Software Alternatives & Reviews

FindBugs VS Semmle

Compare FindBugs VS Semmle and see what are their differences

FindBugs logo FindBugs

Findbugs is a tool that looks for bugs in Java code. Findbugs finds the bugs by analyzing computer software without actually executing programs. Using this software allows for easy debugging and repairing broken script. Read more about FindBugs.

Semmle logo Semmle

Semmle analytics platform that provides data-driven software engineering for visibility for every project, location, team and timeframe.
  • FindBugs Landing page
    Landing page //
    2019-01-11
  • Semmle Landing page
    Landing page //
    2022-10-25

FindBugs videos

Static Code Analysis With FindBugs: Step By Step Tutorial

Semmle videos

Semmle: The New Method of Code Analysis

More videos:

  • Review - 784: Semmle - The New Method of Code Analysis

Category Popularity

0-100% (relative to FindBugs and Semmle)
Code Coverage
52 52%
48% 48
Code Analysis
52 52%
48% 48
Code Review
49 49%
51% 51
Code Quality
53 53%
47% 47

User comments

Share your experience with using FindBugs and Semmle. For example, how are they different and which one is better?
Log in or Post with

Reviews

These are some of the external sources and on-site user reviews we've used to compare FindBugs and Semmle

FindBugs Reviews

TOP 40 Static Code Analysis Tools (Best Source Code Analysis Tools)
A tool that helps in analyzing C/C++, Java, C#, RPG and Python codes. Another good thing about this tool is it allows integration with free static checker tools like cppcheck, PMD, FindBugs. Basic Version of this tool is free but it comes with fewer features. Based on the need, you can decide whether the free version satisfies the requirement or not.

Semmle Reviews

We have no reviews of Semmle yet.
Be the first one to post

Social recommendations and mentions

Based on our record, FindBugs seems to be more popular. It has been mentiond 3 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.

FindBugs mentions (3)

  • Scanning for flaws?
    The tools generally depend on the programming language. You might be looking for something like a "linter" or static analyzer (i.e. FindBugs for Java). Source: over 2 years ago
  • Why we need multiple code analysis tools?
    These tools perform analysis on the application's source code without executing/running the code on a platform. In other words, a bot goes line by line of source code to find any bug defined by preconfigured policies/rules. It could be compared to manual code review, but the review is done by a bot. Mostly, code quality, coding standard aspects are targeted to be scanned. The biggest name in static code analysis... - Source: dev.to / over 2 years ago
  • Review of Java Static Analysis Tools
    FindBugs looks for bugs in Java Code, and this means over 400 different bugs. - Source: dev.to / about 3 years ago

Semmle mentions (0)

We have not tracked any mentions of Semmle yet. Tracking of Semmle recommendations started around Mar 2021.

What are some alternatives?

When comparing FindBugs and Semmle, you can also consider the following products

SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.

Pmd - PMD scans Java source code and looks for potential problems like:

Checkmarx - The industry’s most comprehensive AppSec platform, Checkmarx One is fast, accurate, and accelerates your business.

Codacy - Automatically reviews code style, security, duplication, complexity, and coverage on every change while tracking code quality throughout your sprints.

Coverity Scan - Find and fix defects in your Java, C/C++ or C# open source project for free

CodeClimate - Code Climate provides automated code review for your apps, letting you fix quality and security issues before they hit production. We check every commit, branch and pull request for changes in quality and potential vulnerabilities.