SonarQube is an open source quality management platform, dedicated to continuously analyze and measure source code quality, from the portfolio to the method. Static code analysis is available in the "Community Edition" (free / open source) for:
Switzerland
Automatically reviews code style, security, duplication, complexity, and coverage on every change while tracking code quality throughout your sprints.
Portugal
EU
SlowQL is a production-focused offline SQL static analyzer that catches security vulnerabilities, performance regressions, reliability issues, compliance risks, cost inefficiencies, and code quality problems before they reach production.
Canada
Semgrep is a fast, open-source, static analysis tool that excels at expressing code standards — without complicated queries — and surfacing bugs early at editor, commit, and CI time. Precise rules look like the code you’re searching; no more traversing abstract syntax trees or...
SQuORE is a business intelligence and static code analysis tool for software projects. It gathers information from different artefacts types (e.g. source code, test results, bug tracking system) and tools (reads outputs of Checkstyle, PMD, FindBugs, Polyspace, Coverity or...
Code analysis tool, including breakdown of developer contributions, and a clear breakdown of different types of problems with trends over time.
Code Buster reports dependency wiring, dead code, cycles, duplication, complexity, architecture-policy violations, feature flags, security and style heuristics, quality scores, and remediation plans.
Improve quality, reduce risk, and ship with confidence. GrammaTech's static analysis SAST tool as part of your secure SDLC identifies bugs that can result in system crashes, unexpected behavior, and security breaches.
United States
SideCI is an automated code reviewing tool with GitHub. Speed up your code review and development cycle to improve productivity without requiring engineers to spend valuable time.
Japan
AI-powered GitHub repository health analysis — get instant health scores, risk signals, and contributor insights for any repo from a single URL.
United Kingdom
Netherlands
