Best Static Code Analysis Tools - Page 3

How Many Static Code Analysis Tools Products Does G2 Track?

Total Products under this Category: 134

Category Stats (Sep 2026)

  • Average Rating: 4.38/5 (↑0.01 vs Aug 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: TASKING Test & Verification Tools (+10.99%) - Among all products in this category, TASKING Test & Verification Tools recorded the largest rating increase compared to last month

Last updated: September 01, 2026

How Does G2 Rank Static Code Analysis Tools Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 2,200+ Authentic Reviews
  • 134+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Static Code Analysis Tools

G2 Grid® for Static Code Analysis Tools plotting products by satisfaction and market presence

Highlighted products: SonarQube, Gearset DevOps, Checkmarx, Semgrep, SoftSpell, Black Duck Polaris Platform, CAST Imaging, and ReSharper C++.

Underlying data: [Grid® JSON](https://www.g2.com/categories/static-code-analysis/grids.json?focus%5B%5D=sonarqube&focus%5B%5D=gearset-devops&focus%5B%5D=checkmarx&focus%5B%5D=semgrep&focus%5B%5D=softspell&focus%5B%5D=black-duck-polaris-platform&focus%5B%5D=cast-imaging&focus%5B%5D=resharper-c)

Embold

Embold supports developers and development teams by finding critical code issues before they become roadblocks. It is the perfect tool to analyze, diagnose, transform, and sustain your software efficiently. With the use of A.I. and machine learning technologies, Embold can immediately prioritize issues, suggest ways to best solve them, and re-factor software where necessary. Run it within your current Dev-Ops stack, on premise or in the cloud privately or publicly.

Average Rating: 4.7/5.0

Total Reviews: 15

How Do G2 Users Rate Embold?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.7/10 (Category avg: 8.5/10)
  • Ease of Use: 9.4/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Embold?

  • Seller: Embold Technologies
  • Year Founded: 2009
  • HQ Location: Frankfurt am Main, Hesse
  • Twitter: @embold_io
    1,054 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    12 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 56% Small, 28% Medium

What Are Recent G2 Reviews of Embold?

JProfiler

JProfiler is a Java profiler tool that helps users to resolve performance bottlenecks, pin down memory leaks and understand threading issues

Average Rating: 4.3/5.0

Total Reviews: 32

How Do G2 Users Rate JProfiler?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.1/10 (Category avg: 8.5/10)
  • Ease of Use: 8.2/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 3.3/10 (Category avg: 10/10)

Who Is the Company Behind JProfiler?

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 39% Large, 33% Small

What Are Recent G2 Reviews of JProfiler?

What Are G2 Users Discussing About JProfiler?

Source Insight

Source Insight parses your source code and maintains its own database of symbolic information dynamically while you work, and presents useful contextual information to you automatically.

Average Rating: 4.5/5.0

Total Reviews: 24

How Do G2 Users Rate Source Insight?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.5/10)
  • Ease of Use: 9.6/10 (Category avg: 8.8/10)

Who Is the Company Behind Source Insight?

Who Uses This Product?

  • Company Size: 69% Large, 31% Medium

What Are Recent G2 Reviews of Source Insight?

What Are G2 Users Discussing About Source Insight?

Clang

Clang is a compiler front end for the C language family, including C, C++, Objective-C, and Objective-C++. It is designed to work seamlessly with the LLVM compiler back end, providing a robust and efficient compilation process. Clang offers fast compilation times, low memory usage, and produces highly optimized code. Its modular architecture allows for easy integration with various development tools and IDEs, enhancing the overall development experience. Clang also provides expressive diagnostics, aiding developers in identifying and resolving code issues effectively. Key Features and Functionality: - Fast Compilation and Low Memory Usage: Clang is optimized for speed and efficiency, enabling rapid compilation with minimal resource consumption. - Expressive Diagnostics: Provides detailed and clear error messages, assisting developers in quickly identifying and fixing code issues. - Modular Library-Based Architecture: Its design allows for easy integration with various tools and supports diverse clients, including refactoring, static analysis, and code generation. - GCC and MSVC Compatibility: Clang offers compatibility with GCC and MSVC, facilitating a smooth transition for projects migrating from these compilers. - Support for Multiple Languages: Beyond C and C++, Clang supports Objective-C, Objective-C++, OpenCL, and CUDA, catering to a wide range of development needs. Primary Value and Problem Solved: Clang addresses the need for a high-performance, user-friendly compiler that integrates seamlessly with modern development environments. By offering fast compilation times, detailed diagnostics, and a modular architecture, Clang enhances developer productivity and code quality. Its compatibility with existing compiler flags and extensions ensures a smooth transition for projects migrating from other compilers, while its support for multiple languages broadens its applicability across various development scenarios.

