Best Static Code Analysis Tools - Page 5

How Many Static Code Analysis Tools Products Does G2 Track?

Total Products under this Category: 136

Category Stats (Oct 2026)

  • Average Rating: 4.38/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: SoftSpell (+0.46%) - Among all products in this category, SoftSpell recorded the largest rating increase compared to last month

Last updated: October 26, 2026

How Does G2 Rank Static Code Analysis Tools Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 2,500+ Authentic Reviews
  • 136+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Static Code Analysis Tools

G2 Grid® for Static Code Analysis Tools plotting products by satisfaction and market presence

Highlighted products: SonarQube, Aikido Security, Checkmarx, Gearset DevOps, Semgrep, Black Duck Polaris Platform, SoftSpell, and CAST Imaging.

Underlying data: [Grid® JSON](https://www.g2.com/categories/static-code-analysis/grids.json?focus%5B%5D=sonarqube&focus%5B%5D=aikido-security&focus%5B%5D=checkmarx&focus%5B%5D=gearset-devops&focus%5B%5D=semgrep&focus%5B%5D=black-duck-polaris-platform&focus%5B%5D=softspell&focus%5B%5D=cast-imaging)

ProGuard

The industry-leading Java optimizer for Android apps. Use ProGuard to shrink any Java or Kotlin app, whether on mobile, embedded, or on desktop. ProGuard makes apps up to 90 percent smaller and 20 percent faster, all while providing basic defense against static reverse engineering with code obfuscation. Proguard open source community consists of engaged developers across the globe and the Guardsquare team, dedicated to keeping the community active and thriving.

Average Rating: 4.0/5.0

Total Reviews: 3

How Do G2 Users Rate ProGuard?

  • Ease of Use: 6.7/10 (Category avg: 8.8/10)

Who Is the Company Behind ProGuard?

  • Seller: GuardSquare NV
  • Year Founded: 2014
  • HQ Location: Leuven, Belgium
  • Twitter: @GuardSquare
    4,049 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    183 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 67% Small, 33% Large

What Are Recent G2 Reviews of ProGuard?

What Are G2 Users Discussing About ProGuard?

Qwiet AI

Qwiet AI delivers comprehensive application security by combining agentic AI with advanced code analysis. In a single scan, the platform provides uniquely accurate SAST, SCA, SBOM, secrets detection, and container analysis that helps dev and security teams find and fix vulnerabilities faster. With its proprietary Code Property Graph (CPG) technology and AI/ML models, Qwiet AI achieves up to 95% reduction in false positives compared to traditional tools, while offering contextual AutoFix that understands the unique context of your code, even across complex enterprise applications. Q: What makes Qwiet AI different from other AppSec solutions? A: Qwiet AI stands out through its agentic AI approach, which enables autonomous vulnerability detection and remediation. The platform's Code Property Graph technology allows for deeper code analysis and more accurate vulnerability detection, resulting in dramatically fewer false positives than traditional tools. This advanced technology enables the platform to understand code relationships and context at a deeper level, leading to precise vuln detection and contextually appropriate fixes. Q: What security capabilities does the platform include? A: The platform provides comprehensive security coverage including: - Static Application Security Testing (SAST) using a patented CPG-based approach, for vuln detection that is objectively the fastest and most accurate available per the OWASP benchmark - Software Composition Analysis (SCA) for third-party dependency scanning and vulnerability detection in open source components - Automated SBOM generation for supply chain transparency and compliance requirements - Advanced secrets detection to prevent credential exposure and secure sensitive information - Container security analysis built in - AI-powered AutoFix for automated vulnerability remediation with contextually aware patches, powered by the CPG and a custom AI/ML engine with its own LLM - Custom rule creation capabilities for organization-specific security requirements Q: How does Qwiet AI improve development workflows? A: Qwiet AI integrates seamlessly into existing CI/CD pipelines and developer workflows. The platform's speed (up to 40x faster than traditional scanners) and accuracy mean developers spend less time investigating false positives and more time coding. The AutoFix capability helps developers resolve issues quickly with AI-generated patches that are contextually aware and tailored to your codebase. Additionally, the platform provides IDE integrations and pull request analysis to catch vulnerabilities early in the development process. Q: What do customers think? A: Qwiet AI provides enterprise-grade support with dedicated customer success representatives and technical account managers. The platform consistently receives high marks for customer support, with a 97% "would recommend" rate in Gartner's Voice of the Customer. Customers receive comprehensive onboarding assistance, ongoing technical support, and regular check-ins to ensure successful implementation and adoption. Q: How can I get started with Qwiet AI? A: Qwiet AI offers self-service access, self-guided demos, and AE-guided demos, depending on your needs. You can request a personalized demo through the company website at qwiet.ai to see how the platform addresses their specific security challenges. You can also sign up for self-service access through the web site, or access documentation and integration guides there.

