17.4
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Free planWebAPIExtension
Alternatives to Qodana
Qodana brings static code analysis into IDEs and CI, covering code smells, duplication, complexity, security vulnerabilities, and license concerns. Teams can compare findings against a baseline, use quality gates to block pipelines, and apply taint analysis to risks such as SQL injection and path traversal. Its IDE and CI integrations and cloud or self-hosted deployments support a range of development setups; paid editions cover more than 60 languages. A different tool may…
27.0
Codacy is a cloud-based platform for engineering teams working on code quality, security, and AI coding standards.
Free planWebExtension
36.8
Kiuwan Code Security is a static application security testing tool that finds and prioritizes vulnerabilities in source code and offers remediation…
WebAPILinux
- 4
Semgrep AppSec Platform
Free planWeb6.4From $15 a month - 5
JFrog Xray
JFrog Xray is a paid software composition analysis tool for finding, prioritizing, and remediating vulnerabilities and license compliance issues in…
WebAPISelf-hosted6.2From $950 a month - 6
PVS-Studio
PVS-Studio analyzes source code to detect bugs and possible vulnerabilities.
LinuxmacOSWindows6.1 - 75.5
- 8
Fortify Static Code Analyzer
Fortify Static Code Analyzer is a paid software product from OpenText for finding security vulnerabilities during application development.
LinuxSelf-hostedWindows5.2 - 9
Klocwork
WebLinuxWindows5.2 - 10
Veracode SCA
WebLinuxmacOSWindows5.2 - 11
Tencent Cloud Code Analysis (TCA) IDE Plugins
WebLinuxmacOSWindows5.0 - 12
Snyk IDE Plugins
LinuxmacOSWindows4.8 - 13
Black Duck Code Sight
LinuxmacOSWindows4.7 - 14
CodeQL for Visual Studio Code
LinuxmacOSWindows4.7 - 15
GitLab for VS Code
LinuxmacOSWindows4.7 - 16
Corridor
Web4.6 - 174.3
- 184.3