There are various tools available for application security testing, including static code analysis tools like Veracode and SonarQube, dynamic security testing tools like Burp Suite and OWASP ZAP, interactive application security testing (IAST) tools like Contrast Security, and runtime application self-protection (RASP) tools like Sqreen and Prevoty. These tools can help identify vulnerabilities, detect security flaws, and optimize application security.