30 alternatives · from static analysis tools

Alternatives to Qodana

Qodana brings static code analysis into IDEs and CI, covering code smells, duplication, complexity, security vulnerabilities, and license concerns. Teams can compare findings against a baseline, use quality gates to block pipelines, and apply taint analysis to risks such as SQL injection and path traversal. Its IDE and CI integrations and cloud or self-hosted deployments support a range of development setups; paid editions cover more than 60 languages. A different tool may…

18.0

DeepSource

DeepSource is an AI code review platform for teams writing code with AI.

Free planWebAPILinux

From $30 a month

Visit Details

27.5

GitHub CodeQL

GitHub CodeQL is a language and toolchain for analyzing code as data.

Free planWebExtensionLinux

From $30 a month

Visit Details

37.4

Cppcheck

Cppcheck is a static analysis tool for C and C++ code.

Free planOpen sourceLinuxmacOSSelf-hosted

Free plan

Visit Details

4
Gitar
Gitar is a code change verification agent for teams that want pull requests reviewed and CI failures investigated.
Free planWebAPISelf-hosted
7.2From $20 a month
Visit
5
gosec
gosec is a free security checker that scans Go source code for potential problems.
Free planOpen sourceAPILinuxmacOSSelf-hosted
7.2Free plan
Visit
6
Understand
Understand is a static analysis and code-comprehension tool that builds a cross-referenced model of source code without executing it.
APIExtensionLinuxmacOS
7.2From $100 a month
Visit
7
Codacy
Codacy is a cloud-based platform for engineering teams working on code quality, security, and AI coding standards.
Free planWebExtension
7.0From $18 a year
Visit
8
CodeScene
CodeScene is software for examining code health and how engineering teams work, helping teams decide which technical debt to address.
Free planWebAPILinuxSelf-hosted
7.0From €18 a month
Visit
9
PMD
PMD is a free, extensible static code analyzer that checks source code for programming flaws such as unused variables, empty catch blocks, and unnecessary object creation.
Free planLinuxmacOSSelf-hostedWindows
6.8Free plan
Visit
10
CAST Imaging
WebAPILinuxSelf-hosted
6.7From $2 a year
Visit
11
Infer
Infer is a free static analyzer that reports potential bugs in source code before it ships.
Free planWebLinuxmacOSSelf-hosted
6.7Free plan
Visit
12
Flawfinder
Flawfinder is a free tool for finding possible security weaknesses in C and C++ source code.
Free planLinuxmacOSSelf-hostedWindows
6.3Free plan
Visit
13
Scrutinizer CI
WebAPIExtension
6.3From €49 a month
Visit
14
Clang Static Analyzer
Clang Static Analyzer finds selected bugs in C, C++, and Objective-C programs by using symbolic execution to examine execution paths across function calls.
Free planLinuxmacOSWindows
6.2Free plan
Visit
15
Joern
Joern analyzes source code, bytecode, and binary code to support vulnerability discovery and static program analysis research.
APILinuxmacOSSelf-hosted
6.2
Visit
16
NDepend
NDepend analyzes .NET code for quality and security, serving developers, architects, and executives.
APIExtensionLinuxmacOS
6.2
Visit
17
PVS-Studio
PVS-Studio analyzes source code to detect bugs and possible vulnerabilities.
LinuxmacOSWindows
6.1
Visit
18
SpotBugs
SpotBugs is a free, open-source static analysis tool for finding likely errors in Java code.
Free planLinuxmacOSWindows
6.1Free plan
Visit
19
Brakeman
Brakeman is a static analysis scanner for Ruby on Rails application code.
Free planLinuxSelf-hosted
6.0Free plan
Visit
20
Coverity Scan
Coverity Scan is a free cloud static-analysis service for registered open source projects.
Free planWebAPI
6.0Free plan
Visit
21
JArchitect
JArchitect helps Java architects and developers examine code structure, define design rules, review code, and compare versions.
APILinuxmacOSSelf-hosted
6.0
Visit
22
Unused CSS Finder
Unused CSS Finder is a free web tool that identifies CSS selectors that do not match elements in supplied HTML, then produces cleaned CSS.
Free planWeb
6.0Free plan
Visit
23
Black Duck Coverity
Black Duck Coverity is a paid static analysis tool for finding security vulnerabilities and code quality defects in source code before software ships.
WebLinuxmacOSSelf-hosted
5.9
Visit
24
CodeChecker
CodeChecker is open-source static analysis infrastructure built on the LLVM and Clang Static Analyzer toolchain.
WebAPIExtensionLinux
5.9
Visit
25
LDRA Tool Suite
LDRA Tool Suite brings verification, testing, and requirements traceability together for safety-, security-, and mission-critical software development.
LinuxmacOSSelf-hostedWindows
5.8
Visit
26
OpenText Fortify SAST
WebLinuxmacOSWindows
5.3
Visit
27
Axivion Suite
WebLinuxmacOSWindows
5.2
Visit
28
Klocwork
WebLinuxWindows
5.2
Visit
29
Kythe
APILinuxmacOSSelf-hosted
5.2
Visit
30
Polyspace
WebLinuxmacOSWindows
5.2
Visit

Back to Qodana