Frama-C
5.9#13 in c and c++ static analysis toolsLinuxmacOSWindows
VisitFrama-C vs Semgrep Code
Semgrep Code
8.3#1 in sast toolsFrom $15 a monthFree planWebAPIExtensionLinux
VisitWhat both publish
| Fact | Frama-C | Semgrep Code |
|---|---|---|
| Integrations | WP uses SMT solvers including Alt-Ergo, CVC5, and Z3. | Supported workflow connections include GitHub, GitLab, Bitbucket, Jenkins, CircleCI, Azure, Buildkite, HackerOne, Slack, email, webhooks, VS Code and IntelliJ. |
| Purpose | Frama-C is a framework for modular analysis of C programs using collaborative program analysis plug-ins. | Semgrep Code is a static application security testing product that finds code vulnerabilities and helps developers fix them. |
Frama-C plans
No prices published.
Semgrep Code plans
- Free EditionFree
- Teams Secrets$15 a month
- Teams — Code$30 a month
- Teams Code$30 a month
- Teams Supply Chain$30 a month
- EnterprisePriced on request
Pick Frama-C if…
Frama-C may suit C developers, educators, and researchers who need static analysis or formal verification. Its intended uses also include industrial work on safety- and security-critical software.
Pick Semgrep Code if…
Semgrep Code suits development teams looking for source-code vulnerability scanning within pull request, IDE or CI workflows. The listed Free Edition is for teams within its repository and contributor limits; larger teams can consider the paid tiers.