# Top Free Secure Code Review Software

Check out our list of free Secure Code Review Software. Products featured on this list are the ones that offer a free trial version. As with most free versions, there are limitations, typically time or features.

If you'd like to see more products and to evaluate additional feature options, compare all [Secure Code Review Software](https://www.g2.com/categories/secure-code-review) to ensure you get the right product.

## View Free Secure Code Review Software

G2 takes pride in showing unbiased reviews on user satisfaction in our ratings and reports. We do not allow paid placements in any of our ratings, rankings, or reports. Learn about our [scoring methodologies](https://research.g2.com/g2-scoring-methodologies).

**27** Secure Code Review Products Available
View all [Secure Code Review Software](https://www.g2.com/categories/secure-code-review)

View all [Secure Code Review Software](https://www.g2.com/categories/secure-code-review)

### [GitHub](https://www.g2.com/products/github/reviews)

[By GitHub](https://www.g2.com/sellers/github)

[

(2,366)4.7 out of 5
](https://www.g2.com/products/github/reviews#reviews "Read GitHub Reviews")

Product Description

GitHub is where the world builds software. Millions of individuals, organizations and businesses around the world use GitHub to discover, share, and contribute software. Developers at startups to Fort

**Users:** Software Engineer, Senior Software Engineer · **Industries:** Computer Software, Information Technology and Services · **Market Segment:** 47% Small-Business, 31% Mid-Market

 ![Adarsh K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Adarsh K.")
AK

It is powerful collaboration and version control features. It makes code management, pull reques, issue tracking, and team collaboration very...[Read review](https://www.g2.com/products/github/reviews/github-review-12380111)

 ![Javier C.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Javier C.")
JC

You can submit code easier and with out problems[Read review](https://www.g2.com/products/github/reviews/github-review-12640366)

Year Founded
2008

HQ Location
San Francisco, CA

Company Website
https://github.com

Twitter
@github

LinkedIn® Page
https://www.linkedin.com/company/1418841/

### [GitLab](https://www.g2.com/products/gitlab/reviews)

[By GitLab Inc.](https://www.g2.com/sellers/gitlab-inc)

[

(896)4.5 out of 5
](https://www.g2.com/products/gitlab/reviews#reviews "Read GitLab Reviews")

Product Description

GitLab is the most comprehensive AI-Powered DevSecOps platform that enables software innovation by empowering development, security, and operations teams to build better software, faster. With GitLab

**Users:** Software Engineer, Senior Software Engineer · **Industries:** Computer Software, Information Technology and Services · **Market Segment:** 37% Mid-Market, 36% Small-Business

 ![Verified User in Marketing and Advertising](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Marketing and Advertising")
UM

The ability to self-host is a big plus. Although it lacks some features, it still provides cost savings and gives us additional control. CI/CD...[Read review](https://www.g2.com/products/gitlab/reviews/gitlab-review-11552458)

AK

All-In-One DevOps platform Built in CI/CD pipeline Strong version control Good Collaboration Merge Request workflow[Read review](https://www.g2.com/products/gitlab/reviews/gitlab-review-12614554)

Year Founded
2014

HQ Location
San Francisco, California

Company Website
https://about.gitlab.com/

Twitter
@gitlab

LinkedIn® Page
https://www.linkedin.com/company/5101804/

[![G2 Advertising](/assets/my-g2-logo-41632af6f81a240a0a9886638f412b2ac9a29f4001534f8c83be89a58ef9d45d.svg "G2 Advertising")](https://sell.g2.com/case-studies/how-aisdr-uses-g2-ads-to-turn-g2-into-top-5-traffic-source)

Sponsored

G2 Advertising

Get 2x conversion than Google Ads with G2 Advertising!

G2 Advertising places your product in premium positions on high-traffic pages and on targeted competitor pages to reach buyers at key comparison moments.

[
Learn More
](https://sell.g2.com/case-studies/how-aisdr-uses-g2-ads-to-turn-g2-into-top-5-traffic-source)

### [GitGuardian](https://www.g2.com/products/gitguardian/reviews)

[By GitGuardian](https://www.g2.com/sellers/gitguardian-c1eb71ef-0ed6-4024-9679-56d9bee1fe3e)

[

(263)4.8 out of 5
](https://www.g2.com/products/gitguardian/reviews#reviews "Read GitGuardian Reviews")

Product Description

GitGuardian is an end-to-end NHI security platform designed to help organizations strengthen their Non-Human Identity (NHI) security posture and address compliance standards and regulations. As attack

**Users:** Software Engineer, Software Developer · **Industries:** Computer Software, Information Technology and Services · **Market Segment:** 84% Small-Business, 12% Mid-Market

 ![Ahmed L.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ahmed L.")
AL

It really saved me a ton you maybe think exposing .env secret environmental variable could never happens to me I'm a great developer but really it...[Read review](https://www.g2.com/products/gitguardian/reviews/gitguardian-review-9492570)

 ![Rudy S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Rudy S.")
RS

Alerts. GitGuardian has been saving my careless self from incurring unsolicited cost on APIs. Alerts when secrets are leaked are timely and provide...[Read review](https://www.g2.com/products/gitguardian/reviews/gitguardian-review-9708205)

Year Founded
2017

HQ Location
Paris, Île-de-France

Company Website
https://www.gitguardian.com/

Twitter
@GitGuardian

LinkedIn® Page
https://www.linkedin.com/company/gitguardian

### [Aikido Security](https://www.g2.com/products/aikido-security/reviews)

[By Aikido Security](https://www.g2.com/sellers/aikido-security)

[

(141)4.6 out of 5
](https://www.g2.com/products/aikido-security/reviews#reviews "Read Aikido Security Reviews")

Product Description

Aikido Security is the developer-first security platform that unifies code, cloud, protection, and attack testing in one suite of best-in-class products. Built by developers for developers, Aikido hel

**Users:** CTO, Founder · **Industries:** Computer Software, Information Technology and Services · **Market Segment:** 70% Small-Business, 18% Mid-Market

 ![Sibil M.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sibil M.")
SM

I find Aikido Security to have a very intuitive UI with good context around the issues, making navigation and prioritization easy. The generous...[Read review](https://www.g2.com/products/aikido-security/reviews/aikido-security-review-12335753)

 ![Richard P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Richard P.")
RP

It gives a lot of insights into issues and the AI takes care of an initial review saving a lot of time while providing evidence and in a lot of...[Read review](https://www.g2.com/products/aikido-security/reviews/aikido-security-review-12336031)

Year Founded
2022

HQ Location
Ghent, Belgium

Company Website
https://aikido.dev

Twitter
@AikidoSecurity

LinkedIn® Page
https://www.linkedin.com/company/aikido-security/

### [SonarQube](https://www.g2.com/products/sonarqube/reviews)

[By SonarSource Sàrl](https://www.g2.com/sellers/sonarsource-sarl)

[

(146)4.4 out of 5
](https://www.g2.com/products/sonarqube/reviews#reviews "Read SonarQube Reviews")

Product Description

Sonar, the industry standard for code verification and automated code review, helps reduce outages, improve security, and lower risks associated with AI and agentic coding. As an independent verificat

**Users:** DevOps Engineer, Software Engineer · **Industries:** Information Technology and Services, Computer Software · **Market Segment:** 42% Enterprise, 39% Mid-Market

 ![Mukesh K. R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Mukesh K. R.")
MR

Simple deployment. Very easy installing is practiced particularly on Kubernetes using YAML formats. Moreover, integration with GitHub by means of...[Read review](https://www.g2.com/products/sonarqube/reviews/sonarqube-review-9607188)

 ![Arnaud T.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Arnaud T.")
AT

SonarCloud is very easy to set up, and integrates nicely into your development platform. It supports a large number of languages, rules, and can...[Read review](https://www.g2.com/products/sonarqube/reviews/sonarqube-review-11054230)

