We ran four security platforms on the same 100 repositories. Here is the raw data on detection rates, false positive rates, and developer time.
The Debuggix team conducted a technical comparison across 100 public GitHub repositories.
We ran four security platforms on the same codebases: Snyk, Semgrep, GitHub Advanced Security, and Debuggix. Each platform was configured with default settings to simulate how a typical developer would use it.
We measured three metrics: detection breadth (what vulnerabilities were found), false positive rate (how much noise was produced), and developer time required (how long to triage findings to actionable issues).
Here is the raw data.
