CodeQL (GitHub)

Security findings you can express as a query.

What it is sold for

Writing custom static analysis for a specific bug class.

Same shelf

The rest of testing and code quality, alphabetically. Sharing a category is a filing decision, not a relationship.

• AICodeSlopMonitor
  Scans public repositories and reports how much of the code looks machine-generated.
• Amazon CodeGuru Reviewer
  Amazon's automated review service. The address now serves CodeGuru Profiler, which is about runtime cost rather than review.
• Applitools
  Visual regression testing. Compares rendered screenshots rather than the DOM, so a layout that moves is caught even when the markup did not change.
• Autify
  Test automation aimed at quality teams rather than at engineers, with tests authored and maintained without code.
• Beeceptor
  Mock API endpoints created in seconds, generated from a prompt or from captured traffic, across REST, GraphQL and gRPC.
• BitDive
  Records real Java runtime behaviour and turns it into regression tests and review verdicts.
• Blackfire.io
  Continuous profiling for PHP and other runtimes, aimed at finding the slow function rather than the slow request.
• Checksum AI
  Generates, runs and maintains end-to-end tests automatically, and claims to resolve most of its own failures.

All 66 in testing and code quality