17.9
Qodana is a static code analysis tool that checks projects from the IDE through CI for code smells, duplication, complexity, vulnerabilities, and license issues.
Free planWebAPIExtension
Alternatives to OWASP IDE-VulScanner
27.4
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Free planWebAPIExtension
37.0
Codacy is a cloud-based platform for engineering teams working on code quality, security, and AI coding standards.
Free planWebExtension
- 4
Kiuwan Code Security
Kiuwan Code Security is a static application security testing tool that finds and prioritizes vulnerabilities in source code and offers remediation…
WebAPILinuxmacOS6.8From $49 a month - 5
Semgrep AppSec Platform
Free planWeb6.4From $15 a month - 6
JFrog Xray
JFrog Xray is a paid software composition analysis tool for finding, prioritizing, and remediating vulnerabilities and license compliance issues in…
WebAPISelf-hosted6.2From $950 a month - 7
PVS-Studio
PVS-Studio analyzes source code to detect bugs and possible vulnerabilities.
LinuxmacOSWindows6.1 - 85.5
- 9
Fortify Static Code Analyzer
Fortify Static Code Analyzer is a paid software product from OpenText for finding security vulnerabilities during application development.
LinuxSelf-hostedWindows5.2 - 10
Klocwork
WebLinuxWindows5.2 - 11
Veracode SCA
WebLinuxmacOSWindows5.2 - 12
Tencent Cloud Code Analysis (TCA) IDE Plugins
WebLinuxmacOSWindows5.0 - 13
Snyk IDE Plugins
LinuxmacOSWindows4.8 - 14
Black Duck Code Sight
LinuxmacOSWindows4.7 - 15
CodeQL for Visual Studio Code
LinuxmacOSWindows4.7 - 16
GitLab for VS Code
LinuxmacOSWindows4.7 - 17
Corridor
Web4.6 - 184.3