Best Static Analysis Tools in 2026
Updated
39 static analysis tools ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
39ranked
0free plans on this page
5 Oct 2026last checked
0 of the 14 here have a free tier you can use, 0 have open-source code on record, and 0 have full bars: free, open, on most of your devices and documented.
| # | App | Signal | Free tier | Open code | Devices | From | Score |
|---|---|---|---|---|---|---|---|
| 26 | Coverity ScanWeb | No signal | — | — | 1 of 6 | — | 5.2 |
| 27 | JArchitectWindows · Mac · Linux | One bar | — | — | 3 of 6 | — | 5.2 |
| 28 | JoernWindows · Mac · Linux | One bar | — | — | 3 of 6 | — | 5.2 |
| 29 | Scrutinizer CIWeb | No signal | — | — | 1 of 6 | — | 5.2 |
| 30 | Unused CSS FinderWeb | No signal | — | — | 1 of 6 | — | 5.2 |
| 31 | DeepSourceWeb | No signal | — | — | 1 of 6 | — | 5.1 |
| 32 | fortran-srcNo platforms listed | No signal | — | — | 0 of 6 | — | 5.1 |
| 33 | gosecMac · Linux | No signal | — | — | 2 of 6 | — | 5.1 |
| 34 | PolyspaceWeb · Windows · Mac · Linux | Two bars | — | — | 4 of 6 | — | 5.1 |
| 35 | BrakemanNo platforms listed | No signal | — | — | 0 of 6 | — | 5.0 |
| 36 | CAST ImagingWeb · Windows · Linux | Two bars | — | — | 3 of 6 | — | 5.0 |
| 37 | Checkmarx API SecurityWeb · Self-hosted · API | One bar | — | — | 1 of 6 | — | 5.0 |
| 38 | NDependWindows · Mac · Linux | Two bars | — | — | 3 of 6 | — | 5.0 |
| 39 | Checkmarx OneWeb | No signal | — | — | 1 of 6 | — | 4.7 |
Compare all 14 in a table
| # | App | Score | Free plan | Free plan | Paid from | Language support | Security analysis |
|---|---|---|---|---|---|---|---|
| 26 | Coverity Scan | 5.2 | No | Yes | — | Java, C, C++, C#, JavaScript, Ruby, Python | Yes |
| 27 | JArchitect | 5.2 | No | — | — | — | — |
| 28 | Joern | 5.2 | No | Yes | — | — | — |
| 29 | Scrutinizer CI | 5.2 | No | Yes | — | Java, JavaScript, PHP, Python, Ruby, Go, Groovy, Scala/SBT, Node.js, TypeScript | Yes |
| 30 | Unused CSS Finder | 5.2 | No | Yes | — | CSS, JavaScript | No |
| 31 | DeepSource | 5.1 | No | Yes | 24 /user/mo | — | — |
| 32 | fortran-src | 5.1 | No | Yes | — | Fortran 77, Fortran 90 | No |
| 33 | gosec | 5.1 | No | Yes | — | — | — |
| 34 | Polyspace | 5.1 | No | No | — | C, C++, Ada | Yes |
| 35 | Brakeman | 5.0 | No | — | — | — | — |
| 36 | CAST Imaging | 5.0 | No | No | — | 450+ languages, frameworks, and databases; examples include Java/JEE, .NET, C#, COBOL, and SQL | Yes |
| 37 | Checkmarx API Security | 5.0 | No | No | — | — | — |
| 38 | NDepend | 5.0 | No | No | — | .NET, C#, VB.NET | Yes |
| 39 | Checkmarx One | 4.7 | No | No | — | — | — |
More in Developer Tools
All developer tools listsAccessibility Testing Software 168Log Management Software 107AI Coding Assistants 103Package Managers 93AI Agent Platforms 73Reverse Engineering Tools 73Software Composition Analysis Software 65Browser Automation Tools 63Integrated Development Environments 62Artifact repository software 60Code Playground Software 58Network Monitoring 56