17.9
Qodana is a static code analysis tool that checks projects from the IDE through CI for code smells, duplication, complexity, vulnerabilities, and license issues.
Free planWebAPIExtension
Alternatives to CodeQL for Visual Studio Code
27.0
Codacy is a cloud-based platform for engineering teams working on code quality, security, and AI coding standards.
Free planWebExtension
36.8
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Free planWebAPILinux
- 4
Kiuwan Code Security
Kiuwan Code Security is a static application security testing tool that finds and prioritizes vulnerabilities in source code and offers remediation…
WebAPILinuxmacOS6.8From $49 a month - 5
JFrog Xray
JFrog Xray is a paid software composition analysis tool for finding, prioritizing, and remediating vulnerabilities and license compliance issues in…
WebAPISelf-hosted6.2From $950 a month - 6
PVS-Studio
PVS-Studio analyzes source code to detect bugs and possible vulnerabilities.
LinuxmacOSWindows6.1 - 75.5
- 8
Fortify Static Code Analyzer
Fortify Static Code Analyzer is a paid software product from OpenText for finding security vulnerabilities during application development.
LinuxSelf-hostedWindows5.2 - 9
Klocwork
WebLinuxWindows5.2 - 10
Veracode SCA
WebLinuxmacOSWindows5.2 - 11
Tencent Cloud Code Analysis (TCA) IDE Plugins
WebLinuxmacOSWindows5.0 - 124.9
- 13
Snyk IDE Plugins
LinuxmacOSWindows4.8 - 14
Black Duck Code Sight
LinuxmacOSWindows4.7 - 15
GitLab for VS Code
LinuxmacOSWindows4.7 - 16
Corridor
Web4.6 - 174.3
- 184.3