Skip to content
whatismyalternative

Cppcheck

A tool for static C/C++ code analysis

Visit Cppcheck

Cppcheck is a static analysis tool for C and C++ code that detects bugs, undefined behaviour, and dangerous coding constructs, with a focus on minimizing false positives. It can analyze code containing non-standard syntax, which is common in embedded projects. The tool is available as open source and as a commercial edition called Cppcheck Premium, which offers extended functionality and support.

The tool provides both a command line interface and a graphical user interface, using unsound flow sensitive analysis with bi-directional data flow. Checks cover undefined behaviour categories such as dead pointers, division by zero, integer overflows, invalid bit shift operands, invalid conversions, invalid STL usage, memory management issues, null pointer dereferences, out-of-bounds access, uninitialized variables, and writes to const data. Coding standard support includes MISRA C 2012 (with amendments), MISRA C 2023, MISRA C++ 2008 and 2023, CERT C and C++, and partial AUTOSAR coverage, with some rules available only in the Premium edition. Cppcheck integrates with development tools including CLion, Code::Blocks, Eclipse, Jenkins, KDevelop, QtCreator, Visual Studio, VS Code, Vim, and various CI and pre-commit hook setups.

12 alternatives to Cppcheck

Ranked by how well each tool replaces Cppcheck: shared features, audience, price and popularity.

  1. Checkstyle

    Automate Java coding standards with Checkstyle.

    Covers 1 of 9 key features.

    Free planOpen source
    62 out of 100 matchContact sales

  2. Coverity Scan

    Static analysis for open source projects.

    Covers 2 of 9 key features.

    Free plan
    62 out of 100 matchFree

  3. Clang Static Analyzer

    A source code analysis tool that finds bugs in C, C++, and Objective-C programs.

    Covers 1 of 9 key features.

    Open source
    61 out of 100 match—

  4. PVS-Studio

    A static analyzer for C, C++, C#, Java, Go, JavaScript and TypeScript code. Works on, and,

    Covers 1 of 9 key features.

    Free plan
    60 out of 100 matchFree

  5. JSHint

    A static code analysis tool for JavaScript

    Covers 1 of 9 key features.

    Open source
    60 out of 100 match—

  6. Diffchecker

    Compare text, files, and code to find differences online or offline.

    Covers 0 of 9 key features.

    Free plan
    57 out of 100 match$15/mo

  7. Codacy

    Code quality and security for AI-assisted engineering.

    Covers 0 of 9 key features.

    Free plan
    57 out of 100 match$18/mo

  8. NDepend

    Static code analysis tool for .NET codebases

    Covers 1 of 9 key features.

    56 out of 100 match—

  9. Valgrind

    An instrumentation framework for building dynamic analysis tools that detect memory and Th

    Covers 1 of 9 key features.

    Free planOpen source
    56 out of 100 matchFree

  10. Codecov

    Code coverage testing and insights for pull requests

    Covers 0 of 9 key features.

    Free plan
    55 out of 100 match$5/mo

  11. Parasoft

    Intelligent automated testing covering every SDLC stage.

    Covers 1 of 9 key features.

    54 out of 100 matchContact sales

  12. Meterian

    Open source vulnerability scanner and software composition analysis for secure software

    Covers 1 of 9 key features.

    Free plan
    53 out of 100 matchContact sales