Top 6 Open-Source Alternatives to Synopsys Static Application Security Testing

Synopsys Static Application Security Testing

Synopsys offers Static Application Security Testing solutions to find and eliminate software security vulnerabilities within the code.

(0 reviews)

Post a review

Alternatives Status Page

Verify Synopsys Static Application Security Testing Edit

Product categories

Clean Code Code Analysis Code Coverage Code Quality Code Review Coding Developer Tools Development Open Source Static Code Analysis

Summary

The top open-source alternatives to Synopsys Static Application Security Testing are Coveralls, CodeClimate, and SonarQube. One of the criteria for ordering this list is the number of mentions that products have on reliable external sources. You can suggest additional sources through the form here.

Coveralls Landing Page
1

Coveralls

Coveralls is a code coverage history and tracking tool that tests coverage reports and statistics for engineering teams.
Pricing:
- Open Source
#Code Review #Code Coverage #Code Quality 14 social mentions
CodeClimate Landing Page
2

CodeClimate

Code Climate provides automated code review for your apps, letting you fix quality and security issues before they hit production. We check every commit, branch and pull request for changes in quality and potential vulnerabilities.
Pricing:
- Open Source
#Code Review #Code Coverage #Code Quality 19 social mentions
SonarQube Landing Page
3

SonarQube

SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.
Pricing:
- Open Source
- Freemium
- Free Trial
- $150.0 / Annually
#Open Source #Code Review #Developer Tools 1 social mentions
Codacy Landing Page
4

Codacy

Automatically reviews code style, security, duplication, complexity, and coverage on every change while tracking code quality throughout your sprints.
Pricing:
- Open Source
#Code Coverage #Code Quality #Static Code Analysis 4 social mentions
Semgrep Landing Page
5

Semgrep

Semgrep is a fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time.
Pricing:
- Open Source
#Developer Tools #Code Coverage #Code Quality 23 social mentions
Cppcheck Landing Page
6

Cppcheck

Cppcheck is an analysis tool for C/C++ code. It detects the types of bugs that the compilers normally fail to detect. The goal is no false positives. CppCheckDownload cppcheck for free.
Pricing:
- Open Source
#Code Review #Code Coverage #Development 10 social mentions