Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Static analysis is a valuable technique for identifying possible problems within your code by examining it at the source code level. C-STAT offers nearly 700 different checks, many of which adhere to guidelines outlined in MISRA C:2012, MISRA C++:2008, and MISRA C:2004, in addition to more than 250 checks that correspond to issues recognized by CWE. Furthermore, it assesses adherence to the CERT C coding standard, which focuses on secure coding practices. C-STAT operates swiftly and provides extensive and detailed error reports, allowing for effective troubleshooting. There’s no need to be concerned about complicated tool configurations or dealing with language support and overarching build challenges. Fully integrated into the IAR Embedded Workbench IDE, C-STAT empowers you to effortlessly maintain code quality throughout your development processes. This tool is compatible with a wide range of IAR Embedded Workbench products. By utilizing static analysis, not only can potential code issues be detected, but it also facilitates compliance with established industry coding standards. Ultimately, this enhances overall software reliability and maintainability.
Description
PVS-Studio is a static application security testing tool that enhances code quality, security, and safety. It helps find errors and potential vulnerabilities in C, C++, C#, Java, JavaScript, TypeScript and Go code. It works on Windows, Linux, and macOS.
Pros:
- Various analysis types: intermodular, incremental, data flow analysis, taint analysis;
- Integrates into cloud platforms;
- Works offline & on-premise;
- Provides cross-platform integration;
- Offers ways to handle false positives;
- Quick technical support directly from developers;
- 1200+ diagnostics with descriptions and examples;
- Provides compliance with safety & security standards: OWASP TOP 10, MISRA C/C++, CWE, SEI CERT;
- Provides detailed reports and reminders for developers and managers;
- Efficiently handles legacy code (baselining of analyzer results);
- Active support of the Open Source Community, analysis of open-source projects;
- Has integration with popular IDEs, code quality platforms, CI/CD, build systems.
Good option for:
- game developers (Unity & UE integration included)
- embedded developers (embedded platform support);
- DevSecOps experts (CLI)
- project managers (code quality platform integration included)
- FinTech (compliance with OWASP ASVS)
- mature projects (seamless legacy handling)
API Access
Has API
API Access
Has API
Integrations
C
C++
IAR Embedded Workbench
.NET
Android Studio
Azure DevOps
C#
CircleCI
Docker
GitHub Actions
Integrations
C
C++
IAR Embedded Workbench
.NET
Android Studio
Azure DevOps
C#
CircleCI
Docker
GitHub Actions
Pricing Details
No price information available.
Free Trial
Free Version
Pricing Details
Trial version and pricing can be found on the website PVS-Studio or be requested via the contact form.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
IAR Systems
Founded
1983
Country
Sweden
Website
www.iar.com/products/c-stat/
Vendor Details
Company Name
PVS-Studio
Founded
2008
Country
Kazakhstan
Website
pvs-studio.com/en/pvs-studio/
Product Features
Static Code Analysis
Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management
Product Features
Application Development
Access Controls/Permissions
Code Assistance
Code Refactoring
Collaboration Tools
Compatibility Testing
Data Modeling
Debugging
Deployment Management
Graphical User Interface
Mobile Development
No-Code
Reporting/Analytics
Software Development
Source Control
Testing Management
Version Control
Web App Development
Automated Testing
Hierarchical View
Move & Copy
Parameterized Testing
Requirements-Based Testing
Security Testing
Supports Parallel Execution
Test Script Reviews
Unicode Compliance
DevOps
Approval Workflow
Dashboard
KPIs
Policy Management
Portfolio Management
Prioritization
Release Management
Timeline Management
Troubleshooting Reports
Source Code Management
Access Controls/Permissions
Bug Tracking
Build Automation
Change Management
Code Review
Collaboration
Continuous Integration
Repository Management
Version Control
Static Application Security Testing (SAST)
Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning