Flawfinder Alternatives

Cppcheck is an analysis tool for C/C++ code. It detects the types of bugs that the compilers normally fail to detect. The goal is no false positives. CppCheckDownload cppcheck for free.

Open Source

The Clang Static Analyzer is a source code analysis tool that finds bugs in C, C++, and Objective-C...

Create FREE one-page sites with limey.io. Receive gifts. Capture leads. Share your favorite photos. All in a matter of minutes.

Visit website freemium $5.0 / Monthly (Lite paid plan)

SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.

Open Source freemium $150.0 / Annually

Ensure compliance with a variety of functional safety, security, and coding standards in embedded C/C++ software.

lgtm.com is a platform for code analytics.

Find and fix defects in your Java, C/C++ or C# open source project for free

PVS-Studio is a useful piece of software for detecting problems in source code. The software examines program codes written in C, C++, and C# for any problems that might prohibit the code from functioning properly.

VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL.

Polyspace is a suite of static code analysis products developed by Matlab to help software developers, QA Testers, and engineers find critical problems in their code and fix them before they become a serious threat.

Liverpool Data Research Associates (LDRA) is a provider of software analysis, test and requirements...

Perforce Helix QAC is a handy, reliable, and highly rated Static Code Analysis solution that aids you in the process of finding vulnerabilities and problems within your C/C++ code.

Klocwork is a static code analysis and SAST tool for C, C++, C#, Java, and JavaScript.

Splint Home Page