SonarSource Alternatives & Competitors

Cppcheck is an analysis tool for C/C++ code. It detects the types of bugs that the compilers normally fail to detect. The goal is no false positives. CppCheckDownload cppcheck for free.

Key Cppcheck features:

Open Source Static Analysis Wide Platform Support Integrated with IDEs

Open Source

lgtm.com is a platform for code analytics.

Key lgtm.com features:

Automated Code Review Multi-language Support Integrations Database of Queries

Scan Azure and AWS resources against 621 policy rules. Auto-remediate findings, track compliance frameworks, integrate via API.

Try for free freemium €99 / Monthly

The Clang Static Analyzer is a source code analysis tool that finds bugs in C, C++, and Objective-C...

Key Clang Static Analyzer features:

Integration with Clang Open Source Path-sensitive Analysis Deep C/C++ Support

VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL.

Key VisualCodeGrepper features:

Open Source Multi-language Support User-friendly Interface Static Code Analysis

Ensure compliance with a variety of functional safety, security, and coding standards in embedded C/C++ software.

Key Parasoft C/C++test features:

Comprehensive Analysis Automated Testing Compliance with Standards Integration with Development Environments

Liverpool Data Research Associates (LDRA) is a provider of software analysis, test and requirements...

Key LDRA Testbed features:

Comprehensive Static and Dynamic Analysis Support for Multiple Standards Integration Capabilities Detailed Reporting and Metrics

Polyspace is a suite of static code analysis products developed by Matlab to help software developers, QA Testers, and engineers find critical problems in their code and fix them before they become a serious threat.

Key Polyspace features:

Static Code Analysis MISRA Compliance Automatic Bug Detection Concurrency Analysis

David A. Wheeler's Page for Flawfinder.

Key Flawfinder features:

Ease of Use Open Source Focus on C/C++ Speed

Perforce Helix QAC is a handy, reliable, and highly rated Static Code Analysis solution that aids you in the process of finding vulnerabilities and problems within your C/C++ code.

Key Perforce Helix QAC features:

Comprehensive Static Code Analysis MISRA Compliance Detailed Reporting Integration Capabilities

Unleash AI on Your Code Reviews with CodeRabbit.

Key CodeRabbit features:

Efficiency Collaboration User-Friendly Interface Integration Capabilities

Open Source

Code health tracking for AI-assisted engineering teams. Multi-repo analysis, PR review, conventions, architecture, security.

Key Octokraft features:

AI-Powered Automation Multi-Channel Integration Time Savings User-Friendly Interface

PVS-Studio is a useful piece of software for detecting problems in source code. The software examines program codes written in C, C++, and C# for any problems that might prohibit the code from functioning properly.

Key PVS-Studio features:

Comprehensive Code Analysis Integration with Development Environments Cross-Platform Support Rich Set of Diagnostic Rules

Secure your code, cloud, and runtime in one central system. Find and fix vulnerabilities fast and automatically.

Key Aikido Security features:

Holistic Approach User-Friendly Interface Advanced Threat Detection Scalability

freemium $314 / Monthly (Standard)