SonarQube (Community Edition)

SonarQube is the industry standard for static code analysis. While it is not an 'AI' in the generative sense, its sophisticated rule engines and recent integration of AI-assisted detection make it a powerhouse for identifying security vulnerabilities and code smells. The Community Edition is free, open-source, and self-hosted, providing enterprise-grade analysis for a wide range of languages. It is the go-to tool for teams that prioritize security and long-term maintainability over quick, conversational AI suggestions.

It enforces strict quality gates that prevent bad code from reaching production.