All testing tools

Dependabot

Security Testing

Free dependency updates and vulnerability alerts, built into GitHub.

ESLint

Code Quality

The JavaScript and TypeScript linter every project ends up using.

Lighthouse

Accessibility

Google's built-in audit for performance, accessibility, SEO and best practices.

Renovate

Security Testing

Highly configurable automated dependency updates, free and self-hostable.

Ruff

Code Quality

Extremely fast Python linter and formatter that replaces most of the toolchain.

Snyk

Security Testing

Developer-first security across dependencies, code, containers and infrastructure.

SonarQube

Code Quality

The static-analysis standard: 30+ languages, quality gates, clean-as-you-code.

Biome

Code Quality

Rust-based linter and formatter that replaces ESLint and Prettier, very fast.

Checkmarx One

Security Testing

Enterprise application security platform: SAST, SCA, DAST, IaC and API security.

CodeQL

Security Testing

Query your codebase like a database to find vulnerability patterns across the whole repo.

Pest

Unit & Component

A friendlier front end for PHPUnit with a function-based, expressive API.

Semgrep

Security Testing

Pattern-based static analysis where rules look like the code they match.

Siteimprove

Accessibility

Enterprise accessibility, SEO and content-quality governance across whole websites.

Codacy

Code Quality

Automated code review with security scanning and coverage in the pull request.

DeepSource

Code Quality

Static analysis with autofix, tuned hard for low false-positive rates.

Qlty (formerly Code Climate Quality)

Code Quality

Maintainability and technical-debt tracking, spun out of Code Climate as Qlty.

Qodana

Code Quality

JetBrains' IDE inspections, running as a CI quality gate.