Average Ratings 0 Ratings
Average Ratings 0 Ratings
Similar Products
-
ParasoftParasoft's mission is to provide automated testing solutions and expertise that empower organizations to expedite delivery of safe and reliable software. A powerful unified C and C++ test automation solution for static analysis, unit testing and structural code coverage, Parasoft C/C++test helps satisfy compliance with industry functional safety and security requirements for embedded software systems.
-
TrustInSoft AnalyzerTrustInSoft commercializes a source code analyzer called TrustInSoft Analyzer, which analyzes C and C++ code and mathematically guarantees the absence of defects, immunity of software components to the most common security flaws, and compliance with a specification. The technology is recognized by U.S. federal agency the National Institute of Standards and Technology (NIST), and was the first in the world to meet NIST’s SATE V Ockham Criteria for high quality software. The key differentiator for TrustInSoft Analyzer is its use of mathematical approaches called formal methods, which allow for an exhaustive analysis to find all the vulnerabilities or runtime errors and only raises true alarms. Companies who use TrustInSoft Analyzer reduce their verification costs by 4, efforts in bug detection by 40, and obtain an irrefutable proof that their software is safe and secure. The experts at TrustInSoft can also assist clients in training, support and additional services.
-
Aikido SecurityAikido is the all-in-one security platform for development teams to secure their complete stack, from code to cloud. Aikido centralizes all code and cloud security scanners in one place. Aikido offers a range of powerful scanners including static code analysis (SAST), dynamic application security testing (DAST), container image scanning, and infrastructure-as-code (IaC) scanning. Aikido integrates AI-powered auto-fixing features, reducing manual work by automatically generating pull requests to resolve vulnerabilities and security issues. It also provides customizable alerts, real-time vulnerability monitoring, and runtime protection, enabling teams to secure their applications and infrastructure seamlessly.
-
QVscribeQRA’s tools streamline engineering artifact generation, evaluation, and prediction, refocusing engineers from tedious work to critical path development. Our solutions automate the creation of risk-free project artifacts for high-stakes engineering. Engineers often spend excessive time on the mundane task of refining requirements, with quality metrics varying across industries. QVscribe, QRA's flagship product, streamlines this by automatically consolidating these metrics and applying them to your documentation, identifying risks, errors, and ambiguities. This efficiency allows engineers to focus on more complex challenges. To further simplify requirement authoring, QRA introduced a pioneering five-point scoring system that instills confidence in engineers. A perfect score confirms accurate structure and phrasing, while lower scores prompt corrective guidance. This feature not only refines current requirements but also reduces common errors and enhances authoring skills over time.
-
groundcoverCloud-based solution for observability that helps businesses manage and track workload and performance through a single dashboard. Monitor all the services you run on your cloud without compromising cost, granularity or scale. Groundcover is a cloud-native APM solution that makes observability easy so you can focus on creating world-class products. Groundcover's proprietary sensor unlocks unprecedented granularity for all your applications. This eliminates the need for costly changes in code and development cycles, ensuring monitoring continuity.
-
KrakenDEngineered for peak performance and efficient resource use, KrakenD can manage a staggering 70k requests per second on just one instance. Its stateless build ensures hassle-free scalability, sidelining complications like database upkeep or node synchronization. In terms of features, KrakenD is a jack-of-all-trades. It accommodates multiple protocols and API standards, offering granular access control, data shaping, and caching capabilities. A standout feature is its Backend For Frontend pattern, which consolidates various API calls into a single response, simplifying client interactions. On the security front, KrakenD is OWASP-compliant and data-agnostic, streamlining regulatory adherence. Operational ease comes via its declarative setup and robust third-party tool integration. With its open-source community edition and transparent pricing model, KrakenD is the go-to API Gateway for organizations that refuse to compromise on performance or scalability.
-
CodyCody is an advanced AI coding assistant developed by Sourcegraph to enhance the efficiency and quality of software development. It integrates seamlessly with popular Integrated Development Environments (IDEs) such as VS Code, Visual Studio, Eclipse, and various JetBrains IDEs, providing features like AI-driven chat, code autocompletion, and inline editing without altering existing workflows. Designed to support both individual developers and teams, Cody emphasizes consistency and quality across entire codebases by utilizing comprehensive context and shared prompts. It also extends its contextual understanding beyond code by integrating with tools like Notion, Linear, and Prometheus, thereby gathering a holistic view of the development environment. By leveraging the latest Large Language Models (LLMs), including Claude 3.5 Sonnet and GPT-4o, Cody offers tailored assistance that can be optimized for specific use cases, balancing speed and performance. Developers have reported significant productivity gains, with some noting time savings of approximately 5-6 hours per week and a doubling of coding speed when using Cody.
