---
schema_version: "1"
id: c97f5a302662a19354c48dba52aa5f0f0d41044b44f1d05b4813d50a92dd9188
title: Engines
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/code-analyzer/salesforce-code-analyzer/guides/engines.md
canonical_url: https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engines.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 081989f836357a0284af195ea32a0e6f81dd4ad4886340c94d087f5950537b35
products:
  - Salesforce Code Analyzer
---
# Engines

Code Analyzer is pre-bundled with these engines. They are all enabled by default and are available when you use either CLI commands or the VS Code extension to analyze your code.

| Rule Engine                               | Description                                                                                                                                      | Engine Short Name to Use in CLI Commands |
| ----------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------- |
| [CPD](https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engine-cpd.md)                      | Identifies blocks of duplication across files.                                                                                                   | `cpd`                                    |
| [ESLint](https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engine-eslint.md)                | Evaluates JavaScript and TypeScript code.                                                                                                        | `eslint`                                 |
| [Flow Scanner](https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engine-flow.md)            | Audits Salesforce Flows and reports detailed information about security issues. New for v5!                                                      | `flow`                                   |
| [PMD](https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engine-pmd.md)                      | Allows for static analysis of code written in a number of supported languages, such as Apex and Visualforce. Includes the PMD AppExchange rules. | `pmd`                                    |
| [RetireJS](https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engine-retire-js.md)           | Analyzes a project’s third-party JavaScript dependencies and identifies security vulnerabilities.                                                | `retire-js`                              |
| [Regex](https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engine-regex.md)                  | Uses regular expressions (regex) to search your code base for patterns. New for v5!                                                              | `regex`                                  |
| [Salesforce Graph Engine](https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engine-sfge.md) | Open-source Salesforce tool that performs complex analysis on Apex code and identifies security vulnerabilities and code issues.                 | `sfge`                                   |
| [ApexGuru Engine](https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engine-apexguru.md) | Executes real-time scans on connected Salesforce orgs directly through the Salesforce CLI and delivers exact line-level highlights.              | `apexguru`                                   |