Static Code Analysis Tools

Ranking methodology

In development — no version effective yet.

Decision archetype: technical · Scores are category-relative (P-01) and commercial relationships never affect rank (P-04).

Tools (3)

Application security testing platform combining SAST, DAST, and software composition analysis.

CoverityBlack Duck

Static application security testing tool that detects defects and security vulnerabilities in compiled source code.

SonarQubeSonarSource

Open source

Static analysis platform that inspects code for bugs, vulnerabilities, and code smells across many languages.