Best Secure Code Review Software - Page 5

How Many Secure Code Review Software Products Does G2 Track?

Total Products under this Category: 70

Category Stats (Sep 2026)

  • Average Rating: 4.52/5 (↑0.02 vs Aug 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Greptile (+9.71%) - Among all products in this category, Greptile recorded the largest rating increase compared to last month

Last updated: September 05, 2026

How Does G2 Rank Secure Code Review Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 5,400+ Authentic Reviews
  • 70+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Secure Code Review Software

G2 Grid® for Secure Code Review Software plotting products by satisfaction and market presence

Highlighted products: GitHub, Aikido Security, GitGuardian, GitLab, Microsoft Defender for Cloud, SonarQube, Qodo, and Checkmarx.

Underlying data: [Grid® JSON](https://www.g2.com/categories/secure-code-review/grids.json?focus%5B%5D=github&focus%5B%5D=aikido-security&focus%5B%5D=gitguardian&focus%5B%5D=gitlab&focus%5B%5D=microsoft-defender-for-cloud&focus%5B%5D=sonarqube&focus%5B%5D=qodo&focus%5B%5D=checkmarx)

Quokka Q-mast

Designed for app development, Q-mast embeds security directly into your workflow to identify security, privacy, and compliance risks before the mobile app is released. With a design tailored for DevSecOps workflows, Q-mast supports continuous, automated security testing that aligns with tools like Jenkins, GitLab, and GitHub. Q-mast capabilities: • Automated scanning in minutes, no source code needed • Analysis of compiled app binary, regardless of in-app or run-time obfuscations • Precise SBOM generation and analysis for vulnerability reporting to specific library version, including embedded libraries • Comprehensive static (SAST), dynamic (DAST), interactive (IAST), and forced-path execution app analysis • Malicious behavior profiling, including app collusion • Checks against privacy & security standards: NIAP, NIST, MASVS

Who Is the Company Behind Quokka Q-mast?

Rafter

Find and fix vulnerabilities in AI-written code.

Who Is the Company Behind Rafter?

Recurse ML

Recurse ML is an advanced code review tool designed to identify bugs in pull requests that traditional static analysis tools often miss. By integrating seamlessly into the development workflow, it enhances code quality and reduces the likelihood of defects reaching production.

Who Is the Company Behind Recurse ML?

Security & Developer Tools

Albert Invent's Security & Developer Tools provide a robust, secure, and extensible platform tailored for the chemistry and materials science industries. These tools are designed to protect intellectual property while seamlessly integrating with existing systems, enabling organizations to innovate with confidence.

Who Is the Company Behind Security & Developer Tools?

Seezo

Get 100% Security Design Review coverage without burning out your Security team Augment critical security talent by using Gen AI to automate manual AppSec workflows. Ship faster and save time, without compromising on security.

Who Is the Company Behind Seezo?

Semgrep Code

Semgrep Code is a static application security testing (SAST) solution designed to help developers identify and remediate security vulnerabilities within their codebases. By integrating seamlessly into development workflows, Semgrep Code enables continuous scanning of code repositories, providing actionable insights to enhance code security. Supporting over 30 programming languages, it offers high-confidence rules that facilitate efficient and effective vulnerability detection and resolution.

Who Is the Company Behind Semgrep Code?

  • Seller: Semgrep
  • Year Founded: 2017
  • HQ Location: San Francisco, US
  • Twitter: @semgrep
    4,433 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    268 employees on LinkedIn®

Sigrid

Sigrid® - The Software Assurance Platform Sigrid, the software assurance platform from Software Improvement Group (SIG), provides actionable insights into your software portfolio and empowers your organization to make fact-based decisions that cut costs and reduce risks, boost productivity up to 30%, keep technical debt in check, speed up time to market and build a foundation for future innovation. Sigrid illuminates the risks and opportunities in your source code and architecture and provides actionable advice to navigate the pitfalls. Sigrid continuously measures and monitors the build quality of your enterprise software, including architecture, maintainability, security, and productivity – a single solution that reduces expensive tool spread and provides a central overview of software health. Join our community - // Getting software right for a healthier digital world.

Average Rating: 4.8/5.0

Total Reviews: 2

Who Is the Company Behind Sigrid?

Who Uses This Product?

  • Company Size: 50% Medium, 50% Small

What Are Recent G2 Reviews of Sigrid?

vijil

Vijil Trust Audit is a comprehensive assessment tool designed to evaluate and enhance the security and governance of Large Language Model (LLM) applications. By aligning with the OWASP Top 10 guidelines for LLM applications, it systematically identifies potential security risks, verifies compliance with industry standards, and provides actionable recommendations to improve application security. This process not only mitigates risks but also demonstrates a commitment to trust and safety, thereby boosting stakeholder confidence.

Who Is the Company Behind vijil?

  • Seller: vijil
  • Year Founded: 2023
  • HQ Location: N/A
  • LinkedIn® Page: www.linkedin.com
    23 employees on LinkedIn®

Zendata Code Scanner

Zendata's Code Scanner is a privacy-first development tool designed to integrate seamlessly into your software development lifecycle, ensuring that data privacy is embedded from the initial stages of code creation. By automating the detection and management of sensitive data and personally identifiable information (PII) within your codebase, Code Scanner streamlines privacy-focused code reviews and mitigates potential data risks before they reach production.

Who Is the Company Behind Zendata Code Scanner?

Adam Crivello
AC
Researched and written by Adam Crivello
Updated October 3, 2024