Year Founded
2008

HQ Location
Geneva, Switzerland

Company Website
https://www.sonarsource.com

Twitter
@SonarSource

LinkedIn® Page
https://www.linkedin.com/company/sonarsource/

### [OX Security](https://www.g2.com/products/ox-security/reviews)

[By OX Security](https://www.g2.com/sellers/ox-security)

[

(51)4.8 out of 5
](https://www.g2.com/products/ox-security/reviews#reviews "Read OX Security Reviews")

Product Description

OX is redefining product security for the AI era. Founded by Neatsun Ziv and Lion Arzi, former Check Point executives, OX is the company behind VibeSec — the first AI-native vibe security platform.

**Users:** Security Engineer · **Industries:** Financial Services, Information Technology and Services · **Market Segment:** 63% Mid-Market, 25% Enterprise

 ![Verified User in Automotive](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Automotive")
EA

As one of OX Security's first customers, I was searching for an effective solution to upscale Upstream Security's application security stack. I...[Read review](https://www.g2.com/products/ox-security/reviews/ox-security-review-10487561)

 ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services")
UI

Best Free Solution for private users who want to check their repos.[Read review](https://www.g2.com/products/ox-security/reviews/ox-security-review-10491157)

Year Founded
2021

HQ Location
New York, USA

Company Website
https://www.ox.security/

LinkedIn® Page
https://www.linkedin.com/company/ox-security/

### [Semgrep](https://www.g2.com/products/semgrep/reviews)

[By Semgrep](https://www.g2.com/sellers/semgrep)

[

(55)4.6 out of 5
](https://www.g2.com/products/semgrep/reviews#reviews "Read Semgrep Reviews")

Product Description

Semgrep is a modern static analysis (SAST), software composition analysis (SCA), and secrets detection platform designed for both developers and security teams. It combines fast, deterministic analysi

**Industries:** Information Technology and Services, Computer Software · **Market Segment:** 45% Enterprise, 42% Mid-Market

 ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services")
AF

Easy to add custom rules (e.g. by using the online rule editor). Also, Semgrep App has some nice, convenient features (like private rule repository).[Read review](https://www.g2.com/products/semgrep/reviews/semgrep-review-7489577)

 ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services")
AI

The Semgrep supply chain is a boon for application and product security teams. Backed by the already solid Semgrep engine, it can quickly surface...[Read review](https://www.g2.com/products/semgrep/reviews/semgrep-review-7543239)

Year Founded
2017

HQ Location
San Francisco, US

Company Website
https://semgrep.dev

Twitter
@semgrep

LinkedIn® Page
https://www.linkedin.com/company/returntocorp

### [Assembla](https://www.g2.com/products/assembla/reviews)

[By Assembla](https://www.g2.com/sellers/assembla)

[

(139)4.2 out of 5
](https://www.g2.com/products/assembla/reviews#reviews "Read Assembla Reviews")

Product Description

Assembla is the most secure version control and project collaboration platform in the world. We provide secure cloud hosting for Subversion, Perforce and Git repositories with integrated project manag

**Users:** Software Engineer · **Industries:** Computer Software, Information Technology and Services · **Market Segment:** 50% Small-Business, 41% Mid-Market

 ![Chandrkant s.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Chandrkant s.")
CS

 like the fact that you can use Assembla as a free tool for cloud-hosted source control. You can have as many users as you need to be connected to...[Read review](https://www.g2.com/products/assembla/reviews/assembla-review-3100682)

 ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software")
CC

Assembla for severals years ago (8+), and always feel confortable with the integrated enviroment, you can setup a version control system for your...[Read review](https://www.g2.com/products/assembla/reviews/assembla-review-3127335)

Year Founded
2005

HQ Location
San Antonio, TX

Company Website
https://www.assembla.com

Twitter
@assembla

LinkedIn® Page
https://www.linkedin.com/company/339775/

### [Checkmarx](https://www.g2.com/products/checkmarx/reviews)

[By Checkmarx](https://www.g2.com/sellers/checkmarx)