Average Rating: 4.3/5.0

Total Reviews: 16

How Do G2 Users Rate Clang?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.5/10)
  • Ease of Use: 8.2/10 (Category avg: 8.8/10)

Who Is the Company Behind Clang?

Who Uses This Product?

  • Company Size: 56% Small, 25% Medium

What Are Recent G2 Reviews of Clang?

Codiga

Automate your code reviews and write faster code with Codiga Coding Assistant. Codiga proposes two products: 1. Automated Code Reviews on GitHub, GitLab, and Bitbucket 2. Smart Coding Assistant to help developers find and import safe and reliable code patterns directly in their IDE.

Average Rating: 4.6/5.0

Total Reviews: 21

How Do G2 Users Rate Codiga?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 9.2/10 (Category avg: 8.5/10)
  • Ease of Use: 9.5/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 3.3/10 (Category avg: 10/10)

Who Is the Company Behind Codiga?

  • Seller: Codiga
  • Year Founded: 2020
  • HQ Location: Denver, US
  • Twitter: @getcodiga
    970 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 67% Small, 19% Large

What Are Recent G2 Reviews of Codiga?

What Are G2 Users Discussing About Codiga?

Pylint

Pylint is a tool that checks for errors in Python code, tries to enforce a coding standard and looks for bad code smells.

Average Rating: 4.2/5.0

Total Reviews: 18

How Do G2 Users Rate Pylint?

  • Has the product been a good partner in doing business?: 9.2/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.3/10 (Category avg: 8.5/10)
  • Ease of Use: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Pylint?

  • Seller: Pylint
  • Year Founded: 2019
  • HQ Location: Z√ºrich, Z√ºrich
  • Twitter: @pylint
    2 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 53% Large, 32% Medium

What Are Recent G2 Reviews of Pylint?

CodeRush

The CodeRush .NET Test Runner is up to 30% faster than the closest competitor so you can get back to coding sooner.

Average Rating: 4.0/5.0

Total Reviews: 10

How Do G2 Users Rate CodeRush?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 5.0/10 (Category avg: 8.5/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind CodeRush?

  • Seller: DevExpress
  • Year Founded: 1998
  • HQ Location: Glendale, CA
  • Twitter: @DevExpress
    8,517 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    192 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Medium, 40% Small

What Are Recent G2 Reviews of CodeRush?

What Are G2 Users Discussing About CodeRush?

Checkstyle

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard.

Average Rating: 4.3/5.0

Total Reviews: 19

How Do G2 Users Rate Checkstyle?

  • Has the product been a good partner in doing business?: 7.5/10 (Category avg: 8.7/10)
  • Ease of Admin: 6.4/10 (Category avg: 8.5/10)
  • Ease of Use: 8.4/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Checkstyle?

  • Seller: sourceforge
  • Year Founded: 1999
  • HQ Location: San Diego, CA
  • Twitter: @sourceforge
    46,720 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    61 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 57% Large, 29% Small

What Are Recent G2 Reviews of Checkstyle?

VISUAL ASSIST

Visual Assist (VA) is a productivity plugin for Microsoft's Visual Studio developed by Whole Tomato Software. VA has been enhancing the overall IDE experience for thousands of C/C++ and C# developers for over fifteen years. Things You Can Do with Visual Assist • Navigate your code effortlessly • Inspect code and syntax automatically • Restructure code without affecting external behavior • Modernize legacy code • Improve readability • Access to a variety of accessibility features • Tailored support for Unreal Engine The plugin lets programmers code significantly faster and more efficiently with features such as autocomplete, code correction, and code navigation among others. These help you stay focused on more important tasks without the hassle. Visual Assist supports Visual Studio 2022, 2019, 2017 and 2015. Older versions also supported with limited features.

