Semgrep Alternatives

Apps similar to Semgrep include SonarQube, which is open source with a free version. Other options are Codacy, Shellcheck, Cppcheck and Coverity Scan. Code Reviews like Semgrep are a crowded field, with more than 25 alternatives for the web, Windows, Linux, Mac and self-hosting.

Copy a direct link to this comment to your clipboard
Alternatives
Semgrep alternatives page was last updated

Alternatives list

  1. PhpMetrics icon
     1 like

    PhpMetrics provides metrics about PHP project and classes, with beautiful and readable HTML report.

    Cost / License

    • Free
    • Open Source (MIT)

    Platforms

    • Self-Hosted
    Good alternative?
     
  2. DeepSource icon
     1 like

    Find and fix bug risks, anti-patterns, performance issues, security flaws automatically during code reviews. In addition, DeepSource automatically fixes some of the most commonly occurring issues. It works for Python, Go, Ruby, and JavaScript.

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Online
    • Software as a Service (SaaS)
    • CircleCI
    • Bitbucket
    • GitHub
    • Travis CI
    • GitLab
    Good alternative?
     
  3. Your app works, but is it secure and efficient? Security vulnerabilities, exposed credentials, architectural flaws, and technical debt can lurk unnoticed. Meet Reactable - a platform to assess your codebase readiness.

    3 Reactable by Reactable.io alternatives

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Online
    Good alternative?
     
  4. ProjectCodeMeter Is a professional software tool for project managers to measure and estimate the Time, Cost, Complexity, Quality Metrics and Maintainability of software projects as well as Development Team Productivity by analyzing their source code.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Windows
    Good alternative?
     
  5. Qualor icon
     1 like

    Open-source, self-hosted code quality platform: a SonarQube alternative without lines-of-code licensing. Qualor runs existing open-source analyzers, tracks their issues across commits, measures coverage, duplication and complexity, and applies a quality gate to new code.

    Cost / License

    • Freemium
    • Open Source (MIT)

    Platforms

    • Self-Hosted
    • Docker
    • Linux
    • Kubernetes
    Good alternative?
     
  6. Semmle icon
     1 like

    Code analysis tool, including breakdown of developer contributions, and a clear breakdown of different types of problems with trends over time.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Windows
    • Linux
    Good alternative?
     
  7. Teamscale icon
     1 like

    Teamscale analyzes the quality of your code. Analyze your code with a variety of static and dynamic analyses to identify specific maintainability constraints and avoid unexpected maintenance costs in the future.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Mac
    • Windows
    • Linux
    Good alternative?
     
  8. VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL. It has a few features that should hopefully make it useful to anyone conducting code security reviews, particularly where time is at a premium:

    Cost / License

    Platforms

    • Windows
    Good alternative?
     
  9. Codegrip icon
     Like

    Codegrip is an automated code review SaaS platform that helps developers to save time in code reviews and to tackle technical debt efficiently.

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Software as a Service (SaaS)
    Good alternative?
     
  10. Zof CLI icon
     Like

    Zof CLI is an open-source command-line tool for inspecting software changes locally. It checks changed source lines for a documented set of static risks and reports findings with severity, file and line information.

    Cost / License

    Platforms

    • Linux
    • Mac
    Good alternative?
     
  11. Opengrep icon
     Like

    We’re excited to introduce Opengrep, an open-source static code analysis engine built to ensure code security testing remains truly open and accessible to everyone. 🚀

    Cost / License

    Platforms

    • Mac
    • Linux
    Good alternative?
     
You are at page 2 of Semgrep alternatives