# Flawfinder: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 4 judge labels across 1 category by 4 of 14 models. Page: https://www.gane.ai/index/it/vendors/flawfinder

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Static application security testing](https://www.gane.ai/index/it/developer/static-application-security-testing/index.md) | 0% | 75 | 75% | 4 |

## And against it

- "legacy grep-based scanners (e.g., unmaintained Flawfinder versions or basic keyword detectors)" (Gemini 3.5 Flash, SAST)
- "dangerous if used as your primary SAST" (DeepSeek V4 Flash, SAST)
- "marks these tools with warnings (⚠️) indicating they haven't been updated in over a year or are archived" (MiniMax M2.5, SAST)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 1 | 1 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 1 | 1 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 1 | 1 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 1 | 0 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named Flawfinder, from 3 of the 4 answers that named it (only the models that return a source list).

### Domains cited

- arxiv.org: 2
- dev.to: 2
- dl.acm.org: 2
- github.com: 2
- pmc.ncbi.nlm.nih.gov: 2
- reddit.com: 2
- aicodereview.cc: 1
- analysis-tools.dev: 1
- appsecsanta.com: 1
- augmentcode.com: 1

### Pages cited

- https://dev.to/rahulxsingh/i-reviewed-32-sast-tools-the-ones-worth-using-283e: 2
- https://dl.acm.org/doi/10.1145/3650212.3680313: 2
- https://pmc.ncbi.nlm.nih.gov/articles/PMC10535982: 2
- https://aicodereview.cc/blog/best-sast-tools-2026: 1
- https://aicodereview.cc/blog/free-sonarqube-alternatives: 1
- https://analysis-tools.dev/tool/shiftleft-scan: 1
- https://appsecsanta.com/sast-tools/open-source-sast-tools: 1
- https://appsecsanta.com/sast-tools/sast-tools-for-java: 1

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.