CheckOps home

Tools directory

B

CheckOps

Bearer CLI

Bearer CLI is a SAST tool that scans source code and analyses data flows to find, filter and prioritise security and privacy risks, with a commercial Bearer Pro from Cycode.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

Bearer is a static application security testing (SAST) tool designed to scan source code and analyse data flows to identify, filter and prioritise security and privacy risks. The open-source Bearer CLI supports Go, Java, JavaScript, TypeScript, PHP, Python and Ruby; Bearer Pro by Cycode adds advanced cross-file analysis and more.

The source code is at Bearer/bearer on GitHub under the Elastic License 2.0 licence, with about 2,800 stars; the most recent commit was on 9 November 2026.

Features

  1. Data-flow analysis: Tracks sensitive data through code.
  2. Privacy focus: Highlights handling of personal and sensitive data.
  3. Built-in rules: Security rules for supported languages.
  4. Custom rules: Write your own.
  5. CI integration: Run in pipelines with report outputs.

Pros

  1. Free to use: Open source under Elastic License 2.0.
  2. Maintained: Commits as recent as 9 November 2026.

Cons

  1. Licence: Elastic License 2.0, which is source-available rather than OSI open source.
  2. Advanced features paid: Cross-file analysis is in Bearer Pro.
curl -sfL https://raw.githubusercontent.com/Bearer/bearer/main/contrib/install.sh | sh
bearer scan .

Resources:

Pricing

Bearer CLI is free under the Elastic License 2.0. Bearer Pro is a commercial product from Cycode; see site for pricing.

  1. Teams with privacy obligations wanting data-flow insights.
  2. Polyglot web teams in the supported languages.
  3. Not a fit if you require an OSI-approved licence.

Conclusion

Bearer CLI combines SAST with a privacy-aware view of data flows.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with Bearer CLI side by side.