List of static analysis products

Veracode SCA scans open source dependencies for known vulnerabilities and makes recommendations on version updating.

Polyspace Code Prover proves the absence of run-time errors in handwritten and generated C and C++ source code without requiring developers and software testers to execute the code.

Static analysis tool from PolySpace, a subsidiary of MathWorks.

Using static code analysis, Polyspace Client for Ada and Polyspace Server for Ada provide code verification that proves the absence of overflow, divide-by-zero, out-of-bounds array access, and certain other run-time errors in source code.

Vicarius TOPIA product is an all in one vulnerability management platform. TOPIA analyzes code to identify zero-day exploits and help prioritize threats using Vicarious's trademarked xTags contextual protection system.

HP Code Advisor performs many lint-like checks plus checks for memory leaks, potential null pointer dereference, tainted data for file paths, and many others

C and C++ memory debugging tool from Parasoft

.NET static analysis tool from Parasoft

Java testing tool from Parasoft