Fortify does java analysis from source code on-the-fly (apparently php
too), but does C analysis at build time. You need to integrate its tools
into your build process (by wrapping your compiler or something I think)
to get it to go.
I don't know much more than that but I know it was a bit of a pain when my
coworkers set it up.
-Etan