Tools

phpstan/phpstan

PHP Static Analysis Tool - discover bugs in your code without running it!

pycqa/bandit

Bandit is a tool designed to find common security issues in Python code.

pmd/pmd

An extensible multilanguage static code analyzer.

zrax/pycdc

C++ python bytecode disassembler and decompiler

knostic/openant

OpenAnt from Knostic is the leading open source LLM-based vulnerability discovery product, helping defenders proactively find verified security flaws…

wireghoul/graudit

grep rough audit - source code auditing tool

nccgroup/vcg

VisualCodeGrepper - Code security scanning tool.

mhaskar/bughound

Static code analysis tool based on Elasticsearch

slowql/slowql

Next-generation SQL static analyzer written in Rust. 282+ rules. Zero false positives. Security, performance, reliability, cost, compliance, quality.…

kira2040k/php_code_analysis

Static PHP code scanner that detects SQL injection, XSS, SSRF, LFI, command injection, insecure deserialization, and other web vulnerabilities in…

chris-anley/cq

CQ, a code security scanner

redsection/jspanda

client-side prototype pullution vulnerability scanner

0x3c3e/slides

CodeQL + DTrace = Memory Disclosure Vulnerabilities in XNU

owasp/abap-code-scanner

ABAP Code Analyzer

osmankandemir/static-code-analysis-helper

Scans project source code across 16 languages to flag dangerous functions linked to SQLi, XSS, SSRF, command injection, weak crypto, and other web…

nccgroup/matt.net

Matt.Net is a simple GUI wrapper around Microsoft's CAT.NET Code Auditing Tool

jas502n/decompiler_tools

Tools

nccgroup/secretscrub

Processes SARIF output from static analysis tools to detect and redact hard-coded secrets in source code, creating a clean copy without the original…