A CLI and TypeScript SDK from OpenAI for scanning code for security vulnerabilities, validating findings, and generating fixes.
11.1K940TypeScriptApache-2.0Updated 8 hours ago
2 alternatives
Best open-source alternatives to Veracode (2026)
Looking for a free, open-source alternative to Veracode? These 2 projects can replace it. Each one is reviewed by a human and explained in plain words, so you can compare stars, license and maintenance at a glance.
Quick comparison
| Project | Stars | License | Last commit |
|---|---|---|---|
| openai/codex-security | ★ 11.1K | Apache-2.0 | 8 hours ago |
| SonarSource/sonarqube | ★ 11.1K | LGPL-3.0 | yesterday |
Self-hosted code quality and security platform that finds bugs, vulnerabilities and maintainability issues through static analysis.
11.1K2.2KJavaLGPL-3.0Updated yesterday
FAQ
- Is there a free, open-source alternative to Veracode?
- Yes. The most popular open-source alternatives to Veracode on Repolode are codex-security, sonarqube.
- Which Veracode alternative should I choose?
- codex-security has the most GitHub stars and is released under Apache-2.0. Compare the license and last commit of each option in the table above before choosing.