There's also PVS-Studio. They also scan open source projects - see https://pvs-studio.com/en/blog/inspections/ https://pvs-studio.com/en/blog/inspections/ It's

There's also PVS-Studio. They also scan open source projects - see https://pvs-studio.com/en/blog/inspections/ https://pvs-studio.com/en/blog/inspections/ It's hard to convince managers to spend money on static analysis tools (or any development tool). Unless your company just got bad publicity for a bug and your devs come to you and demonstrate that a certain static analysis tool would have flagged that particular piece of code, most managers would let the beancounter-facet dominate the decision making process.