17.9
Qodana is a static code analysis tool that checks projects from the IDE through CI for code smells, duplication, complexity, vulnerabilities, and license issues.
Free planWebAPIExtension
Alternatives to Klocwork
27.4
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Free planWebAPIExtension
37.0
Codacy is a cloud-based platform for engineering teams working on code quality, security, and AI coding standards.
Free planWebExtension
- 4
Kiuwan Code Security
Kiuwan Code Security is a static application security testing tool that finds and prioritizes vulnerabilities in source code and offers remediation…
WebAPILinuxmacOS6.8From $49 a month - 5
Semgrep AppSec Platform
Free planWeb6.4From $15 a month - 6
JFrog Xray
JFrog Xray is a paid software composition analysis tool for finding, prioritizing, and remediating vulnerabilities and license compliance issues in…
WebAPISelf-hosted6.2From $950 a month - 7
PVS-Studio
PVS-Studio analyzes source code to detect bugs and possible vulnerabilities.
LinuxmacOSWindows6.1 - 85.5
- 9
Fortify Static Code Analyzer
Fortify Static Code Analyzer is a paid software product from OpenText for finding security vulnerabilities during application development.
LinuxSelf-hostedWindows5.2 - 10
Veracode SCA
WebLinuxmacOSWindows5.2 - 11
Tencent Cloud Code Analysis (TCA) IDE Plugins
WebLinuxmacOSWindows5.0 - 12
Snyk IDE Plugins
LinuxmacOSWindows4.8 - 13
Black Duck Code Sight
LinuxmacOSWindows4.7 - 14
CodeQL for Visual Studio Code
LinuxmacOSWindows4.7 - 15
GitLab for VS Code
LinuxmacOSWindows4.7 - 16
Corridor
Web4.6 - 174.3
- 184.3