Bearer CLI: Free, Source-Available Code Security Scanning Tool (SAST)
Help Net Security, Monday, October 19th, 2026
Bearer CLI is a free SAST scanner that ranks code flaws by the sensitive data they touch and can produce GDPR privacy reports.
Bearer CLI is a free static application security testing tool that scans source code and prioritizes findings by the sensitive data flowing through the affected code paths, so triage starts with flaws that could expose data.
Built-in rules cover the OWASP Top 10 and CWE Top 25.
It can also generate a privacy report identifying more than 120 data types and the components that handle them, including databases and third-party APIs, as evidence for privacy impact assessments and GDPR records.
It supports Go, Java, JavaScript, TypeScript, PHP, Python and Ruby under the Elastic License 2.0, which restricts offering it as a hosted service.