Best Static Analysis Tools in 2026
Updated
In short: Codacy is ranked #1 of 30 as of 4 October 2026, ahead of Qodana and PMD. The best-ranked option with a free plan is Qodana. The lowest first paid tier on this page is Codacy at $1.50/mo.
Static analysis tools examine code without running it, helping developers compare the checks and workflow connections available across options. Compared on language support, IDE support, security analysis, and custom rules, entries such as Squish, Codacy, and Infer offer starting points for assessing fit with your codebase and preferred development environment. CI/CD support and deployment are also useful distinctions when considering where analysis can sit in your process. Check the listed free-plan availability and paid-from pricing alongside those capabilities. Think about which languages you work in, whether configurable rules matter, and how you want code checks to connect with your development workflow.
30 static analysis tools ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 1 Codacy No phone app RecognisedPhone appDocumentedFree plan 8.3$1.50/mo Language support: Apex, AsyncAPI, AWS CloudFormation, Azure Resource Manager Templates, C, C++, C#, CoffeeScript, Crystal, CSS, Dart, Dockerfile, Elixir, GitHub Actions, Go, Groovy, Helm, Java, OpenAPI, PHP, PL/SQL, PostgreSQL, PowerShell, Python, Ruby, Rust, Sass, Scala, Serverless Framework, Shell, Swift, SQL, Terraform, Transact-SQL, TypeScript, Unity, Velocity, Visual Basic, Visualforce, XML, XSL, YAMLSecurity analysis: YesIDE support: Yes
- 2 Qodana No phone app RecognisedPhone appDocumentedFree plan 8.1$5/mo Language support: 60+ languages, including Java, JavaScript, TypeScript, PHP, Kotlin, Python, Go, C#, C/C++, Ruby, Rust, Groovy, VB.NET, and Android JavaSecurity analysis: YesIDE support: Yes
- 3 PMD No phone app RecognisedPhone appDocumentedFree plan 8.0Free
- 4 GitHub CodeQL No phone app RecognisedPhone appDocumentedFree plan 7.9$30/mo IDE support: Yes
- 5 CodeScene No phone app RecognisedPhone appDocumentedFree plan 7.6€18/mo Language support: C, C++, C#, Java, Groovy, JavaScript, TypeScript, React, ECMAScript Modules, Vue.js, Objective-C 2.0, Scala, Python, Swift, Go, Dart, Visual Basic .NET, PHP, Ruby, Rational Software Architect Models (C++), Kotlin, Perl, Erlang, Elixir, Clojure, PowerShell, TCL, Apex (Salesforce), and TerraformIDE support: Yes
- 6 Clang Static Analyzer No phone app RecognisedPhone appDocumentedFree plan 7.5Free Language support: C, C++, Objective-CSecurity analysis: YesIDE support: Yes
- 7 Black Duck Coverity No phone app RecognisedPhone appDocumentedFree plan 7.0 IDE support: Yes
- 8 DeepSource No phone app RecognisedPhone appDocumentedFree plan 6.9
- 9 CodeChecker No phone app RecognisedPhone appDocumentedFree plan 6.9 Language support: C/C++, C#, Java, Python, JavaScript, TypeScript, Go, MarkdownSecurity analysis: YesIDE support: Yes
- 10 Infer No phone app RecognisedPhone appDocumentedFree plan 6.8Free Language support: Java, C, C++, Objective-C, ErlangSecurity analysis: Yes
- 11 OpenText Fortify SAST No phone app RecognisedPhone appDocumentedFree plan 6.7 IDE support: Yes
- 12 Klocwork No phone app RecognisedPhone appDocumentedFree plan 6.6 IDE support: Yes
- 13 PVS-Studio No phone app RecognisedPhone appDocumentedFree plan 6.6 IDE support: Yes
- 14 Cppcheck No phone app RecognisedPhone appDocumentedFree plan 6.6Free
- 15 Perforce QAC (formerly Helix QAC) No phone app RecognisedPhone appDocumentedFree plan 6.4 Language support: C, C++, RustSecurity analysis: YesIDE support: Yes
- 16 Understand No phone app RecognisedPhone appDocumentedFree plan 6.4$8343.33/mo Language support: Ada, Assembly, C, C++, Objective-C, Objective-C++, CUDA, C#, Fortran, Java, JOVIAL, Pascal/Delphi, Python, Rust, VHDL, Visual Basic/VB.NET, HTML, CSS, JavaScript, TypeScript, PHP, XMLSecurity analysis: YesIDE support: Yes
- 17 Polyspace No phone app RecognisedPhone appDocumentedFree plan 6.2 Language support: C, C++, AdaSecurity analysis: YesIDE support: Yes
- 18 Flawfinder No phone app RecognisedPhone appDocumentedFree plan 6.2Free
- 19 LDRA Tool Suite No phone app RecognisedPhone appDocumentedFree plan 6.1 Language support: C, C++, Java, Ada95, and AssemblersSecurity analysis: YesIDE support: Yes
- 20 Checkmarx One No phone app RecognisedPhone appDocumentedFree plan 5.8 IDE support: Yes
- 21 SpotBugs No phone app RecognisedPhone appDocumentedFree plan 5.8 Language support: JavaSecurity analysis: YesIDE support: Yes
- 22 NDepend No phone app RecognisedPhone appDocumentedFree plan 5.7 Language support: .NET, C#, VB.NETSecurity analysis: YesIDE support: Yes
- 23 Coverity Scan No phone app RecognisedPhone appDocumentedFree plan 5.5 Language support: Java, C, C++, C#, JavaScript, Ruby, PythonSecurity analysis: Yes
- 24 Scrutinizer CI No phone app RecognisedPhone appDocumentedFree plan 5.5 Language support: Java, JavaScript, PHP, Python, Ruby, Go, Groovy, Scala/SBT, Node.js, TypeScriptSecurity analysis: Yes
- 25 Joern No phone app RecognisedPhone appDocumentedFree plan 5.4
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which static analysis tool is ranked first on Samsung Mobile US Press?
Codacy is ranked #1 of 30 with a score of 8.3. Qodana is second and PMD third.
How many of these have a free plan?
9 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Codacy has the lowest first paid tier we found: $1.50/mo.
How is this list ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.