RIPS - free PHP security scanner using static code analysis
RIPS is a free and open source PHP security scanner using static code analysis to find security vulnerabilities in PHP web applications.