Open Source Tools · Category
Tools that read source code to find insecure patterns and bug classes before the code ships.
Alternatives toCheckmarx OneVeracode
5 tools
Lightweight, pattern-based static analysis
Fast static analysis engine where rules look like the code they match, supporting many languages; the open-source Community Edition runs locally and in CI.
Security checker for Go source code
Inspects Go source code through its AST and SSA representation to find security problems such as injection, weak crypto and unsafe file handling.
Security linter for Python code
Static analyser from the PyCQA that builds an AST of each Python file and runs plugins to flag common security issues.
Static analyser for Solidity and Vyper
Trail of Bits' static analysis framework for Solidity and Vyper with dozens of vulnerability detectors, printers and an API for custom analyses.
Rust-based Solidity static analyser
Cyfrin's static analyser for Solidity written in Rust, with detectors, Markdown audit-style reports and editor integration.
