Don't forget Sanitizers combined with comprehensive test suits. I would always recommend doing both, static and dynamic analysis.