DefenseCode ThunderScan® is described as 'SAST (Static Application Security Testing, WhiteBox Testing) solution for performing deep and extensive security analysis of application source code' and is an app. There are more than 10 alternatives to DefenseCode ThunderScan® for a variety of platforms, including Linux, Mac, Windows, Web-based and Android apps. The best DefenseCode ThunderScan® alternative is SonarQube, which is both free and Open Source. Other great apps like DefenseCode ThunderScan® are Coverity Scan, VibeGuard, SlowQL and Semgrep.
SonarQube is an open source quality management platform, dedicated to continuously analyze and measure source code quality, from the portfolio to the method. Static code analysis is available in the "Community Edition" (free / open source) for:
Switzerland
Coverity Scan Static Analysis allows to find and fix defects in your Java, C/C++ or C# open source project for free.
SlowQL is a production-focused offline SQL static analyzer that catches security vulnerabilities, performance regressions, reliability issues, compliance risks, cost inefficiencies, and code quality problems before they reach production.
Canada
Semgrep is a fast, open-source, static analysis tool that excels at expressing code standards — without complicated queries — and surfacing bugs early at editor, commit, and CI time. Precise rules look like the code you’re searching; no more traversing abstract syntax trees or...
Improve quality, reduce risk, and ship with confidence. GrammaTech's static analysis SAST tool as part of your secure SDLC identifies bugs that can result in system crashes, unexpected behavior, and security breaches.
United States
Code Buster reports dependency wiring, dead code, cycles, duplication, complexity, architecture-policy violations, feature flags, security and style heuristics, quality scores, and remediation plans.
Kiuwan Application Security is an end-to-end Appsec platform. Monitoring, action plans and seamless integration within unlocalized teams are but a few of the features offered by Kiuwan.
Qodana is a smart code quality platform by JetBrains best suited for working in teams. It can analyze code written in 60+ languages including Java, JavaScript, TypeScript, PHP, Kotlin, Python, Go, and C#.
Netherlands
EU
Czechia