Top 12 Open-Source Alternatives to Checkmarx

Product categories

Clean Code Code Analysis Code Collaboration Code Coverage Code Quality Code Review Code Security DevOps Tools Developer Tools Open Source Security Security & Privacy

Summary

The top open-source alternatives to Checkmarx are SonarQube, Snyk, and CodeClimate. One of the criteria for ordering this list is the number of mentions that products have on reliable external sources. You can suggest additional sources through the form here.

SonarQube Landing Page
1

SonarQube

SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.
Pricing:
- Open Source
- Freemium
- Free Trial
- $150.0 / Annually
#Code Analysis #Code Review #Code Coverage 1 social mentions
Snyk Landing Page
2

Snyk

Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.
Pricing:
- Open Source
#Security #Security Monitoring #Security CI 85 social mentions
CodeClimate Landing Page
3

CodeClimate

Code Climate provides automated code review for your apps, letting you fix quality and security issues before they hit production. We check every commit, branch and pull request for changes in quality and potential vulnerabilities.
Pricing:
- Open Source
#Code Coverage #Code Quality #Code Analysis 11 social mentions
Cppcheck Landing Page
4

Cppcheck

Cppcheck is an analysis tool for C/C++ code. It detects the types of bugs that the compilers normally fail to detect. The goal is no false positives. CppCheckDownload cppcheck for free.
Pricing:
- Open Source
#Code Analysis #Code Coverage #Code Review 10 social mentions
SonarCloud Landing Page
5

SonarCloud

Enhance your workflow with continuous code quality, SonarCloud automatically analyzes and decorates pull requests on GitHub, Bitbucket, Azure DevOps and GitLab on major languages.
Pricing:
- Open Source
- Freemium
- Free Trial
- €10.0 / Monthly (100,000 Lines of Code)
#Developer Tools #DevOps Tools #SAST 12 social mentions
ESLint Landing Page
6

ESLint

The fully pluggable JavaScript code quality tool
Pricing:
- Open Source
#Code Coverage #Developer Tools #Code Quality 229 social mentions
Sentinel Landing Page
7

Sentinel

An framework agnostic authentication & authorization library for ≥PHP 5.4.
Pricing:
- Open Source
#Web Application Security #Security & Privacy #Code Collaboration 1 social mentions
StyleCop Landing Page
8

StyleCop

Analyzes C# source code to enforce a set of style and consistency rules. - StyleCop/StyleCop
Pricing:
- Open Source
#Code Analysis #Code Coverage #Code Review
OWASP Dependency-Track Landing Page
9

OWASP Dependency-Track

OWASP Dependency-Track is an intelligent Software Composition Analysis (SCA) platform that allows...
Pricing:
- Open Source
#Security #Code Analysis #Security & Privacy 19 social mentions
Semgrep Landing Page
10

Semgrep

Semgrep is a fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time.
Pricing:
- Open Source
#Code Analysis #Code Coverage #Code Quality 7 social mentions
FindBugs Landing Page
11

FindBugs

Findbugs is a tool that looks for bugs in Java code. Findbugs finds the bugs by analyzing computer software without actually executing programs. Using this software allows for easy debugging and repairing broken script. Read more about FindBugs.
Pricing:
- Open Source
#Code Coverage #Code Analysis #Code Quality 3 social mentions
GitHub Landing Page
12

GitHub

Originally founded as a project to simplify sharing code, GitHub has grown into an application used by over a million people to store over two million code repositories, making GitHub the largest code host in the world.
Pricing:
- Open Source
#Code Collaboration #Git #Version Control 2039 social mentions