Average Rating: 4.4/5.0

Total Reviews: 29

How Do G2 Users Rate VISUAL ASSIST?

  • Has the product been a good partner in doing business?: 5.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 6.7/10 (Category avg: 8.5/10)
  • Ease of Use: 9.0/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 3.3/10 (Category avg: 10/10)

Who Is the Company Behind VISUAL ASSIST?

  • Seller: Idera, Inc.
  • Year Founded: 2007
  • HQ Location: Austin, US
  • Twitter: @MigrationWiz
    482 Twitter followers
  • LinkedIn® Page: www.linkedin.com

Who Uses This Product?

  • Top Industries: Computer Games, Computer Software
  • Company Size: 66% Small, 24% Medium

What Are Recent G2 Reviews of VISUAL ASSIST?

What Are G2 Users Discussing About VISUAL ASSIST?

GuardRails

GuardRails is an end-to-end security platform that makes AppSec easier for both security and development teams. We scan, detect, and provide real-time guidance to fix vulnerabilities early. Trusted by hundreds of teams around the world to build safer apps, GuardRails integrates seamlessly into the developers’ workflow, quietly scans as they code, and shows how to fix security issues on the spot via Just-in-Time training. GuardRails commits to keeping the noise low and only reporting high-impact vulnerabilities that are relevant to your organization. GuardRails helps organizations shift security everywhere and build a strong DevSecOps pipeline, so they can go faster to market without risking security.

Average Rating: 4.3/5.0

Total Reviews: 29

How Do G2 Users Rate GuardRails?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.7/10 (Category avg: 8.5/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind GuardRails?

  • Seller: GuardRails
  • Year Founded: 2017
  • HQ Location: Singapore, Singapore
  • Twitter: @guardrailsio
    1,553 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    12 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 52% Small, 48% Medium

What Do G2 Reviewers Say About GuardRails?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the robust security features of GuardRails, ensuring efficient code scans and vulnerability management in DevSecOps.
  • Users value the vulnerability detection capabilities of GuardRails, enhancing security with automated, comprehensive code scans.
  • Users find GuardRails easy to use, offering integrated feedback on security issues directly within their development environment.
  • Users value the error reduction capabilities of GuardRails, enabling early detection and swift resolution of security issues.
  • Users value the effective threat detection of GuardRails, ensuring secure code and timely vulnerability alerts during development.
Cons
  • Users note missing features in GuardRails, such as limited developer support and lack of report generation capabilities.
  • Users find time management challenging with GuardRails due to insufficient resources and requirement for constant supervision.
  • Users face bug issues with GuardRails, resulting in frequent bottlenecks and complications during code pushing.
  • Users face challenges with dashboard issues, including insufficient report generation and syncing difficulties for new users.
  • Users report false positives in GuardRails, which can complicate the vulnerability management process despite a helpful dashboard.

What Are Recent G2 Reviews of GuardRails?

FindBugs

Static analysis tool for finding bugs in Java code.

Average Rating: 4.5/5.0

Total Reviews: 20

How Do G2 Users Rate FindBugs?

  • Ease of Use: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind FindBugs?

  • Seller: sourceforge
  • Year Founded: 1999
  • HQ Location: San Diego, CA
  • Twitter: @sourceforge
    46,720 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    61 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 45% Medium, 32% Small

What Are Recent G2 Reviews of FindBugs?

CodeSonar

As a leading provider of static application security testing (SAST) solutions, CodeSecure helps software developers solve challenging issues throughout the software development life cycle (SDLC) to protect mission-critical software and devices from failure and cyberattack. By enabling developers to shift security testing left, CodeSecure CodeSonar seamlessly integrates into CI/CD and DevSecOps tools to assist developers in designing, developing, and deploying trusted software applications – meeting standards, minimizing risk and accelerating projects to gain a competitive advantage. CodeSecure CodeSonar is a multi-language static application security testing (SAST) solution supporting C, C++, C# and Java. CodeSonar provides deep static analysis to quickly find and fix defects impacting code quality, safety and security. With seamless integrations into developer tools such as GitHub, GitLab, Jenkins, Visual Studio and others, CodeSonar is easily adopted into developer workflows to efficiently and continuously test code to create higher quality, safer and more secure software.  