Average Rating: 4.8/5.0

Total Reviews: 3

How Do G2 Users Rate Qwiet AI?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.5/10)
  • Ease of Use: 10.0/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Qwiet AI?

  • Seller: Qwiet AI
  • HQ Location: San Jose, US
  • Twitter: @ShiftLeftInc
    1,164 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    14 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 67% Large, 33% Small

What Do G2 Reviewers Say About Qwiet AI?

AI-generated summary from verified user reviews

Pros
  • Users value the collaborative support from Qwiet AI, facilitating seamless integration into CI/CD pipelines.
  • Users commend the highly responsive customer support of Qwiet AI, enhancing their integration experience significantly.
  • Users value the easy integrations of Qwiet AI, facilitating seamless incorporation into CI/CD pipelines effortlessly.
  • Users value the thorough documentation of Qwiet AI, facilitating seamless integration into CI/CD pipelines.
  • Users value the strong team collaboration facilitated by Qwiet AI, enhancing integration and support for their workflows.
Cons
  • Users find the command line difficulty frustrating, as custom policies require technical expertise without a user-friendly interface.
  • Users express frustration over limited customization as custom policies can only be created via CLI, not a user interface.
  • Users are frustrated by the limited features of Qwiet AI, lacking a user interface for custom policies.
  • Users find the lack of user interface for policy creation limits accessibility and ease of use in Qwiet AI.

What Are Recent G2 Reviews of Qwiet AI?

DeepScan

DeepScan is a static code analysis tool and hosted service for inspecting JavaScript code. It checks possible run-time errors and poor code quality using data-flow analysis. DeepScan follows the execution and data flow of program in greater depth. This enables finding issues that syntax-based linters can't. So you can focus on major issues first and gradually.

Average Rating: 4.0/5.0

Total Reviews: 2

How Do G2 Users Rate DeepScan?

  • Ease of Use: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind DeepScan?

  • Seller: S-Core
  • HQ Location: N/A
  • Twitter: @deepscan_io
    106 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of DeepScan?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Fornux C++ Superset

Fornux C++ Superset is a source-to-source compiler that injects an innovative deterministic memory manager into existing C/C++ code thus making the resulting application crash proof and free from any memory leaks. The resulting application remains real-time and works on all embedded platforms. The targeted industries are: cyber-security, defense, fintech, aerospace, aeronautic, telecommunication and gaming and works on any platforms: Windows, Linux and as a SaaS.

Average Rating: 4.0/5.0

Total Reviews: 2

How Do G2 Users Rate Fornux C++ Superset?

  • Has the product been a good partner in doing business?: 6.7/10 (Category avg: 8.7/10)
  • Ease of Admin: 6.7/10 (Category avg: 8.5/10)
  • Ease of Use: 7.5/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 3.3/10 (Category avg: 10/10)

Who Is the Company Behind Fornux C++ Superset?

  • Seller: Fornux
  • Year Founded: 2018
  • HQ Location: Gatineau, CA
  • LinkedIn® Page: www.linkedin.com
    2 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Large, 50% Medium

What Are Recent G2 Reviews of Fornux C++ Superset?

What Are G2 Users Discussing About Fornux C++ Superset?

