Explore static code analysis rules and tools to help you find and fix coding issues early, making your code cleaner and more secure across many languages.
Spot and fix code issues before you commit
SonarSource Rules is your go-to resource for understanding and applying static code analysis rules. Whether you're coding in Java, Python, C#, or many other languages, you can easily browse detailed explanations for thousands of rules that help you write cleaner, safer code. The site also connects directly to IDE extensions, so you can catch and fix issues as you work.
This site is especially useful if you want to prevent bugs and security flaws before they happen. With clear documentation and language-specific guidance, you'll know exactly how to improve your code quality and meet industry standards. Whether you're a professional developer or just starting out, SonarSource Rules helps you build better software from the start.
Discover websites similar to Rules.sonarsource.com based on shared categories, topics, and features.
Codacy helps developers improve code quality and security by automating checks, enforcing standards, and integrating seamlessly into your workflow.
Coverity Scan helps developers find bugs and security issues in their code by offering free static analysis for open source projects.
ProGuard protects and optimizes Java and Android apps by shrinking, obfuscating, and securing code for better performance and enhanced security.
JSHint helps you find errors and potential issues in your JavaScript code, making it easier to write clean, reliable, and maintainable programs.
Check your JavaScript code for errors and quality issues right in your browser—no downloads or uploads required.
SonarQube helps you automatically review code for quality and security issues, offering insights to help developers write clean, secure code faster.
TIOBE helps you measure and improve software code quality with tools, assessments, and insights for better maintainability and project outcomes.
Scrutinizer helps you manage software quality with automated code analysis, continuous integration, and smart tools for better code reviews.
PVS-Studio helps you find bugs and security issues in C, C++, C#, and Java code with advanced static analysis tools for multiple platforms.
AbsInt offers tools for static analysis and formal verification, helping ensure safety and predict timing in critical embedded and software systems.
Dependency Walker scans Windows executables and libraries to show detailed module dependencies and helps troubleshoot loading and execution issues.
Parasoft offers AI-powered automated testing tools to help teams improve software quality, ensure compliance, and deliver secure code faster.
Contrast Security offers real-time protection and testing for your apps and APIs, helping you find and fix vulnerabilities as you build and run software.
Cycode is a platform for managing application security, helping you find, prioritize, and fix vulnerabilities across your software development lifecycle.
Check the size and performance impact of any npm JavaScript package before adding it to your project. Quickly find out how dependencies affect your bundle.
AdaCore offers tools and SDKs for Ada, C, and C++ developers to build safe, secure software, plus resources for learning and improving code quality.
API Extractor streamlines TypeScript library development by helping you manage API documentation and package exports for smoother project workflows.
Veracode helps you find and fix security vulnerabilities in your software, including AI-generated code, with unified tools for safer app development and deployment.
Access free online tools for developers to format, validate, minify, convert, and analyze code and data in formats like JSON, XML, HTML, and more.
GitLab is an all-in-one DevSecOps platform where you can plan, develop, test, and deploy secure software efficiently with built-in AI-powered features.
Valgrind offers a suite of tools to help you detect memory and threading bugs, profile your programs, and improve code quality for better software reliability.
PMD is a free, extensible tool that checks source code for bugs and code quality issues in Java, Apex, and other languages with 400+ built-in rules.
FindBugs is a free tool for analyzing Java programs and detecting bugs using static code analysis, helping developers improve code quality and security.
PHPStan helps you spot bugs in your PHP code without needing to write tests. It’s a free, open-source tool for improving code quality and reliability.
Check your website’s HTML or XHTML for errors and standards compliance with this easy-to-use markup validation service from the World Wide Web Consortium.
Stylelint is a CSS linter that helps you find errors and enforce style rules in your stylesheets, making your code cleaner and more consistent.
NUnit offers a free, open-source framework for unit testing .NET code, helping developers write and run tests to ensure their projects work as intended.
Biome is a fast toolchain for web projects that formats and lints JavaScript, TypeScript, CSS, and more to save developers time and boost code quality.
Mypy is a tool for Python that lets you add optional static typing to your code, helping you catch errors early and write more reliable programs.
Validator.nu lets you check and validate HTML code for errors and standards, helping you keep your web pages clean, correct, and up to date.
Tracy is a PHP debugging tool that helps developers visualize errors, log issues, and inspect variables for easier, more effective troubleshooting.
SpotBugs helps you find bugs in Java code using static analysis. It's free, open-source software for making your Java projects more reliable.
Psalm is a free, open-source tool that scans your PHP code to find bugs and issues before they cause problems, helping you write safer, cleaner code.
ESLint helps you find and fix problems in your JavaScript code with easy-to-use linting tools that improve code quality and consistency.
HTML Tidy helps you clean up and fix HTML code, making your web pages more readable and standards-compliant. Free and open source for all users.
Codecov helps developers track code coverage, spot flaky tests, and improve code quality with insightful reports and easy integration into CI workflows.
webhint checks your website for best practices, accessibility, speed, and compatibility issues, helping you easily spot and fix common web development errors.
Error Prone helps programmers catch common coding mistakes early by analyzing code and highlighting potential bugs before software is released.
Flow is a static type checker for JavaScript that helps you catch bugs as you code, making your development process smoother and more reliable.
Coveralls tracks your code coverage, helping you spot untested areas and improve quality. Free for open source, easy setup with any CI service.