Best Static Code Analysis Software

Products Buyer's Guide
9.0
GuardRails
★★★★★

GuardRails

GuardRails empowers developers to find, fix, and prevent security vulnerabilities in their web and mobile applications.

Security checks integrated into pull requests - User in Computer Software

Ease of use
Support
Ease of Setup

Languages supported: English

8.6
Prepros
★★★★★

Prepros

Prepros can compile almost all preprocessing languages like Sass, Less, Stylus, Cssnext, Jade/Pug, Markdown, Slim, Coffeescript etc.

The best cross-platform web compilation app - Kaitlyn C.

Ease of use
Support
Ease of Setup
8.0
CodeSonar
★★★★★

CodeSonar

CodeSonar, GrammaTech's flagship static analysis SAST tool, identifies bugs that can result in system crashes, unexpected behavior, and security breaches.

Decent Tool - Rohit M.

Ease of use
Support
Ease of Setup
7.6
Coach
★★★★★

Coach

Coach is a revolutionary RPA code reviewer that will help and guide you in all your RPA implementations. By simply dragging your UiPath project into Coach, you are connected to the Roboyo Knowledge Base which gives you an explanation of each best practice as it is evaluated in real time. This allows developers to be trained as they go along, speeding up the RPA learning curve. Coach is also configurable which allows you to enable and disable ...

From an RPA Developer's perspective - Divyansh G.

Ease of use
Support
Ease of Setup

Languages supported: German, English, Spanish

7.0
bugScout
★★★★★

bugScout

bugScout is a SAST platform for detecting vulnerabilities in application and website source codes.

Scouting Vulnerabilities - Consultant in Computer & Network Security

Ease of use
Support
Ease of Setup

Languages supported: English, Portuguese, Spanish

6.0
OzCode Magical Debugging
★★★★★

OzCode Magical Debugging

Offers a visual and insightful Debugging-as-a-Service that cuts debugging time by half so developers can concentrate on crafting high-quality code.

Visual Studio Debugging - How it should be! - Steve D.

Ease of use
Support
Ease of Setup

Languages supported: English

8.4
Pylint
★★★★★

Pylint

Pylint is a tool that checks for errors in Python code, tries to enforce a coding standard and looks for bad code smells.

Pylint quickly catches error in your python code - Ernest K.

Ease of use
9.0
Support
8.2
Ease of Setup
0.0
9.4
Embold
★★★★★

Embold

With Embold's multi-dimensional prioritization, from design to code metrics, get right into the DNA of your code. Understand the status and be able to build high quality software faster, and seamlessly integrate into your DevOps. Embold brings static code analysis to the next level - all backed by AI.

Meaningful and actionable insights into your code - Amit A.

Ease of use
9.4
Support
9.3
Ease of Setup
9.3

Languages supported: English

7.6
Micro Focus Fortify On Demand
★★★★★

Micro Focus Fortify On Demand

Software security solutions from Micro Focus Fortify cover your entire software development lifecycle (SDLC) for mobile, third party and website security.

MicroFocus is Focused - Shannon C.

Ease of use
7.9
Support
7.3
Ease of Setup
6.8
9.0
ReSharper C++
★★★★★

ReSharper C++

ReSharper C++ is designed to make Visual Studio a better IDE for C++ developers, providing code analysis, quick-fixes, search and navigation, smart code completion, refactorings, and others.

Resharper - Prodctive tool - User in Computer Software

Ease of use
9.5
Support
8.9
Ease of Setup
7.6

Languages supported: English

9.0
Klocwork
★★★★★

Klocwork

Klocwork is a static code analysis and SAST tool for C, C++, C#, and Java that identifies software security, quality, and reliability issues helping to enforce compliance with standards. This has made Klocwork the preferred static analyzer that keeps development velocity high while enforcing continuous compliance for security and quality.

Klocwork has improved our code quality. Checkers have kept our code quality at very high note. - Vikash K.

Ease of use
8.2
Support
9.3
Ease of Setup
7.9
9.0
Micro Focus Fortify Static Code Analzyer
★★★★★

Micro Focus Fortify Static Code Analzyer

Fortify Static Code Analyzer is designed to identify security vulnerabilities in the user's source code early in the software development lifecycle and provides best practices so developers can code more securely.

Must have to secure your Modern Cloud Applications - Jobin T.

Ease of use
9.2
Support
9.0
Ease of Setup
8.6
8.8
Roslyn
★★★★★

Roslyn

The .NET Compiler Platform ("Roslyn") provides open-source C# and Visual Basic compilers with rich code analysis APIs.

