Instead of GitHub CodeQL
GitHub CodeQL alternatives
Apps that do what GitHub CodeQL does, from the sast tools list, the ones you can start free with first.
- 1
Semgrep Code
Free plan Open source APIExtensionLinux+4 - 2
Bandit
Free plan LinuxMacSelf-hosted - 3
Bearer
Free plan LinuxMac - 4
Flawfinder
Free plan LinuxMacSelf-hosted+1 - 5
Brakeman
Free plan LinuxSelf-hosted7.3 Visit site - 6
gosec
Free plan LinuxMacSelf-hosted - 7
MobSF
Free plan APILinuxMac+3 - 8
NaiveSystems Analyze
Free plan LinuxMacSelf-hosted+1 - 9
NodeJsScan
Free plan APILinuxMac+2 - 10
Joern
Free plan APILinuxMac+2 - 11
PVS-Studio
Free plan LinuxMacWindows - 12
Security Code Scan
Free plan LinuxSelf-hostedWindows - 13
CodeSonar
Free trial LinuxSelf-hostedWeb+1 - 14
Fluid Attacks
Free trial APILinuxMac+2 - 15
Kiuwan Code Security
Free trial APILinuxMac+3 - 16
Black Duck Coverity
Paid LinuxMacSelf-hosted+2 - 17
DerScanner
Paid APILinuxSelf-hosted+2 - 18
Checkmarx API Security
Paid APISelf-hostedWeb - 19
HCL AppScan Source
Paid LinuxSelf-hostedWindows - 20
Qwiet AI
Paid APIExtensionLinux+3 - 21
ZeroPath
Paid APILinuxMac+3 - 22
Klocwork
Paid LinuxWebWindows - 23
OpenText Fortify SAST
Paid LinuxMacWeb+1 - 24
Checkmarx One
Paid Web