[

(43)4.2 out of 5
](https://www.g2.com/products/checkmarx/reviews#reviews "Read Checkmarx Reviews")

Product Description

Checkmarx is a type of application security solution designed to help organizations safeguard their software development processes while enhancing efficiency and reducing costs. The Checkmarx One plat

**Industries:** Information Technology and Services, Computer Software · **Market Segment:** 58% Enterprise, 21% Mid-Market

HG

CheckMarx has been used an application to scan the applications to rectify vulnerability in the code and to check the security lapses. I have been...[Read review](https://www.g2.com/products/checkmarx/reviews/checkmarx-review-3057122)

 ![Sujeet S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sujeet S.")
SS

Checkmarx has an impressive Codebashing feature that has the edge over SonarQube. The application tracking-reporting feature is good too. I like...[Read review](https://www.g2.com/products/checkmarx/reviews/checkmarx-review-4825182)

Year Founded
2006

HQ Location
Paramus, NJ

Company Website
https://www.checkmarx.com

Twitter
@Checkmarx

LinkedIn® Page
https://www.linkedin.com/company/checkmarx

### [Kiuwan Code Security & Insights](https://www.g2.com/products/kiuwan-code-security-insights/reviews)

[By Sembi](https://www.g2.com/sellers/sembi)

[

(34)4.5 out of 5
](https://www.g2.com/products/kiuwan-code-security-insights/reviews#reviews "Read Kiuwan Code Security & Insights Reviews")

Product Description

Fast, Flexible Code Security! Kiuwan is a robust, end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Secu

**Industries:** Information Technology and Services, Banking · **Market Segment:** 41% Enterprise, 35% Mid-Market

CK

We have integrated Kiuwan in our DevOps chain without issues, using TFS and other tools in this chain. We have already found a good bunch of...[Read review](https://www.g2.com/products/kiuwan-code-security-insights/reviews/kiuwan-code-security-insights-review-4107495)

 ![Óscar G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Óscar G.")
ÓG

Kiuwan is a powerful tool that help our developers to create secure software. Also, the code quality component is very good. It provides a lot of...[Read review](https://www.g2.com/products/kiuwan-code-security-insights/reviews/kiuwan-code-security-insights-review-4110427)

Year Founded
2023

HQ Location
Austin, US

Company Website
https://www.sembi.com/

LinkedIn® Page
https://www.linkedin.com/company/sembi-inc/

### [DryRun Security](https://www.g2.com/products/dryrun-security/reviews)

[By DryRun Security](https://www.g2.com/sellers/dryrun-security)

[

(20)4.9 out of 5
](https://www.g2.com/products/dryrun-security/reviews#reviews "Read DryRun Security Reviews")

Product Description

Security leaders face a paradox: ship faster and enable agentic development while staying secure and keeping developers productive. DryRun Security resolves this by securing every pull request and rep

**Industries:** Computer & Network Security · **Market Segment:** 40% Small-Business, 30% Mid-Market

 ![John P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "John P.")
JP

DryRun Security runs and provides feedback where we do our work: GitHub. Feedback is provided quickly within the context of the Pull request. This...[Read review](https://www.g2.com/products/dryrun-security/reviews/dryrun-security-review-12374775)

Year Founded
2023

HQ Location
Austin, US

Company Website
https://dryrun.security

LinkedIn® Page
https://www.linkedin.com/company/dryrun-security/

### [GuardRails](https://www.g2.com/products/guardrails-guardrails/reviews)

[By GuardRails](https://www.g2.com/sellers/guardrails)

[

(29)4.3 out of 5
](https://www.g2.com/products/guardrails-guardrails/reviews#reviews "Read GuardRails Reviews")

Product Description

GuardRails is an end-to-end security platform that makes AppSec easier for both security and development teams. We scan, detect, and provide real-time guidance to fix vulnerabilities early. Trusted b

