SonarSource delivers what is probably the best static code analysis you can find for VB6. Based on our own VB6 compiler front-end, it uses the most advanced techniques (pattern matching, dataflow analysis) to analyze code and find Code Smells, Bugs, and Security Vulnerabilities. As with everything we develop at SonarSource, it was built on the principles of depth, accuracy, and speed.
SonarSource's VB6 analysis has a great coverage of well-established quality standards. This capability is available in any development chain for automated code review with self-hosted SonarQube.