Companies in the Static program analysis industry

Positive Technologies is a company specializing in developing information security solutions.

Checkmarx is a company that makes static code analysis software.

Veracode Dynamic Analysis provides context around how an application responded to an attack and how it was exploited.

PullRequest is a company offering code review as a service founded in 2017 by Lyal Avery, Tyler Mann and Patrick Barsallo.

SonarQube is a code quality and security tool for developers.

Automated code review tool that helps developers save time and manage technical debt.

MathWorks develops, sells, and supports MATLAB and Simulink to help create algorithms, analytics, visualizations, and machine learning models

r2c is a San Francisco startup in the software security and reliability sector. The company maintains open source tools semgrep and bento.

Code Climate is a company founded in 2011 by Bryan Helmkamp.

Parasoft is a California-based company building tools to help developers automate time-consuming testing tasks and providing management analytics

SmartDec is a blockchain and software development company providing software auditing, smart contract auditing, system software development, and initial coin offering (ICO) consulting.

Vicarious identify the vulnerabilities in the software without involving the vendor and protect it before the hackers take advantage of it, even in compiled applications.

Coverity static analysis was developed by Synopsys and helps development and security teams find and fix defects and security flaws in code.

GrammaTech is a leading developer of software-assurance tools and advanced cyber-security solutions.

AttackFlow is a static code analysis company which develops innovative solutions for secure app development.

Security Reviewer is an Italian company that builds software which scans a large number of different languages source code to find security vulnerabilities.

Immunity offers exploitation development tools, vulnerability assessment tools, and remote control technologies.

Pentest Limited is a Altrincham-based cybersecurity company providing penetration testing, red teaming and offensive information security services.

Subsidiary of MathWorks providing automated static code analysis using formal methods for C/C++ and Ada

Semgrep is a company founded by Isaac Evans.

Cyberkov services include Pentesting, Vulnerability Assessments, Digital Forensics, Incident Response, Source Code Analysis and Security Training.

QA Systems provides software testing solutions for safety and business critical sectors and software safety and security standards.

SecuLetter is a company founded in 2015.

CodeScan is an end-to-end static code analysis solution.

Sourcetrail uses static analysis to provide code search and dependency visualization to maintain unfamiliar source code.