SonarQube is an open source quality management platform, dedicated to continuously analyze and measure source code quality, from the portfolio to the method. Static code analysis is available in the "Community Edition" (free / open source) for:
Switzerland
Automatically reviews code style, security, duplication, complexity, and coverage on every change while tracking code quality throughout your sprints.
Portugal
EU
SlowQL is a production-focused offline SQL static analyzer that catches security vulnerabilities, performance regressions, reliability issues, compliance risks, cost inefficiencies, and code quality problems before they reach production.
Canada
Semgrep is a fast, open-source, static analysis tool that excels at expressing code standards — without complicated queries — and surfacing bugs early at editor, commit, and CI time. Precise rules look like the code you’re searching; no more traversing abstract syntax trees or...
Code Climate’s engineering process insights and automated code review for GitHub and GitHub Enterprise help you ship better software, faster.
United States
Eureka DevSecOps helps lean software teams operationalize AppSec without adding another disconnected tool. Built by leaders behind OWASP ASVS and SPVS, Eureka helps teams understand how exploitable weaknesses connect across attack paths so they can prioritize the issues most...
Canada
Qodana is a smart code quality platform by JetBrains best suited for working in teams. It can analyze code written in 60+ languages including Java, JavaScript, TypeScript, PHP, Kotlin, Python, Go, and C#.
codebeat collects the results of code analysis into a single, real-time report that presents all project stakeholders with information required to identify code smells, security holes and improve the overall code quality of their project.
Code Buster reports dependency wiring, dead code, cycles, duplication, complexity, architecture-policy violations, feature flags, security and style heuristics, quality scores, and remediation plans.
DefenseCode ThunderScan® is a SAST (Static Application Security Testing, WhiteBox Testing) solution for performing deep and extensive security analysis of application source code.
United Kingdom
SideCI is an automated code reviewing tool with GitHub. Speed up your code review and development cycle to improve productivity without requiring engineers to spend valuable time.
Japan
Netherlands
Czechia
