SonarQube is described as 'Open source quality management platform, dedicated to continuously analyze and measure source code quality, from the portfolio to the method. Static code analysis vailable in the "Community Edition" (free / open source) for:' and is an app in the development category. There are more than 25 alternatives to SonarQube for a variety of platforms, including Web-based, Windows, Linux, SaaS and Mac apps. The best SonarQube alternative is Codacy. It's not free, so if you're looking for a free alternative, you could try Codacy or Shellcheck. Other great apps like SonarQube are Coverity Scan, Repowise, VibeGuard and CodeTruss.
Automatically reviews code style, security, duplication, complexity, and coverage on every change while tracking code quality throughout your sprints.
Portugal
EU
Norway
Cppcheck is an static analysis tool for C/C++ code. Unlike C/C++ compilers and many other analysis tools it does not detect syntax errors in the code. Cppcheck primarily detects the types of bugs that the compilers normally do not detect.
SwedenEU
Coverity Scan Static Analysis allows to find and fix defects in your Java, C/C++ or C# open source project for free.
CodeTruss makes every agent change prove it belongs. Its local Boundary records the task and starting Git state, checks scope and sensitive surfaces, runs 13 deterministic registry analyzers plus project verification, and writes an integrity-signed receipt.
SlowQL is a production-focused offline SQL static analyzer that catches security vulnerabilities, performance regressions, reliability issues, compliance risks, cost inefficiencies, and code quality problems before they reach production.
Canada
Semgrep is a fast, open-source, static analysis tool that excels at expressing code standards — without complicated queries — and surfacing bugs early at editor, commit, and CI time. Precise rules look like the code you’re searching; no more traversing abstract syntax trees or...
Flawfinder examines C/C++ source code and reports possible security weaknesses ("flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
SAST Online has come a long way from its beginnings for Global. SAST online targeted to analyse your code without installing or opening terminal.
SQuORE is a business intelligence and static code analysis tool for software projects. It gathers information from different artefacts types (e.g. source code, test results, bug tracking system) and tools (reads outputs of Checkstyle, PMD, FindBugs, Polyspace, Coverity or...
United States
Netherlands