This software facilitates not only writing code, but also writing good code. - Romeo K. S.

Ease of use
8.5
Support
8.8
Ease of Setup
7.7
9.2
Quality Clouds
★★★★★

Quality Clouds

QC is a non-invasive cloud-based software that provides code analysis and development governance for your low-code cloud platforms allowing companies to deliver better and quicker.

Great inside view of our instance - Stanislav D.

Ease of use
8.5
Support
9.3
Ease of Setup
0.0
9.0
Codacy
★★★★★

Codacy

Codacy is an automated code review tool that allows developers to improve code quality and monitor technical debt.

Quick easy and effective - Emily B.

Ease of use
8.3
Support
9.1
Ease of Setup
8.4

Languages supported: English

9.0
Parasoft Development Testing Platform
★★★★★

Parasoft Development Testing Platform

Parasoft Development Testing Platform (DTP) enables Continuous Testing. Leveraging policies, DTP consistently applies software quality practices across teams and throughout the SDLC. It enables your quality efforts to shift left_delivering a platform for automated defect prevention and the uniform measurement of risk.

Parasoft does a good job in helping to test your software - User in Medical Devices

Ease of use
Support
Ease of Setup
9.0
DeepScan
★★★★★

DeepScan

DeepScan focuses on finding runtime errors and quality issues rather than coding conventions. DeepScan follows the execution and data flow of program in greater depth. This enables finding issues that syntax-based linters can't. DeepScan classifies issues by 2 categories and 3-level impacts. So you can focus on major issues first and gradually.

An essential tool for JavaScript Dev. - Youngjoo K.

Ease of use
Support
Ease of Setup

Languages supported: English

8.0
OCLint
★★★★★

OCLint

OCLint is a static code analysis tool for improving quality and reducing defects by inspecting C, C++ and Objective-C code.

Good extension for Clang Analyzer, finds more problems, more bothersome to configure - Aleksander B.

Ease of use
Support
Ease of Setup
6.0
Doppins
★★★★★

Doppins

Doppins automatically upgrades dependencies through friendly GitHub pull requests.

Get update about dependency upgrades - Ashwani P.

Ease of use
Support
Ease of Setup
6.0
CAST Application Intelligence Platform
★★★★★

CAST Application Intelligence Platform

CAST Application Intelligence Platform (AIP) is an enterprise-grade software measurement and quality analysis solution designed to analyze multi-tiered, multi-technology applications for technical vulnerabilities and adherence to architectural and coding standards and then provide business relevant information to the IT organization through various dashboards and products built with end users in mind.

Cast Code review - User in Marketing and Advertising

Ease of use
Support
Ease of Setup
5.0
ProGuard
★★★★★

ProGuard

ProGuard is the most popular optimizer for Java bytecode. It makes your Java and Android applications up to 90% smaller and up to 20% faster. ProGuard also provides minimal protection against reverse engineering by obfuscating the names of classes, fields and methods.

Great program obfuscation and optimization at the expense of build times - User in Computer Software

Ease of use
Support
Ease of Setup
5.0
CodeMeter
★★★★★

CodeMeter

CodeMeter is the universal technology for software publishers and intelligent device manufacturers, upon which all solutions from Wibu-Systems are built.

Simple - User in Information Technology and Services

Ease of use
Support
Ease of Setup
10.0
Yasca
★★★★★

Yasca

Yasca is an open source program which looks for security vulnerabilities, code-quality, performance, and conformance to best practices in program source code, integrating with other open-source tools as needed.

Really good - User in Outsourcing/Offshoring

Ease of use
Support
Ease of Setup
0.0
PVS-Studio
★★★★★

PVS-Studio

PVS-Studio is a powerful static source code analysis solution for bug detection in C, C++, and C# projects on Windows and Linux. It is intended for use in detecting and fixing security and quality issues in code, before they turn into vulnerabilities, crashes, or painful debugging.

-

Ease of use
Support
Ease of Setup

Languages supported: English, Russian

0.0
Sigrid
★★★★★

Sigrid

SigridВ®, our software assurance platform, combines code analysis based on ISO 25010 with our unparalleled expertise to enable you to measure, evaluate and monitor your software quality in every stage of the software life cycle – whether you're buying, building or operating it.Sigrid continuously monitors the health of your software applications on critical aspects such as maintainability, security, scalability and reliability, and makes these ...

-

Ease of use
Support
Ease of Setup
B2B Software Guide