Best Static Code Analysis Tools
Static code analysis is the analysis of computer software performed without actually executing the code. Static code analysis tools scan all code in a project and seek out vulnerabilities, validates code against industry best practices, and some software tools validate against company-specific project specifications. Static code analysis tools are used by software development and quality assurance teams to ensure the quality and security of code, and that project requirements are met. Static code analysis is a type of source code management and can integrate with version control systems and through build automation tasks using continuous integration software.
To qualify as a static code analysis tool, a product must:
Best Static Code Analysis Tools At A Glance
G2 takes pride in showing unbiased reviews on user satisfaction in our ratings and reports. We do not allow paid placements in any of our ratings, rankings, or reports. Learn about our scoring methodologies.
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
SonarQube Server (formerly SonarQube) is a self-managed open-source platform that helps developers create code devoid of quality and vulnerability issues. By integrating seamlessly with the top DevOps
- Software Engineer
- Computer Software
- Information Technology and Services
- 44% Enterprise
- 36% Mid-Market
10,468 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Typo is an AI-driven software engineering intelligence platform that enables dev teams with real-time SDLC visibility, automated code reviews & DevEX insights to code better, deploy faster & s
- Software Engineer
- Computer Software
- Information Technology and Services
- 45% Mid-Market
- 43% Small-Business
80 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Codacy Helps Build High Quality, Secure Applications. You can get up and running effortlessly and start increasing quality, test coverage, and security today. Codacy is a plug-and-play solution to qu
- Computer Software
- 61% Small-Business
- 21% Mid-Market
5,024 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Visual Assist (VA) is a productivity plugin for Microsoft's Visual Studio developed by Whole Tomato Software. VA has been enhancing the overall IDE experience for thousands of C/C++ and C# developers
- Computer Games
- Computer Software
- 67% Small-Business
- 22% Mid-Market
511 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Checkmarx is constantly pushing the boundaries of Application Security (AppSec) Testing to make security seamless and simple for the world’s developers while giving CISOs the confidence and control th
- Information Technology and Services
- Computer Software
- 57% Enterprise
- 26% Mid-Market
7,233 Twitter followers
- Overview
- User Satisfaction
- Seller Details
CAST Imaging helps architects and developers understand, change, and modernize applications. It automatically reverse-engineers all database structures, code components, and interdependencies in any c
- Information Technology and Services
- 57% Enterprise
- 27% Small-Business
1,909 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
SonarQube Cloud (formerly SonarCloud) is a SaaS code analysis tool, designed to detect coding issues in 30+ languages, frameworks, and IaC platforms. The solution also provides fix recommendations lev
- 53% Mid-Market
- 27% Enterprise
10,468 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
CodeScene is a code analysis, visualization, and reporting tool. Cross reference contextual factors such as code quality, team dynamics, and delivery output to get actionable insights to effectively r
- Computer Software
- 47% Mid-Market
- 33% Small-Business
1,291 Twitter followers
- Overview
- User Satisfaction
- Seller Details
The Closure Compiler is a tool for making JavaScript download and run faster. Instead of compiling from a source language to machine code, it compiles from JavaScript to better JavaScript.
- 46% Small-Business
- 38% Mid-Market
32,136,453 Twitter followers
- Overview
- User Satisfaction
- Seller Details
ReSharper is a renowned productivity tool that turns Microsoft Visual Studio into a much better IDE. Both individual .NET developers and teams rely on ReSharper to write and maintain code in a more ma
- Software Engineer
- Software Developer
- Computer Software
- Information Technology and Services
- 39% Small-Business
- 38% Mid-Market
202,689 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Semgrep is a highly customizable application security platform built for security engineers and developers. Semgrep scans first and third-party code to find security issues unique to an organization,
- Computer Software
- Information Technology and Services
- 58% Mid-Market
- 29% Enterprise
3,435 Twitter followers
- Overview
- Pros and Cons
- User Satisfaction
- Seller Details
Kiuwan is a robust, end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Security Testing (SAST), Software Composi
- Information Technology and Services
- 43% Enterprise
- 37% Mid-Market
3,523 Twitter followers
- Overview
- User Satisfaction
- Seller Details
Fortify Static Code Analyzer is designed to identify security vulnerabilities in the user's source code early in the software development lifecycle and provides best practices so developers can code m
- Banking
- Financial Services
- 52% Enterprise
- 30% Small-Business
22,223 Twitter followers
- Overview
- User Satisfaction
- Seller Details
DeepSource is an all-in-one code health platform that equips organizations with everything they need to build maintainable and secure software while elevating the velocity of their software developmen
- Computer Software
- 82% Small-Business
- 9% Enterprise
1,706 Twitter followers
- Overview
- User Satisfaction
- Seller Details
- 56% Small-Business
- 25% Mid-Market