---
updatedAt: 2026-08-18T07:54:05.000Z
agentTools:
  siteIndex: https://docs.jfrog.com/llms.txt
  projectIndex: https://docs.jfrog.com/security/llms.txt
---

# IDEs

<Callout icon="📘" theme="info">
  Local SAST _MCP is available with the Unified Security Bundle or the Ultimate Security Bundle_
</Callout>

This section provides documentation on integrating JFrog Security with popular IDEs. By embedding security analysis directly into the development workflow, developers can identify vulnerabilities, misconfigurations, and exposed secrets in real time. The guides cover installation, setup, and how to leverage JFrog's advanced security features for seamless, in-editor security scanning and remediation.

### Before You Begin

It is essential that you:

* Meet the [system requirements](https://docs.jfrog.com/security/docs/source-code#system-requirements)

### Key Security Capabilities

* Software Composition Analysis (SCA) with Contextual Analysis
* Secrets Detection and Token Validation
* Infrastructure as Code (IaC) Scanning
* Static Application Security Testing (SAST)

### Choosing Between JFrog Extension, JFrog SAST Extension, and JFrog SAST MCP

#### Use JFrog Extension

Use JFrog extension if you want the full security experience—including **SCA, Secrets, IaC**, **Contextual Analysis**, and **SAST** and have the ability to view all findings, rerun scans, and get a richer UI. This setup is recommended for ongoing, in-depth use.

#### Use JFrog SAST Extension

Use [JFrog SAST Extension for VS Code](https://docs.jfrog.com/security/docs/visual-studio-code-1#jfrog-sast-extension-for-vs-code) if you want a dedicated SAST triage experience with a priority dashboard, data flow visualization, suppression workflows, findings baseline, and SARIF import/export. This extension is focused exclusively on SAST and runs independently from the main JFrog Extension.

#### Use JFrog SAST MCP

Use [Local SAST MCP](https://docs.jfrog.com/security/docs/local-sast-mcp) if you're looking for a quick and simple experience focused only on **SAST** findings, and already have your IDE AI assistant installed. This approach requires MCP setup.