CBMC
6.5#6 in c and c++ static analysis toolsFree planFree planLinuxmacOSWindows
VisitCBMC vs GitHub CodeQL
GitHub CodeQL
7.5#1 in git gui clientsFrom $30 a monthFree planWebExtensionLinuxmacOS
VisitWhat both publish
| Fact | CBMC | GitHub CodeQL |
|---|---|---|
| Purpose | CBMC is a bounded model checker for C and C++ programs. | CodeQL is a language and toolchain for code analysis that treats code as data. |
| Supported languages | It supports C89, C99, most of C11/C17, and many compiler extensions from GCC, Clang, and Visual Studio. | CodeQL supports C/C++, C#, Go, Java, Kotlin, JavaScript, TypeScript, Python, Ruby, Rust, Swift, and GitHub Actions workflows. |
CBMC plans
- CBMCFree
GitHub CodeQL plans
- Free for research and open sourceFree
- CodeQL for open source and researchFree
- GitHub Code Security$30 a month
- GitHub Free with CodeQL code scanning—
Pick CBMC if…
CBMC suits developers and verification practitioners working with C or C++ who need checks for memory safety, undefined behavior, or assertions. It is also relevant for users generating coverage-oriented test cases.
Pick GitHub CodeQL if…
CodeQL is for developers and security teams who want query-based code analysis in an IDE, CLI, or CI workflow. Its availability depends on supported languages, operating systems, and repository eligibility.