OzCode Magical Debugging

Ozcode is disrupting the art of debugging for C# and .NET applications. Established by a team of industry-leading professionals, including a Microsoft MVP, Ozcode’s debugging platform was built to meet the needs of developers – those who actually fix bugs in any environment they are detected, from Development, through QA, Staging, and Production. By providing code-level observability into running code at exactly the time and place where errors occur, Ozcode provides the insights needed to resolve errors quickly and dramatically shorten release cycles.

Average Rating: 2.8/5.0

Total Reviews: 2

How Do G2 Users Rate OzCode Magical Debugging?

  • Has the product been a good partner in doing business?: 3.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 6.7/10 (Category avg: 8.5/10)
  • Ease of Use: 6.7/10 (Category avg: 8.8/10)

Who Is the Company Behind OzCode Magical Debugging?

  • Seller: OzCode
  • Year Founded: 2012
  • HQ Location: Herzliya , IL
  • Twitter: @oz_code
    1,352 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    3 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Medium, 50% Small

What Are Recent G2 Reviews of OzCode Magical Debugging?

What Are G2 Users Discussing About OzCode Magical Debugging?

Prepros

Prepros can compile almost all preprocessing languages like Sass, Less, Stylus, Cssnext, Jade/Pug, Markdown, Slim, Coffeescript etc.

Average Rating: 4.3/5.0

Total Reviews: 2

How Do G2 Users Rate Prepros?

  • Ease of Admin: 8.3/10 (Category avg: 8.5/10)
  • Ease of Use: 9.2/10 (Category avg: 8.8/10)

Who Is the Company Behind Prepros?

Who Uses This Product?

  • Company Size: 50% Large, 50% Small

What Are Recent G2 Reviews of Prepros?

projectcodemeter

Estimates Your Software Development Cost & Time, Measures Code Quality metrics and Team Productivity within minutes by using Automatic Source Code Analysis

Average Rating: 4.3/5.0

Total Reviews: 2

How Do G2 Users Rate projectcodemeter?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.3/10 (Category avg: 8.5/10)
  • Ease of Use: 9.2/10 (Category avg: 8.8/10)

Who Is the Company Behind projectcodemeter?

Who Uses This Product?

  • Company Size: 50% Large, 50% Small

What Are Recent G2 Reviews of projectcodemeter?

Sigrid

Sigrid® - The Software Assurance Platform Sigrid, the software assurance platform from Software Improvement Group (SIG), provides actionable insights into your software portfolio and empowers your organization to make fact-based decisions that cut costs and reduce risks, boost productivity up to 30%, keep technical debt in check, speed up time to market and build a foundation for future innovation. Sigrid illuminates the risks and opportunities in your source code and architecture and provides actionable advice to navigate the pitfalls. Sigrid continuously measures and monitors the build quality of your enterprise software, including architecture, maintainability, security, and productivity – a single solution that reduces expensive tool spread and provides a central overview of software health. Join our community - // Getting software right for a healthier digital world.

Average Rating: 4.8/5.0

Total Reviews: 2

Who Is the Company Behind Sigrid?

Who Uses This Product?

  • Company Size: 50% Medium, 50% Small

What Are Recent G2 Reviews of Sigrid?

Tanagram

Cursor, Claude, and Copilot write code. But they don't know your patterns, your lessons, or your hard-won decisions. Tanagram connects your coding agents to your team's tribal knowledge—so they stop suggesting things you've already fixed.

Average Rating: 5.0/5.0

Total Reviews: 2

How Do G2 Users Rate Tanagram?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.5/10)
  • Ease of Use: 10.0/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 3.3/10 (Category avg: 10/10)

Who Is the Company Behind Tanagram?

  • Seller: Tanagram
  • HQ Location: San Francisco, US
  • LinkedIn® Page: linkedin.com
    8 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Tanagram?

AppRefactoring

AppRefactoring service for developers and companies that release many applications. Using popular programming languages and convenient file formats, the system analyzes your code in just a few clicks. In addition, you can compare the code with the personal/team database and see their intersections.

Average Rating: 4.5/5.0

Total Reviews: 1

Who Is the Company Behind AppRefactoring?

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of AppRefactoring?

