Skip to content
SPECIFICTION
Get listed

Static Analysis Tools

Alternatives to Semgrep Secrets

The tools Specifiction weighs against Semgrep Secrets, from its list of static analysis tools, each with its plans, platforms and spec score.

  1. 01 DeepSource

    DeepSource suits software teams that want automated pull-request checks, security scanning, and code coverage controls.

    From $2/mo Free plan Web · Windows · macOS · Linux
    9.2 Visit Specs
  2. 02 Qodana

    Qodana suits development teams that want code analysis and configurable checks in CI/CD.

    From $5/mo Free plan Web · Windows · macOS · Linux
    8.8 Visit Specs
  3. 03 Cppcheck

    It suits C and C++ developers seeking static analysis, including teams working with embedded syntax or safety-critical standards.

    Free plan Open source Windows · macOS · Linux · Self-hosted
    8.7 Visit Specs
  4. 04 CAST Imaging
    From $0.17/mo Free trial Web · Windows · Linux · API
    8.6 Visit Specs
  5. 05 CodeScene

    CodeScene is suited to engineering teams evaluating technical debt, code health, team knowledge distribution, and delivery patterns.

    From €18/mo Free plan Web · Linux · API · Self-hosted
    8.6 Visit Specs
  6. 06 Gitar

    Gitar suits engineering teams managing pull requests and CI across supported code hosts.

    From $20/mo Free plan Web · API · Self-hosted
    8.6 Visit Specs
  7. 07 gosec

    gosec suits Go developers and security teams scanning source code locally or in CI/CD.

    Free plan Open source macOS · Linux · API · Self-hosted
    8.6 Visit Specs
  8. 08 GitHub CodeQL
    From $30/mo Free plan Web · Windows · macOS · Linux
    8.5 Visit Specs
  9. 09 Infer

    Infer suits developers and teams who want static checks for supported languages in a build or CI workflow.

    Free plan Web · macOS · Linux · Self-hosted
    8.5 Visit Specs
  10. 10 Understand

    Understand suits developers and teams that need to navigate or analyze source code across supported languages, including in automated or air-gapped workflows.

    From $100/mo Free trial Windows · macOS · Linux · API
    8.5 Visit Specs
  11. 11 Codacy

    Codacy suits engineering teams seeking pull-request review and security scanning in a cloud platform.

    From $1.50/mo Free plan Web · Browser extension
    8.3 Visit Specs
  12. 12 Clang Static Analyzer

    Clang Static Analyzer suits developers working in C, C++, or Objective-C who want static bug analysis within a Clang-based workflow.

    Free plan Windows · macOS · Linux
    8.2 Visit Specs
  13. 13 PMD

    PMD suits developers and teams who want static checks and duplicate-code detection in their build or CI workflows.

    Free plan Windows · macOS · Linux · Self-hosted
    8.2 Visit Specs
  14. 14 Brakeman
    Free plan Linux · Self-hosted
    8.0 Visit Specs
  15. 15 Flawfinder

    It suits developers looking for potential security problems in C or C++ application source before release.

    Free plan Windows · macOS · Linux · Self-hosted
    8.0 Visit Specs
  16. 16 Black Duck Coverity

    Coverity suits enterprise development teams that need static source-code analysis across languages and frameworks.

    Web · Windows · macOS · Linux
    7.8 Visit Specs
  17. 17 Coverity Scan
    Free plan Web · API
    7.8 Visit Specs
  18. 18 JArchitect
    Free trial Windows · macOS · Linux · API
    7.8 Visit Specs
  19. 19 Joern

    It suits security researchers and development teams building code analysis or custom security checks, including CI workflows.

    Windows · macOS · Linux · API
    7.7 Visit Specs
  20. 20 LDRA Tool Suite

    The suite suits teams developing safety-, security-, or mission-critical software that need testing, coverage analysis, compliance reporting, and traceability.

    Free trial Windows · macOS · Linux · Self-hosted
    7.7 Visit Specs
  21. 21 NDepend
    Free trial Windows · macOS · Linux · API
    7.7 Visit Specs
  22. 22 Scrutinizer CI
    From €49/mo Free trial Web · API · Browser extension
    7.7 Visit Specs
  23. 23 CodeChecker

    CodeChecker fits development teams that need analyzers, report review, editor support, and CI integrations across multiple languages.

    Web · Windows · macOS · Linux
    7.5 Visit Specs
  24. 24 PVS-Studio

    It suits developers and teams who want source-code analysis across the listed languages and operating systems.

    Free trial Windows · macOS · Linux
    7.4 Visit Specs
  25. 25 SpotBugs
    Free plan Windows · macOS · Linux
    7.3 Visit Specs
  26. 26 Unused CSS Finder
    Free plan Web
    7.1 Visit Specs
  27. 27 Kythe
    macOS · Linux · API · Self-hosted
    6.7 Visit Specs
  28. 28 emba
    Linux
    6.6 Visit Specs
  29. 29 Axivion Suite
    Web · Windows · macOS · Linux
    6.5 Visit Specs
  30. 30 Checkmarx One

    It suits development and security teams that want source-code checks integrated with CI/CD, pull requests, and IDE workflows.

    Web
    6.0 Visit Specs

Semgrep Secrets, head to head