Static Code Analyzer
Defense · Emergent (gold) · Formal Methods corpus
Reads source code without running it and flags patterns that lead to vulnerabilities — buffer overflows, injection paths, unchecked inputs. Catches whole classes of bugs before they ship.