Static Analysis

SonarCloud

Code Security Scanning

Cloud-based code analysis service detecting bugs, vulnerabilities, and code smells in projects hosted on GitHub and other platforms.

SonarQube

Quality Inspection Software

SonarQube is an open-source platform for continuous code quality inspection with static analysis for bugs, vulnerabilities, and code smells.

Code Sight

Software

Synopsys' IDE plugin for developers delivering security and quality feedback during development.

Open source static analysis security vulnerability scanner specifically for Ruby on Rails applications.

Veracode

Code Security Scanning

Application security platform providing SAST, DAST, SCA, and manual penetration testing in a single cloud-based solution.

Data Theorem

Software

API, web, mobile, and cloud application security testing platform with automated runtime protection.

Semgrep

Cybersecurity

Semgrep is a fast, open-source static analysis tool for finding bugs and security vulnerabilities in code, with support for 30+ languages and integration into CI/CD pipelines for automated s...

Coverity

Static Application Security Testing

Enterprise static analysis tool by Synopsys that identifies critical defects and security vulnerabilities in code.

Cyfrin

Code Security Scanning

Smart contract security platform offering audits, developer education, and the Aderyn open-source analyzer.

Psalm

Code Quality

Open source static analysis tool for PHP finding type-related bugs and improving code quality in large codebases.

Fortify

Code Security Scanning

OpenText application security tool providing static and dynamic analysis, SCA, and runtime protection for enterprise software.