SonarQube is described as 'Open source quality management platform, dedicated to continuously analyze and measure source code quality, from the portfolio to the method. Static code analysis vailable in the "Community Edition" (free / open source) for:' and is an app in the development category. There are more than 25 alternatives to SonarQube for a variety of platforms, including Web-based, Windows, Linux, SaaS and Mac apps. The best SonarQube alternative is Codacy. It's not free, so if you're looking for a free alternative, you could try Codacy or Shellcheck. Other great apps like SonarQube are Coverity Scan, SlowQL, Flawfinder and SAST Online.
Exlint is a an open source project that enables developers to centralize their open source coding standards and policies, so that configuring repositories becomes as easy as typing one command.
Parasoft’s C/C++test is the fully-integrated software testing solution for embedded safety-critical industries. Its automated software testing capabilities are also made for today’s high-velocity Agile DevOps environments.
AI-powered code review and release management: security and compliance scanning, documentation generation, and observability instrumentation, from PR to production.
Improve quality, reduce risk, and ship with confidence. GrammaTech's static analysis SAST tool as part of your secure SDLC identifies bugs that can result in system crashes, unexpected behavior, and security breaches.
DefenseCode ThunderScan® is a SAST (Static Application Security Testing, WhiteBox Testing) solution for performing deep and extensive security analysis of application source code.
Qodana is a smart code quality platform by JetBrains best suited for working in teams. It can analyze code written in 60+ languages including Java, JavaScript, TypeScript, PHP, Kotlin, Python, Go, and C#.
Examines codebases for secrets, dependency risks, and unsafe API keys, checks running apps for TLS and security headers, and analyzes Supabase, Firebase, and Firestore configs for exposure—then provides a single grade, report, and actionable fixes.
AI design review for UI code — scores every pull request 0–100 and posts concrete fixes for accessibility, typography, spacing, and visual craft.
Astrée statically analyzes whether the programming language is used correctly and whether there can be any runtime errors during any execution in any environment. This covers any use of C or C++ that, according to the selected language standard, has undefined behavior or...
Code analysis tool, including breakdown of developer contributions, and a clear breakdown of different types of problems with trends over time.
Kiuwan Application Security is an end-to-end Appsec platform. Monitoring, action plans and seamless integration within unlocalized teams are but a few of the features offered by Kiuwan.
Israel
United States
United Kingdom
Czechia
EU
Belgium
Germany
