Semgrep

Semgrep offers code rule scanning and security analysis for teams finding risky patterns before code review.

Visit Semgrep official site

What it does

Rules perform static analysis on code patterns.

When to use it

When finding risky patterns before code review, calibrate rule noise against one real finding.

Snyk

Snyk offers dependency and code security scanning for teams checking known risks in dependencies.

  • security
  • scanning

Web Utility

SonarQube

SonarQube offers code quality and security analysis for teams tracking duplication and defect risks in a project.

  • security
  • scanning

Web Utility

TruffleHog

TruffleHog offers secret detection for repositories and storage for teams locating exposed API keys.

  • security
  • scanning

Web Utility