Best Static Analysis Tools in 2026
Updated
39 static analysis tools ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
39ranked
0free plans on this page
5 Oct 2026last checked
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 26 Coverity Scan No phone app RecognisedPhone appDocumentedFree plan 5.3 Language support: Java, C, C++, C#, JavaScript, Ruby, PythonSecurity analysis: Yes
- 27 fortran-src No phone app RecognisedPhone appDocumentedFree plan 5.3 Language support: Fortran 77, Fortran 90Security analysis: NoIDE support: No
- 28 SpotBugs No phone app RecognisedPhone appDocumentedFree plan 5.3 Language support: JavaSecurity analysis: YesIDE support: Yes
- 29 CAST Imaging No phone app RecognisedPhone appDocumentedFree plan 5.2 Language support: 450+ languages, frameworks, and databases; examples include Java/JEE, .NET, C#, COBOL, and SQLSecurity analysis: Yes
- 30 Klocwork No phone app RecognisedPhone appDocumentedFree plan 5.2 IDE support: Yes
- 31 NDepend No phone app RecognisedPhone appDocumentedFree plan 5.2 Language support: .NET, C#, VB.NETSecurity analysis: YesIDE support: Yes
- 32 OpenText Fortify SAST No phone app RecognisedPhone appDocumentedFree plan 5.2 IDE support: Yes
- 33 Polyspace No phone app RecognisedPhone appDocumentedFree plan 5.2 Language support: C, C++, AdaSecurity analysis: YesIDE support: Yes
- 34 Brakeman No phone app RecognisedPhone appDocumentedFree plan 5.1 IDE support: Yes
- 35 DeepSource No phone app RecognisedPhone appDocumentedFree plan 5.1
- 36 Joern No phone app RecognisedPhone appDocumentedFree plan 5.1
- 37 Checkmarx One No phone app RecognisedPhone appDocumentedFree plan 5.0 IDE support: Yes
- 38 gosec No phone app RecognisedPhone appDocumentedFree plan 4.9
- 39 JArchitect No phone app RecognisedPhone appDocumentedFree plan 4.9
Compare all 14 in a table
| # | App | Score | Free plan | Free plan | Paid from | Language support | Security analysis |
|---|---|---|---|---|---|---|---|
| 26 | Coverity Scan | 5.3 | No | Yes | — | Java, C, C++, C#, JavaScript, Ruby, Python | Yes |
| 27 | fortran-src | 5.3 | No | Yes | — | Fortran 77, Fortran 90 | No |
| 28 | SpotBugs | 5.3 | No | — | — | Java | Yes |
| 29 | CAST Imaging | 5.2 | No | No | — | 450+ languages, frameworks, and databases; examples include Java/JEE, .NET, C#, COBOL, and SQL | Yes |
| 30 | Klocwork | 5.2 | No | — | — | — | — |
| 31 | NDepend | 5.2 | No | No | — | .NET, C#, VB.NET | Yes |
| 32 | OpenText Fortify SAST | 5.2 | No | — | — | — | — |
| 33 | Polyspace | 5.2 | No | No | — | C, C++, Ada | Yes |
| 34 | Brakeman | 5.1 | No | — | — | — | — |
| 35 | DeepSource | 5.1 | No | Yes | 24 /user/mo | — | — |
| 36 | Joern | 5.1 | No | Yes | — | — | — |
| 37 | Checkmarx One | 5.0 | No | No | — | — | — |
| 38 | gosec | 4.9 | No | Yes | — | — | — |
| 39 | JArchitect | 4.9 | No | — | — | — | — |
More in Developer Tools
All developer tools listsAccessibility Testing Software 168Log Management Software 107AI Coding Assistants 103Package Managers 93AI Agent Platforms 73Reverse Engineering Tools 73Software Composition Analysis Software 65Browser Automation Tools 63Integrated Development Environments 62Artifact repository software 60Code Playground Software 58Network Monitoring 56