Average Rating: 4.3/5.0

Total Reviews: 13

How Do G2 Users Rate CodeSonar?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 6.3/10 (Category avg: 8.5/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind CodeSonar?

  • Seller: CodeSecure
  • Year Founded: 1988
  • HQ Location: Ithaca, NY
  • Twitter: @GrammaTech
    684 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    50 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 38% Medium, 31% Large

What Are Recent G2 Reviews of CodeSonar?

What Are G2 Users Discussing About CodeSonar?

Visual Expert

Visual Expert is a static code analyzer for Oracle PL/SQL, SQL Server T-SQL and PowerBuilder. Identify code dependencies to modify your code without breaking your application. Leverage hundreds of features to improve the quality, performance, and security of your applications. Find Cross References Identify code dependencies to estimate the impact of a change and modify your code without breaking your application. Detect Security Vulnerabilities Automatically scan your code to detect and fix security issues. Generate Code Inspection Report to clean it up, streamline maintenance efforts and avoid unexpected behavior. Review CRUD Operations Automatically generate a CRUD matrix showing which programs access your data. Generate Diagrams from your code to visualize objects and dependencies: Call graphs, Data Models, impact analysis diagrams… Automatically generate comprehensive HTML documentation of your source code. Analyze and Improve Code Performance Find the slow pieces of code, analyze processes, and remove bottlenecks. Compare two versions of your application or sets of code. Filter changes and save snapshots of your code to compare them anytime in the future.

Average Rating: 4.6/5.0

Total Reviews: 13

How Do G2 Users Rate Visual Expert?

  • Has the product been a good partner in doing business?: 7.8/10 (Category avg: 8.7/10)
  • Ease of Admin: 7.9/10 (Category avg: 8.5/10)
  • Ease of Use: 8.9/10 (Category avg: 8.8/10)

Who Is the Company Behind Visual Expert?

  • Seller: Novalys
  • Year Founded: 1998
  • HQ Location: Boulogne-Billancourt, Ile-de-France
  • Twitter: @PowerBuilderTV
    615 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    33 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 62% Medium, 23% Small

What Do G2 Reviewers Say About Visual Expert?

AI-generated summary from verified user reviews

Pros
  • Users find the easy setup of Visual Expert to be straightforward, allowing for seamless and quick usage.
  • Users appreciate the clear breakdown and diagrams of Visual Expert, enhancing understanding of complex software connections.
  • Users appreciate the enhanced privacy and security features of Visual Expert, ensuring safe handling of sensitive data.
Cons
  • Users find the confusing interface of Visual Expert challenging, especially if they're not tech-savvy or familiar with code.
  • Users find the difficulty for beginners overwhelming due to its technical nature and clunky interface.
  • Users find the ability to correct specific data somewhat limited, indicating a need for better accuracy and modifications.
  • Users experience slow performance with Visual Expert, especially during large projects, affecting usability and efficiency.

What Are Recent G2 Reviews of Visual Expert?

What Are G2 Users Discussing About Visual Expert?

YouMonitor

YourKit offersinnovative and intelligent tools for profiling Java & .NET applications.

Average Rating: 4.5/5.0

Total Reviews: 10

How Do G2 Users Rate YouMonitor?

  • Ease of Use: 8.1/10 (Category avg: 8.8/10)

Who Is the Company Behind YouMonitor?

  • Seller: YourKit
  • HQ Location: D√ºsseldorf, Nordrhein-Westfalen
  • Twitter: @yourkit
    441 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 40% Large, 40% Small

What Are Recent G2 Reviews of YouMonitor?

Codecov

Codecov is a code coverage tool.

Average Rating: 3.9/5.0

Total Reviews: 10

How Do G2 Users Rate Codecov?

  • Has the product been a good partner in doing business?: 4.2/10 (Category avg: 8.7/10)
  • Ease of Admin: 7.5/10 (Category avg: 8.5/10)
  • Ease of Use: 8.1/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Codecov?

  • Seller: Codecov
  • Year Founded: 2015
  • HQ Location: San Francisco, California
  • Twitter: @codecov
    3,067 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    2 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 50% Small, 40% Medium

What Are Recent G2 Reviews of Codecov?

What Are G2 Users Discussing About Codecov?

Adam Crivello
AC
Researched and written by Adam Crivello
Updated October 3, 2024