
Coverity Scan
SonarQube
Checkmarx
Veracode
ReSharper
PyCharm
Appknox
GitLab
Cert Decoder
Cert Decoder is a free online tool that helps you decode X.509 SSL/TLS certificates in PEM format. It instantly shows important information like the issuer, expiry date, SAN entries, and fingerprint. All data is processed locally in your browser, so nothing is ever sent or stored elsewhere.
Cert Decoder's answer:
I built certdecoder.com over the weekend for my own needs. Sometimes in my work, I need to verify and check certificate details.
Cert Decoder's answer:
certdecoder.com was built using just JavaScript and HTML—simple, fast, and with all processing happening locally in your browser, so no certificate data is sent to any server
Cert Decoder's answer:
certdecoder.com is primarily built for developers, sysadmins, cybersecurity enthusiasts, and DevOps engineers.
Cert Decoder's answer:
Simple, fast, and reliable. Some similar tools can’t even decode basic certificates. I rigorously tested my tool with many real-world certificates and covered several edge cases where competitors fall short.
Cert Decoder's answer:
certdecoder.com is primarily built for developers, sysadmins, cybersecurity enthusiasts, and DevOps engineers.
Based on our record, Coverity Scan should be more popular than Cert Decoder. It has been mentiond 4 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
You can use Coverity for free on open source code. I use it on an app I open sourced for packet processing. https://scan.coverity.com/. Source: over 4 years ago
Scan.coverity.com — Static code analysis for Java, C/C++, C# and JavaScript, free for Open Source. - Source: dev.to / about 5 years ago
I personally remember Coverity Scan being completely offline for like 6 months while they tried to deal with infrastructure abuse from people mining bitcoin on their computing clusters. Source: over 5 years ago
> Does anyone know any good static analysers other than gcc's or clang's? Visual C++ as well, because since the XP SP2 issues, Microsoft has come up with SAL, which you can also use on your own code, https://docs.microsoft.com/en-us/cpp/code-quality/using-sal-annotations-to-reduce-c-cpp-code-defects?view=msvc-160 Then specialized tooling just for this purpose, just two examples, https://scan.coverity.com/... - Source: Hacker News / over 5 years ago
Why? Because I built certdecoder.com and couldn’t find a decent place to submit it. So I said screw it — I’ll build my own. With blackjack and hookers. - Source: dev.to / over 1 year ago
SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.
Checkmarx - The industry’s most comprehensive AppSec platform, Checkmarx One is fast, accurate, and accelerates your business.
Veracode - Veracode's application security software products are simpler and more scalable to increase the resiliency of your application infrastructure.
ReSharper - ReSharper is a productivity tool for visual studio that provides tools and features to help you manage your code.
PyCharm - Python & Django IDE with intelligent code completion, on-the-fly error checking, quick-fixes, and much more...
Appknox - Appknox is a cloud-based mobile app security solution to detect threats and vulnerabilities in the app.