List of static program analysis products

Checkmarx is a company that makes static code analysis software.

Veracode Dynamic Analysis provides context around how an application responded to an attack and how it was exploited.

Veracode SCA scans open source dependencies for known vulnerabilities and makes recommendations on version updating.

Polyspace Code Prover proves the absence of run-time errors in handwritten and generated C and C++ source code without requiring developers and software testers to execute the code.

Bento is an open source static program analysis package released by San Francisco-based startup r2c.

We’re Semgrep, a software security company. Our mission is to profoundly improve software security and reliability to safeguard human progress.

Coverity static analysis was developed by Synopsys and helps development and security teams find and fix defects and security flaws in code.

Static analysis tool from PolySpace, a subsidiary of MathWorks.

Using static code analysis, Polyspace Client for Ada and Polyspace Server for Ada provide code verification that proves the absence of overflow, divide-by-zero, out-of-bounds array access, and certain other run-time errors in source code.

Vicarius TOPIA product is an all in one vulnerability management platform. TOPIA analyzes code to identify zero-day exploits and help prioritize threats using Vicarious's trademarked xTags contextual protection system.

JProfiler is a Java profiler tool used to help users and developers resolve performance bottlenecks, pin down memory leaks, and understand threading issues.

C and C++ testing suite from Parasoft

C and C++ memory debugging tool from Parasoft

.NET static analysis tool from Parasoft

Java testing tool from Parasoft