SpotBugs
SpotBugs project
Successor to FindBugs that analyzes compiled JVM bytecode against a catalog of bug patterns, extensible with security focused detector plugins.
Open source
Established