Splint Alternatives & Competitors

Find and fix defects in your Java, C/C++ or C# open source project for free.

Key Coverity Scan features:

Comprehensive Analysis Wide Language Support Integration with Development Workflow Actionable Reports

Cppcheck is an analysis tool for C/C++ code. It detects the types of bugs that the compilers normally fail to detect. The goal is no false positives. CppCheckDownload cppcheck for free.

Key Cppcheck features:

Open Source Static Analysis Wide Platform Support Integrated with IDEs

Open Source

PlexTrac is the #1 AI-powered platform for pentest reporting and threat exposure management, helping cybersecurity teams efficiently address the most critical threats and vulnerabilities.

Key PlexTrac features:

Comprehensive Reporting Collaboration and Integration Centralized Vulnerability Management User-Friendly Interface

Visit website

ShellCheck finds bugs in your shell scripts.

Key Shellcheck features:

Static Code Analysis Comprehensive Error Detection Suggestions for Improvements Wide Compatibility

Open Source

The industry’s most comprehensive AppSec platform, Checkmarx One is fast, accurate, and accelerates your business.

Key Checkmarx features:

Comprehensive Coverage Integration Capabilities Customization User-Friendly Interface

David A. Wheeler's Page for Flawfinder.

Key Flawfinder features:

Ease of Use Open Source Focus on C/C++ Speed

SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.

Key SonarQube features:

Comprehensive code analysis Multi-language support Continuous integration (CI) integration Customizable rules

Open Source freemium $150 / Annually

PVS-Studio is a useful piece of software for detecting problems in source code. The software examines program codes written in C, C++, and C# for any problems that might prohibit the code from functioning properly.

Key PVS-Studio features:

Comprehensive Code Analysis Integration with Development Environments Cross-Platform Support Rich Set of Diagnostic Rules

CodeSonar, produced by GrammaTech, is source and binary code analysis software that finds critical defects that can crash systems, result in unexpected operations, threaten security, and more.

Key CodeSonar features:

Comprehensive Analysis Integration Capabilities Scalability Customizability

AttackFlow Corporate Web Site.

Key AttackFlow features:

Comprehensive Threat Visibility Automated Threat Identification Integrations with Other Tools User-friendly Interface

Appknox is a cloud-based mobile app security solution to detect threats and vulnerabilities in the app.

Key Appknox features:

Comprehensive Security Testing Automation User-Friendly Interface Prompt Reporting

Open-source container vulnerability analysis service.

Key CoreOS Clair features:

Security Focused Open Source Rapid Vulnerability Updates Integration Friendly

An framework agnostic authentication & authorization library for ≥PHP 5.4.

Key Sentinel features:

Comprehensive Authentication Role-based Access Control Highly Customizable Laravel Integration

Open Source

EDoC++ is a C++ source analysis tool designed to identify problems associated with the use of exceptions in C++ code and document the propogation of exceptions through C++ source code.