-
Interfacing Enterprise Process Center (EPC)Interfacing's Digital Twin Organization software offers transparency and governance to improve quality, efficiency, and ensure regulatory compliance. A single platform allows you to map, analyze, and automate your processes, manage regulatory compliance, and assess risks. Interfacing's digital twin solution (Enterprise Process Center-EPC) is an enterprise management platform that allows companies to digitally transform their processes. It helps them streamline operations, improve productivity, and make things more efficient. Interfacing's digital platform - Rapid Application Development Tools (RAD) Tools, with its Low Code Development methodology, will optimize your technical resources and maximize transparency to allow for continuous improvement. Discover how our Low-Code Rapid Application Development module gives you all the tools needed to create and deploy custom, scalable, secure, mobile-ready applications in days vs. months!
-
Source DefenseSource Defense is an essential element of web safety that protects data at the point where it is entered. Source Defense Platform is a simple, yet effective solution to data security and privacy compliance. It addresses threats and risks that arise from the increased use JavaScript, third party vendors, and open source code in your web properties. The Platform offers options for securing code as well as addressing an ubiquitous gap in managing third-party digital supply chains risk - controlling actions of third-party, forth-party and nth-party JavaScript that powers your website experience. Source Defense Platform provides protection against all types of client-side security incidents, including keylogging, formjacking and digital skimming. Magecart is also protected. - by extending the web security beyond the browser to the server.
-
qTestSoftware testing must be centrally managed and visible from conception to production in order to make software releases more secure and faster. Tricentis qTest enables teams to collaborate and ship faster, with less risk, by unifying, managing, and scaling testing across the enterprise. Robust testing includes a variety of testing tools, teams, test types, and testing methods. Tricentis qTest combines them all so that teams can release more confidently and reduce risk. It also helps identify opportunities to move faster - collectively. Automate more testing, increase the release velocity, and bring together teams throughout the software development process. Native DevOps integrations such as Jira, Jenkins and GitHub keep QA and development in sync. With a full audit trail, trace defects and tests back to development and requirements. Align teams with cross-project reporting.
Description
Coverity Static Analysis serves as an all-encompassing solution for code scanning, assisting both developers and security teams in producing superior software that meets security, functional safety, and various industry standards. It efficiently detects intricate defects within large codebases, pinpointing and addressing quality and security concerns that may arise across multiple files and libraries. Coverity ensures adherence to numerous standards such as OWASP Top 10, CWE Top 25, MISRA, and CERT C/C++/Java, and offers comprehensive reports that help in monitoring and prioritizing issues. By utilizing the Code Sight™ IDE plugin, developers benefit from immediate feedback, including insights on CWE and instructions for remediation, directly integrated into their development settings, which helps to weave security practices seamlessly into the software development lifecycle while maintaining developer productivity. This tool not only contributes to enhanced code integrity but also fosters a culture of continuous improvement in software security practices.
Description
The Secure Programming Group at the University of Virginia's Department of Computer Science is responsible for the development and ongoing maintenance of Splint. David Evans leads the project and serves as its main developer. Memory bounds checking was created by David Larochelle. Significant contributions to Splint's development were also made by University of Virginia students, including Chris Barker, David Friedman, Mike Lanouette, and Hien Phan. Splint serves as the evolution of LCLint, a tool that originated from a collaborative research effort between the Massachusetts Institute of Technology and Digital Equipment Corporation's System Research Center. David Evans was also the chief designer and developer of LCLint. The initial concept for a static checking tool aimed at identifying discrepancies between LCL specifications and their C implementations came from John Guttag and Jim Horning. Their insights into the design and functionality proved invaluable, playing a crucial role in shaping both LCLint and its successor, Splint. Together, the team has fostered a robust environment for developing tools that enhance software reliability and security.
API Access
Has API
API Access
Has API
Screenshots View All
No images available
Integrations
C
C++
.NET
AWS CloudFormation
Apple iOS
C#
Fortran
GitHub
GitLab
Google Cloud Platform
Integrations
C
C++
.NET
AWS CloudFormation
Apple iOS
C#
Fortran
GitHub
GitLab
Google Cloud Platform
Pricing Details
No price information available.
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Black Duck
Founded
2002
Country
United States
Website
www.blackduck.com/static-analysis-tools-sast/coverity.html
Vendor Details
Company Name
University of Virginia
Founded
2007
Country
United States
Website
splint.org
Product Features
Static Application Security Testing (SAST)
Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning
Static Code Analysis
Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management
Product Features
Static Application Security Testing (SAST)
Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning
Static Code Analysis
Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management