Alternatives to NDepend

18.0

DeepSource

DeepSource is an AI code review platform for teams writing code with AI.

Free planWebAPILinux

From $30 a month

VisitDetails

27.9

Qodana

Qodana is a static code analysis tool that checks projects from the IDE through CI for code smells, duplication, complexity, vulnerabilities, and license issues.

Free planWebAPIExtension

From $5 a month

VisitDetails

37.5

GitHub CodeQL

GitHub CodeQL is a language and toolchain for analyzing code as data.

Free planWebExtensionLinux

From $30 a month

VisitDetails

4. 4

   Cppcheck

   Cppcheck is a static analysis tool for C and C++ code.

   Free planOpen sourceLinuxmacOSSelf-hostedWindows
   7.4Free plan
   Visit
5. 5

   Gitar

   Gitar is a code change verification agent for teams that want pull requests reviewed and CI failures investigated.

   Free planWebAPISelf-hosted
   7.2From $20 a month
   Visit
6. 6GO

   gosec

   gosec is a free security checker that scans Go source code for potential problems.

   Free planOpen sourceAPILinuxmacOSSelf-hosted
   7.2Free plan
   Visit
7. 7

   Understand

   Understand is a static analysis and code-comprehension tool that builds a cross-referenced model of source code without executing it.

   APIExtensionLinuxmacOS
   7.2From $100 a month
   Visit
8. 8

   Codacy

   Codacy is a cloud-based platform for engineering teams working on code quality, security, and AI coding standards.

   Free planWebExtension
   7.0From $18 a year
   Visit
9. 9

   CodeScene

   CodeScene is software for examining code health and how engineering teams work, helping teams decide which technical debt to address.

   Free planWebAPILinuxSelf-hosted
   7.0From €18 a month
   Visit
10. 10PM

    PMD

    PMD is a free, extensible static code analyzer that checks source code for programming flaws such as unused variables, empty catch blocks, and unnecessary object creation.

    Free planLinuxmacOSSelf-hostedWindows
    6.8Free plan
    Visit
11. 11

    CAST Imaging

    WebAPILinuxSelf-hosted
    6.7From $2 a year
    Visit
12. 12IN

    Infer

    Infer is a free static analyzer that reports potential bugs in source code before it ships.

    Free planWebLinuxmacOSSelf-hosted
    6.7Free plan
    Visit
13. 13

    Flawfinder

    Flawfinder is a free tool for finding possible security weaknesses in C and C++ source code.

    Free planLinuxmacOSSelf-hostedWindows
    6.3Free plan
    Visit
14. 14SC

    Scrutinizer CI

    WebAPIExtension
    6.3From €49 a month
    Visit
15. 15CS

    Clang Static Analyzer

    Clang Static Analyzer finds selected bugs in C, C++, and Objective-C programs by using symbolic execution to examine execution paths across function calls.

    Free planLinuxmacOSWindows
    6.2Free plan
    Visit
16. 16

    Joern

    Joern analyzes source code, bytecode, and binary code to support vulnerability discovery and static program analysis research.

    APILinuxmacOSSelf-hosted
    6.2
    Visit
17. 17

    PVS-Studio

    PVS-Studio analyzes source code to detect bugs and possible vulnerabilities.

    LinuxmacOSWindows
    6.1
    Visit
18. 18SP

    SpotBugs

    SpotBugs is a free, open-source static analysis tool for finding likely errors in Java code.

    Free planLinuxmacOSWindows
    6.1Free plan
    Visit
19. 19BR

    Brakeman

    Brakeman is a static analysis scanner for Ruby on Rails application code.

    Free planLinuxSelf-hosted
    6.0Free plan
    Visit
20. 20CS

    Coverity Scan

    Coverity Scan is a free cloud static-analysis service for registered open source projects.

    Free planWebAPI
    6.0Free plan
    Visit
21. 21JA

    JArchitect

    JArchitect helps Java architects and developers examine code structure, define design rules, review code, and compare versions.

    APILinuxmacOSSelf-hosted
    6.0
    Visit
22. 22UC

    Unused CSS Finder

    Unused CSS Finder is a free web tool that identifies CSS selectors that do not match elements in supplied HTML, then produces cleaned CSS.

    Free planWeb
    6.0Free plan
    Visit
23. 23

    Black Duck Coverity

    Black Duck Coverity is a paid static analysis tool for finding security vulnerabilities and code quality defects in source code before software ships.

    WebLinuxmacOSSelf-hosted
    5.9
    Visit
24. 24CO

    CodeChecker

    CodeChecker is open-source static analysis infrastructure built on the LLVM and Clang Static Analyzer toolchain.

    WebAPIExtensionLinux
    5.9
    Visit
25. 25

    LDRA Tool Suite

    LDRA Tool Suite brings verification, testing, and requirements traceability together for safety-, security-, and mission-critical software development.

    LinuxmacOSSelf-hostedWindows
    5.8
    Visit
26. 26OF

    OpenText Fortify SAST

    WebLinuxmacOSWindows
    5.3
    Visit
27. 27AS

    Axivion Suite

    WebLinuxmacOSWindows
    5.2
    Visit
28. 28

    Klocwork

    WebLinuxWindows
    5.2
    Visit
29. 29KY

    Kythe

    APILinuxmacOSSelf-hosted
    5.2
    Visit
30. 30

    Polyspace

    WebLinuxmacOSWindows
    5.2
    Visit

Back to NDepend