Cppcheck is described as 'Static analysis tool for C/C++ code. Unlike C/C++ compilers and many other analysis tools it does not detect syntax errors in the code. Cppcheck primarily detects the types of bugs that the compilers normally do not detect' and is an app in the development category. There are more than 10 alternatives to Cppcheck for a variety of platforms, including Linux, Windows, Mac, Web-based and Visual Studio Code apps. The best Cppcheck alternative is SonarQube, which is both free and Open Source. Other great apps like Cppcheck are Shellcheck, Coverity Scan, PVS-Studio and Flawfinder.
VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL. It has a few features that should hopefully make it useful to anyone conducting code security reviews, particularly where time is at a premium:
Qodana is a smart code quality platform by JetBrains best suited for working in teams. It can analyze code written in 60+ languages including Java, JavaScript, TypeScript, PHP, Kotlin, Python, Go, and C#.
Qodana is the most popular Self-Hosted alternative to Cppcheck.
Facebook Infer is a static analysis tool - if you give Infer some Objective-C, Java, or C code, it produces a list of potential bugs.
Liverpool Data Research Associates (LDRA) is a provider of software analysis, test and requirements traceability tools for the Public and Private sectors and a pioneer in static and dynamic software analysis.
Parasoft’s C/C++test is the fully-integrated software testing solution for embedded safety-critical industries. Its automated software testing capabilities are also made for today’s high-velocity Agile DevOps environments.
Czechia
EU
United States
United Kingdom