Alternatives to Clang Static Analyzer

18.3

Semgrep Code

Semgrep Code is a static application security testing product that scans source code for vulnerabilities and helps developers fix them.

Free planOpen sourceWebAPIExtension

From $15 a month

VisitDetails

27.9

Qodana

Qodana is a static code analysis tool that checks projects from the IDE through CI for code smells, duplication, complexity, vulnerabilities, and license issues.

Free planWebAPIExtension

From $5 a month

VisitDetails

37.5

GitHub CodeQL

GitHub CodeQL is a language and toolchain for analyzing code as data.

Free planWebExtensionLinux

From $30 a month

VisitDetails

4. 4

   Understand

   Understand is a static analysis and code-comprehension tool that builds a cross-referenced model of source code without executing it.

   APIExtensionLinuxmacOS
   7.2From $100 a month
   Visit
5. 5IN

   Infer

   Infer is a free static analyzer that reports potential bugs in source code before it ships.

   Free planWebLinuxmacOSSelf-hosted
   6.7Free plan
   Visit
6. 6CB

   CBMC

   CBMC is a bounded model checker for C and C++ programs, available for Linux, macOS, and Windows.

   Free planLinuxmacOSWindows
   6.5Free plan
   Visit
7. 7

   CppDepend

   CppDepend analyzes C, C++, Java, and Rust codebases to visualize architecture, detect issues, enforce coding standards, and help prevent technical debt.

   LinuxmacOSWindows
   6.3$599 one-time
   Visit
8. 8

   Flawfinder

   Flawfinder is a free tool for finding possible security weaknesses in C and C++ source code.

   Free planLinuxmacOSSelf-hostedWindows
   6.3Free plan
   Visit
9. 9CP

   CPAchecker

   CPAchecker is a configurable software verification tool for analyzing programs.

   Free planLinuxmacOSSelf-hostedWindows
   6.1Free plan
   Visit
10. 10

    PVS-Studio

    PVS-Studio analyzes source code to detect bugs and possible vulnerabilities.

    LinuxmacOSWindows
    6.1
    Visit
11. 11CO

    CodeChecker

    CodeChecker is open-source static analysis infrastructure built on the LLVM and Clang Static Analyzer toolchain.

    WebAPIExtensionLinux
    5.9
    Visit
12. 12FC

    Frama-C

    Frama-C is a plug-in platform for analyzing C programs and checking for bugs.

    LinuxmacOSWindows
    5.9
    Visit
13. 13AS

    Astrée

    Astrée is paid static-analysis software for Linux and Windows that examines C code for possible run-time errors.

    LinuxWindows
    5.8
    Visit
14. 14

    LDRA Tool Suite

    LDRA Tool Suite brings verification, testing, and requirements traceability together for safety-, security-, and mission-critical software development.

    LinuxmacOSSelf-hostedWindows
    5.8
    Visit
15. 15SE

    SeaHorn

    SeaHorn is an open-source framework for analyzing LLVM-based programs, developed mainly for research in automated verification.

    LinuxmacOSSelf-hosted
    5.8
    Visit
16. 16I4

    Imagix 4D

    Imagix 4D helps C, C++, and Java developers understand, document, review, and improve complex source code, including legacy and third-party software.

    LinuxWindows
    5.7
    Visit
17. 17UA

    Ultimate Automizer

    Ultimate Automizer is a free software model checker and a toolchain in the Ultimate program analysis framework.

    WebLinuxWindows
    5.7
    Visit
18. 18TA

    TrustInSoft Analyzer

    TrustInSoft Analyzer is a static-analysis product for detecting memory-safety issues and runtime errors in source code.

    LinuxmacOS
    5.3
    Visit
19. 19AS

    Axivion Suite

    WebLinuxmacOSWindows
    5.2
    Visit
20. 20FS

    Fortify Static Code Analyzer

    Fortify Static Code Analyzer is a paid software product from OpenText for finding security vulnerabilities during application development.

    LinuxSelf-hostedWindows
    5.2
    Visit
21. 21

    Klocwork

    WebLinuxWindows
    5.2
    Visit
22. 22

    Polyspace

    WebLinuxmacOSWindows
    5.2
    Visit
23. 23

    Perforce QAC (formerly Helix QAC)

    WebLinuxWindows
    5.0
    Visit
24. 24PC

    Parasoft C/C++test

    LinuxWindows
    4.7
    Visit

Back to Clang Static Analyzer