BluBracket

BluBracket was forged by security industry veterans who’ve secured millions of assets for many of the world’s largest companies. During our time securing documents, one question kept coming up—can you secure code? We founded BluBracket to give companies the freedom to innovate, with the safety of a secure solution. BluBracket is the leader in comprehensive code security. Its products give companies visibility into where source code introduces security risk while also enabling them to fully secure their code—without altering developer workflows or productivity. Understand who has access to your valuable code and how it puts your infrastructure at risk. Pass audit and compliance requirements with ease. BluBracket bridges the gap between your security, development and devops teams by making security policies actionable and enforceable in your CICD pipeline.

Average Rating: 3.5/5.0

Total Reviews: 2

How Do G2 Users Rate BluBracket?

  • Has the product been a good partner in doing business?: 6.7/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.3/10 (Category avg: 8.5/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind BluBracket?

Who Uses This Product?

  • Company Size: 150% Large

bugScout

Platform for detecting security vulnerabilities in applications by analyzing the source code. bugScout® is the most complete and versatile SAST platform on the market for detecting application security vulnerabilities through source code analysis. Designed by ethical hackers and reputable security auditors, bugScout® follows international security rules and standards and is at the forefront of cybercrime techniques to keep customer applications safe and secure. It is multiplatform, offered On-Premise or Cloud, and made available in SaaS mode. The internationality of bugScout® allows you to work in 3 languages, easily selectable in the settings of the platform itself. bugScout® has the ability to perform complete application audits and, at the same time, integrate seamlessly into the DevOps lifecycle, facilitating continuous analysis of the source code, without any interference in the application development processes. The excellent results of bugScout® are the result of the development for the different programming languages, which allow to track all possible execution flows of the applications to be audited and cover each and every one of the execution paths, detecting security vulnerabilities and quality errors. bugScout® provides complete reports and reports of your activity, fully customizable through various filters, depending on the recipient and the information you want to view. The different formats of reports and reports allow to obtain final reports and exportable files to other management platforms, for integration in the Customer Information Systems.

Average Rating: 3.5/5.0

Total Reviews: 2

How Do G2 Users Rate bugScout?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 6.7/10 (Category avg: 8.5/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind bugScout?

Who Uses This Product?

  • Company Size: 50% Large, 50% Medium

What Are Recent G2 Reviews of bugScout?

What Are G2 Users Discussing About bugScout?

CodeAnt AI Code Quality Platform

CodeAnt AI analyzes every pull request for code quality across 30+ languages. AI code analysis evaluates intent rather than syntax, detecting dead code, duplicated logic, anti-patterns, and structural issues that static linters miss. Each finding explains what to change and why, with a one-click fix. Quality gates are deterministic. The same code returns the same verdict on every run, so merges are never blocked by a threshold that moved on its own. Gates are configurable per repository and enforced in CI. Test coverage is tracked per pull request and across the codebase over time, with uncovered lines surfaced against the changes that introduced them. Code complexity detection flags high-complexity functions, deep nesting, and long methods, measuring cyclomatic and cognitive complexity at function level. Continuous AI learning, built on more than 1 billion lines of codebase history, adapts to your team's standards. Custom rules are written in plain English and enforced across every repository. Teams ship 4x fewer production bugs. Native monorepo support. Integrates with GitHub, GitLab, and Bitbucket, cloud or self-hosted.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate CodeAnt AI Code Quality Platform?

  • Ease of Use: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind CodeAnt AI Code Quality Platform?

  • Seller: CodeAnt AI
  • Year Founded: 2023
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    22 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of CodeAnt AI Code Quality Platform?

Context

Context is the first AI Office Suite that automates your workflow by creating documents, presentations, spreadsheets, and more using your data, tools, and style.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Context?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.5/10)
  • Ease of Use: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Context?

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Context?

Doppins

Doppins automatically upgrades dependencies through friendly GitHub pull requests.

Average Rating: 3.0/5.0

Total Reviews: 1

How Do G2 Users Rate Doppins?

  • Ease of Use: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Doppins?

Who Uses This Product?

  • Company Size: 100% Medium

What Are G2 Users Discussing About Doppins?

Adam Crivello
AC
Researched and written by Adam Crivello
Updated October 3, 2024