**Industries:** Information Technology and Services, Financial Services · **Market Segment:** 52% Small-Business, 48% Mid-Market

 ![Ranu M.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ranu M.")
RM

It helps developers secure code from any unwanted security issues caused during the development or implementation of technology and notify as soon...[Read review](https://www.g2.com/products/guardrails-guardrails/reviews/guardrails-review-8654129)

Year Founded
2017

HQ Location
Singapore, Singapore

Company Website
https://www.guardrails.io

Twitter
@guardrailsio

LinkedIn® Page
https://www.linkedin.com/company/13599521

### [CodeScene](https://www.g2.com/products/codescene/reviews)

[By CodeScene AB](https://www.g2.com/sellers/codescene-ab)

[

(39)4.6 out of 5
](https://www.g2.com/products/codescene/reviews#reviews "Read CodeScene Reviews")

Product Description

CodeScene is a code analysis, visualization, and reporting tool. Cross reference contextual factors such as code quality, team dynamics, and delivery output to get actionable insights to effectively r

**Industries:** Computer Software · **Market Segment:** 41% Mid-Market, 36% Small-Business

MN

There are multiple quality characteristics (see ISO 25000 or the Heuristic Test Strategy Model) but the Maintainability-characteristic has always...[Read review](https://www.g2.com/products/codescene/reviews/codescene-review-11022319)

Year Founded
2015

HQ Location
Malmö, SE

Company Website
https://www.codescene.com

Twitter
@codescene

LinkedIn® Page
https://www.linkedin.com/company/codescene/

### [DeepSource](https://www.g2.com/products/deepsource/reviews)

[By DeepSource](https://www.g2.com/sellers/deepsource)

[

(22)4.6 out of 5
](https://www.g2.com/products/deepsource/reviews#reviews "Read DeepSource Reviews")

Product Description

DeepSource is an all-in-one code health platform that equips organizations with everything they need to build maintainable and secure software while elevating the velocity of their software developmen

**Industries:** Computer Software · **Market Segment:** 82% Small-Business, 9% Enterprise

 ![John C.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "John C.")
JC

DeepSource fits easily into InsurTechnix's workflow, and gives us confidence in the quality of the code we deploy to our customers. InsurTechnix...[Read review](https://www.g2.com/products/deepsource/reviews/deepsource-review-4593052)

 ![Verified User in Research](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Research")
UR

Deepsource is easy to set up on GitHub and in minutes, you can have it running on your repos. It has several features but they are organized in a...[Read review](https://www.g2.com/products/deepsource/reviews/deepsource-review-4639010)

Year Founded
2018

HQ Location
San Francisco, California

Company Website
https://deepsource.com

LinkedIn® Page
https://www.linkedin.com/company/deepsourcelabs/

### [Bito](https://www.g2.com/products/bito/reviews)

[By Bito](https://www.g2.com/sellers/bito)

[

(16)4.7 out of 5
](https://www.g2.com/products/bito/reviews#reviews "Read Bito Reviews")

Product Description

Bito's AI Architect is the context layer that powers your entire engineering workflow so every agent reasons like your best architect. Engineering teams run on context that sits across codebases, Jir

**Industries:** Computer Software · **Market Segment:** 50% Small-Business, 44% Mid-Market

 ![Ayush G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ayush G.")
AG

Bito features an intuitive user interface and smooth software tool integration. Work and project management become incredibly effective as a...[Read review](https://www.g2.com/products/bito/reviews/bito-review-8750187)

Year Founded
2021

HQ Location
Menlo Park, Ca

Company Website
https://bito.ai

Twitter
@BitoHQ

LinkedIn® Page
https://www.linkedin.com/company/bitodev/

- &lsaquo; Prev‹ Prev
- 1
- [2](/categories/secure-code-review/free?order=g2_score&page=2#product-list)
- [Next &rsaquo;Next ›](/categories/secure-code-review/free?order=g2_score&page=2#product-list)