DefenseCode ThunderScan® is described as 'SAST (Static Application Security Testing, WhiteBox Testing) solution for performing deep and extensive security analysis of application source code' and is an app. There are eight alternatives to DefenseCode ThunderScan® for a variety of platforms, including Linux, Mac, Windows, Web-based and Android apps. The best DefenseCode ThunderScan® alternative is SonarQube, which is both free and Open Source. Other great apps like DefenseCode ThunderScan® are Coverity Scan, SlowQL, CodeSonar and Opengrep.
SonarQube is an open source quality management platform, dedicated to continuously analyze and measure source code quality, from the portfolio to the method. Static code analysis is available in the "Community Edition" (free / open source) for:
Coverity Scan Static Analysis allows to find and fix defects in your Java, C/C++ or C# open source project for free.
SlowQL is a production-focused offline SQL static analyzer that catches security vulnerabilities, performance regressions, reliability issues, compliance risks, cost inefficiencies, and code quality problems before they reach production.
Improve quality, reduce risk, and ship with confidence. GrammaTech's static analysis SAST tool as part of your secure SDLC identifies bugs that can result in system crashes, unexpected behavior, and security breaches.
We’re excited to introduce Opengrep, an open-source static code analysis engine built to ensure code security testing remains truly open and accessible to everyone. 🚀
Kiuwan Application Security is an end-to-end Appsec platform. Monitoring, action plans and seamless integration within unlocalized teams are but a few of the features offered by Kiuwan.
Semgrep is a fast, open-source, static analysis tool that excels at expressing code standards — without complicated queries — and surfacing bugs early at editor, commit, and CI time. Precise rules look like the code you’re searching; no more traversing abstract syntax trees or...
Qodana is a smart code quality platform by JetBrains best suited for working in teams. It can analyze code written in 60+ languages including Java, JavaScript, TypeScript, PHP, Kotlin, Python, Go, and C#.
Switzerland
United States
Canada
Czechia
EU