There is a number of static application security testing or SAST tools, some of the top tools are Synopsis Coverity, HCL AppScan etc.