Static Code Analysis Tools logopeterindia.net
Knowledge Hub

Static Code Analysis Tools

A curated directory of static code analysis tools — code quality management, vulnerability detection and architecture analysis for Java, .NET, Python, JavaScript, C/C++ and many other languages, from platforms to open-source linters.

49 topics•5 categories•Updated October 2026

Multi-Language Quality & Security Platforms

11 entries

Platforms that analyse many languages in the IDE, pull request and CI pipeline.

01SonarQubeCode quality and security analysis integrated into enterprise development workflows. 02SonarQube Cloud (formerly SonarCloud)Cloud-hosted code quality and security analysis; SonarCloud's address now redirects here. 03CodacyCode quality and security checks across pull requests and repositories. 04DeepSourceCode review platform with static analysis and security checks. 05Codiga (now part of Datadog)Customisable static analysis for the IDE and CI/CD; its site says Codiga has joined Datadog. 06Qodana (JetBrains)JetBrains static code analysis for CI pipelines. 07CodeSceneCode health analysis that helps manage technical debt. 08Snyk CodeDeveloper-focused static application security testing in the IDE and CI/CD pipeline. 09CodeQLGitHub's semantic code analysis engine that lets you query code like data. 10SemgrepStatic analysis platform with rule-based code search for security and quality. 11Sonatype Vulnerability ManagementSonatype's tools for finding and prioritising vulnerabilities; the old scanner link redirects here.

Architecture & Code Intelligence

5 entries

Tools that map structure, dependencies, metrics and technical debt.

12CAST ImagingSoftware imaging that maps the inner workings and architecture of applications. 13SonargraphArchitecture and code smell checking via Eclipse or IntelliJ plugins. 14NDependCode quality management for .NET: technical debt, metrics, dependencies and rule violations. 15CodeMRI (Silverthread)Code analysis suite for understanding architecture and technical debt. 16Squore (Vector)Software quality monitoring for safety-critical projects; the old link redirects here.

Language-Specific & Safety-Critical Analyzers

7 entries

Analyzers for particular languages, IDEs or regulated industries.

17Parasoft JtestStatic analysis and automated unit testing for Java. 18PVS-StudioStatic analyzer for C, C++, C# and Java code. 19IntelliJ IDEA built-in inspectionsJetBrains IDE with built-in code inspections and static analysis. 20JetBrains dotCoverCode coverage and unit test runner for .NET; a coverage tool rather than a static analyzer. 21Perforce KlocworkStatic code analysis for security, safety and quality in large codebases. 22GrammaTech CodeSonarStatic analysis and software assurance for security and safety-critical code. 23.NET code analysis (Roslyn analyzers)Microsoft's built-in code analysis for .NET projects.

Open-Source Analyzers & Linters

19 entries

Free tools, grouped here by the language they target.

24SpotBugsFinds bugs in Java bytecode; successor to FindBugs. 25PMDExtensible static analyzer for Java and other languages. 26CheckstyleChecks Java code against a coding standard. 27ESLintPluggable linter for JavaScript and TypeScript. 28BiomeToolchain for web projects, including a linter and formatter. 29PylintCode analysis tool for Python. 30RuffFast Python linter and formatter. 31mypyStatic type checker for Python. 32ClippyCollection of lints for Rust code. 33golangci-lintLinters runner for Go. 34clang-tidyClang-based linter and static analysis tool for C and C++. 35CppcheckStatic analysis tool for C and C++. 36InferStatic analyzer for Java, C, C++ and Objective-C. 37RuboCopRuby linter and formatter. 38PHPStanStatic analysis tool for PHP. 39PsalmStatic analysis tool for PHP. 40detektStatic code analysis for Kotlin. 41SwiftLintTool to enforce Swift style and conventions. 42ShellCheckAnalysis tool for shell scripts.

Related Pages

7 entries

Related directories on this site.

43SAST ToolsStatic application security testing tools. 44Source Code Review ToolsTools for reviewing source code. 45Software TestingHub of software testing directories. 46Software EngineeringHub of software engineering directories. 47CybersecurityCybersecurity solutions and services. 48Quality AssuranceQuality assurance resources, including testing, standards and quality tools. 49Software Test Automation ToolsTools for automating software tests.

Frequently Asked Questions

What is static code analysis?

Static code analysis examines source code without running it to find bugs, security weaknesses, style violations and maintainability problems early in development.

How does it differ from SAST?

SAST is the security-focused subset of static analysis. General static analysis also covers code quality, style, complexity and technical debt, and many tools do both.

Linter, static analyzer or code quality platform?

Linters enforce style and catch simple errors in one language, static analyzers do deeper data-flow analysis, and platforms such as SonarQube track quality across many languages and over time.

Which products changed names or owners?

SonarCloud is now SonarQube Cloud, Codiga has joined Datadog, and the Squore and Sonatype scanner pages have moved to new addresses.

Are the links checked?

Links were checked when this page was updated. Squore, Codiga, CodeMRI and Cppcheck needed a browser check and all loaded. Polyspace and GitClear blocked automated checks and are not listed.