nowfound

Dev tools · alternatives · 2026

24 alternatives to CyScout – Solidity Vulnerability Detection Powered by GitHub CodeQL

Hi everyone, GitHub's CodeQL is a powerful semantic code analysis engine for identifying vulnerabilities across codebases. We've extended CodeQL to support Solidity, the most popular programming language for smart contracts. CodeQL enables you to query code as though it were data, and it's open-source (OSS). You can check it out here: . The product page is available at . CodeQL has its own licensing model, which you can find at https://codeql.github.com/. TL;DR: CodeQL is free for research and open-source projects.

CyScout extends GitHub's CodeQL semantic analysis engine to detect vulnerabilities in Solidity smart contracts. It allows developers to query code as data using an open-source framework, designed for those building and… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. CyScout – Solidity Vulnerability Detection Powered by GitHub CodeQL launched in 2024; newer entries below may have overtaken it.

  1. 1

    Hi everyone! I’m excited to open source GritQL, a Rust CLI for searching and transforming source code. GritQL comes from my experiences with conducting large scale refactors and migrations. Usually, I would start exploring a codebase with grep. This is easy to start with, but most migrations end up accumulating additional requirements like ensuring the right packages are imported and excluding cases which don’t have a viable migration path. Eventually, to build a complex migration, I usually ended up having to write a full codemod program with a tool like jscodeshift. This comes with its own…

    2024 · github.com · its alternatives →

  2. 2
    Opengrep▲340

    The open source code security engine

    2025 · opengrep.dev · its alternatives →

  3. 3

    Query C++ codebases using SQLite. Contribute to frabert/ClangQL development by creating an account on GitHub.

    2021 · github.com · its alternatives →

  4. 4HN

    I have ported "The Fullstack Tutorial for GraphQL" series, https://www.howtographql.com/, from Javascript to Clojure/script. Blog post: https://promesante.github.io/2019/08/14/clojure_graphql_full... Source code GitHub repo: https://github.com/promesante/hn-clj-pedestal-re-frame Suggestions and corrections, more than welcome.

    2019 · its alternatives →

  5. 5

    The ultimate EVM compatible smart contract analysis tool

    2023 · solidityscan.com · its alternatives →

  6. 6

    Immutable, scalable, and easy to use ledger service. - hoophq/sequence

    2020 · github.com · its alternatives →

  7. 7

    Long-simmering side project that is finally ready to see the light. HAMTs are a cool persistent data structure and implementing one has been a lot of fun. Beyond the code, there is likely some value in the extensive and largely complete implementation docs; basic benchmarks are linked in the README, too. Kind of aiming to be "the libavl for HAMTs". That is obviously a high and aspirational bar but a distinct possibility if it stirs up a little interest and/or contribution. Anyways, it's time for this to go out, collect feedback and maybe even some use outside of toy projects. Let me…

    2023 · github.com · its alternatives →

  8. 8SC

    Hi All, I released an EVM/Solidity decompiler recently, here: http://www.eveem.org/ Since it uses symbolic execution underneath, the results are quite awesome. There is also an api that delivers a .json / middle language representation of every contract here: http://eveem.org/code/{{address}}.json The plan is to open-source it as soon as I clean up the code a bit. Spent the last two month crunch-time to get it delivered from scratch :)

    2018 · its alternatives →

  9. 9

    crates.io serves as a central registry for sharing crates, which are packages or libraries written in Rust that you can use to enhance your projects

    2020 · crates.io · its alternatives →

  10. 10CD

    Hi HN! This is a little site I put together while learning the Elm language as part of a hackathon at my work, I thought you might enjoy it. Be sure to click the `(source)` buttons next to the graphs: you can edit them interactively & write your own queries against the entire data set. The syntax isn't well documented yet, but you can probably get the general idea pretty quickly based on the examples there. If you like it, have questions, etc. let me know! If folks think this is cool, maybe I can get it turned into a legit project. :)

    2022 · codestat.dev · its alternatives →

  11. 11

    A pure ORM for writing native SQL queries yielding pure business objects - craigmichaelmartin/pure-orm

    2021 · github.com · its alternatives →

  12. 12

    A tiny "sandbox" to run untrusted code 🏖️. Contribute to craigmulligan/sandy development by creating an account on GitHub.

    2020 · github.com · its alternatives →

  13. 13

    Easiest way to access data from 20+ blockchains

    2022 · unmarshal.io · its alternatives →

  14. 14

    Blockchain-secured code snippets manager with easy sharing

    2019 · block.codelets.net · its alternatives →

  15. 15

    Distributed "massively parallel" SQL query engine. Contribute to eventql/eventql development by creating an account on GitHub.

    2016 · github.com · its alternatives →

  16. 16

    Define and run pattern-based custom linting rules. - quasilyte/go-ruleguard

    2020 · github.com · its alternatives →

  17. 17CA

    crates.io serves as a central registry for sharing crates, which are packages or libraries written in Rust that you can use to enhance your projects

    2020 · crates.io · its alternatives →

  18. 18OT

    Bitbucket Cloud is a Git-based code and CI/CD tool optimized for teams using Jira.

    2019 · bitbucket.org · its alternatives →

  19. 19

    I built this as a small side project to learn and experiment, and I ended up with this! I used a subdomain from my personal portfolio, and everything else runs on free tiers. The project uses Nuxt, SVG, Cloudflare Workers, D1 (SQL), KV, Terraform, and some agentic coding with OpenAI Codex and Claude Code. What started as a joke among friends turned into a fun excuse to build something end to end, from zero to production, and to explore a few things I’d never touched before. I’d really appreciate any feedback or suggestions.

    Jan 2026 · certificate.brendonmatos.com · its alternatives →

  20. 20

    A GraphQL query builder for TypeScript. Avoid the pain of codegen. - timkendall/tql

    2020 · github.com · its alternatives →

  21. 21

    Hey HN! I’m a researcher working on Bitcoin smart contracts, and today I’m releasing Bithoven—a high-level imperative language that compiles to native Bitcoin Script (Legacy, SegWit, and Taproot). The Goal: Raw Bitcoin Script is notoriously difficult to reason about. Writing raw Bitcoin Script today feels like writing Assembly in the 1970s. You have to mentally juggle the stack (`OP_SWAP`, `OP_ROT`), manually manage distinct execution branches, and pray you didn't leave a stack item unconsumed (which crashes the script). My goal was to bridge the gap between complex contract logic and raw…

    Dec 2025 · github.com · its alternatives →

  22. 22

    the purest AI + Blockchian project. Contribute to theDumbAssCoin/DUMBASS development by creating an account on GitHub.

    2019 · github.com · its alternatives →

  23. 23

    Hi HN, I'm Dan Draper, founder of CipherStash. We've spent 5 years building per-value searchable encryption tech. We realized that encryption like this is incredibly powerful but the engineering required is generally not worth the effort. So we built a platform and opensource SDK to take the cry out of cryptography :) CipherStash Stack is: * A searchable encryption SDK for TS and Postgres * Fast, key management with Zerokms (backed by HSM) * A transparent SQL proxy * Auth library and OIDC federation service * Skills for data security Integrations include Prisma Next, Drizzle, Auth0, Clerk…

    May 2026 · cipherstash.com · its alternatives →

  24. 24

    ✨Open Source GraphQL CMS. Contribute to birkir/prime development by creating an account on GitHub.

    2018 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →