Related Searches
Latest from our Blog
Thu Apr 06 2023
As a developer, I have faced my fair share of security mishaps. I recall times when I accidentally exposed sensitive data in logs or sent a network request over a non-encrypted HTTP channel when HTTPS was available. I'm sure many of you can relate to these situations. We may not be security experts, but that doesn't mean we shouldn't take measures to protect our applications. This is where Bearer, a new security tool for Ruby and JavaScript apps (Java coming soon), comes into play.
You Can Contribute!
You can help to improve this list by voting for your favorite tools or adding new ones on Github
Suggest a tool
Stay Informed
Sign up to our newsletter and always stay up to date with the latest tools and trends in development
The Best Apex Static Analysis Tools (Linters/Formatters)
We rank 11 Apex linters, code analyzers, formatters, and more. Find and compare tools like Mega-Linter, PMD, Checkmarx CxSAST, and more. Please rate and review tools that you've used. This helps others find the best tools for their projects.
Help make this list better
Suggest Tools
11 Multi-Language Tools
Mega-Linter
Mega-Linter can handle any type of project thanks to its 70+ embedded Linters, its advanced reporting, runnable on any CI system or locally, with assisted installation and configuration, able to apply formatting and fixes
Fortify
A commercial static analysis platform that supports the scanning of C/C++, C#, VB.NET, VB6, ABAP/BSP, ActionScript, Apex, ASP.NET, Classic ASP, VB Script, Cobol, ColdFusion, HTML, Java, JS, JSP, MXML/Flex, Objective-C, PHP, PL/SQL, T-SQL, Python (2.6, 2.7), Ruby (1.9.3), Swift, Scala, VB, and XML.
Clayton
AI-powered code reviews for Salesforce. Secure your developments, enforce best practice and control your technical debt in real-time.
CodeScan
Code Quality and Security for Salesforce Developers. Made exclusively for the Salesforce platform, CodeScan’s code analysis solutions provide you with total visibility into your code health.
SonarCloud
Multi-language cloud-based static code analysis. History, trends, security hot-spots, pull request analysis and more. Free for open source.
StaticReviewer
Static Reviewer executes code checks according to the most relevant Secure Coding Standards, OWASP, CWE, CVE, CVSS, MISRA, CERT, for 40+ programming languages, using 1000+ built-in validation rules for Security, Deadcode & Best Practices Available a module for Software Composition Analysis (SCA) to find vulnerabilities in open source and third party libraries.
Help make this list better
Suggest Tools
Frequently Asked Questions
What are Apex tools?
Apex is a strongly typed, object-oriented, multitenant-aware programming language that allows developers to execute flow and transaction control statements on the Salesforce Platform. Apex code runs on the Force.com platform, a cloud computing platform as a service (PaaS) developed by Salesforce.com. Apex is used to develop triggers, batch Apex, and Visualforce pages.
What are the best Apex static analysis tools and linters?
The most popular Apex tools ranked by user votes are: Mega-Linter, PMD, Checkmarx CxSAST, Codiga, Codacy.
Which Apex tools are free to use?
Tools with a free plan include Codiga. On top of that, there are also a number of open source like Mega-Linter, PMD, ShiftLeft Scan.
