms of obfuscation (renaming, string encryption, control flow, and more) plus active runtime checks (tamper, debug, root, and more). But it’s not just about protection – we design and test all these layers to be sure that they won’t break your app as the runtime platform evolves.
- Previous
- You're on page 1
- Next
