Orizon is a framework intended to provide tools and facilities to test java sources for security flaws. The main goal is to detect common threats as described in Owasp top 10 vulnerability document.
Coupling-Complexity Between Objects is a metric suite that predicts software quality. It consists of ten metrics that are based on Thomas McCabe's Cyclomatic Complexity and Chidamber and Kemerer's Coupling Between Objects.