Average Ratings 0 Ratings
Average Ratings 0 Ratings
Similar Products
-
Aikido SecurityAikido is the all-in-one security platform for development teams to secure their complete stack, from code to cloud. Aikido centralizes all code and cloud security scanners in one place. Aikido offers a range of powerful scanners including static code analysis (SAST), dynamic application security testing (DAST), container image scanning, and infrastructure-as-code (IaC) scanning. Aikido integrates AI-powered auto-fixing features, reducing manual work by automatically generating pull requests to resolve vulnerabilities and security issues. It also provides customizable alerts, real-time vulnerability monitoring, and runtime protection, enabling teams to secure their applications and infrastructure seamlessly.
-
ParasoftParasoft's mission is to provide automated testing solutions and expertise that empower organizations to expedite delivery of safe and reliable software. A powerful unified C and C++ test automation solution for static analysis, unit testing and structural code coverage, Parasoft C/C++test helps satisfy compliance with industry functional safety and security requirements for embedded software systems.
-
TrustInSoft AnalyzerTrustInSoft commercializes a source code analyzer called TrustInSoft Analyzer, which analyzes C and C++ code and mathematically guarantees the absence of defects, immunity of software components to the most common security flaws, and compliance with a specification. The technology is recognized by U.S. federal agency the National Institute of Standards and Technology (NIST), and was the first in the world to meet NIST’s SATE V Ockham Criteria for high quality software. The key differentiator for TrustInSoft Analyzer is its use of mathematical approaches called formal methods, which allow for an exhaustive analysis to find all the vulnerabilities or runtime errors and only raises true alarms. Companies who use TrustInSoft Analyzer reduce their verification costs by 4, efforts in bug detection by 40, and obtain an irrefutable proof that their software is safe and secure. The experts at TrustInSoft can also assist clients in training, support and additional services.
-
FerootFeroot Security is a global leader in AI-powered website and web application compliance and security. Feroot AI protects digital experiences from hidden threats while continuously enforcing compliance with PCI DSS 4.0.1, HIPAA rules on online tracking technologies, CCPA/CPRA, GDPR, CIPA, and over 50 global laws and standards. The Feroot AI Platform replaces manual compliance work and operational overhead with continuous automation. What once required months of effort across security, engineering, and legal teams can now be deployed in minutes, delivering real-time protection and audit-ready evidence. Feroot unifies critical capabilities into a single platform, including JavaScript behavior analysis, web compliance scanning, third-party script monitoring, consent enforcement, and data privacy posture management. It is purpose-built to detect and stop web-based threats such as Magecart, formjacking, e-skimming, and unauthorized tracking on high-risk assets like payment pages, login flows, iframes, and healthcare portals. Trusted by Fortune 500 enterprises, healthcare providers, retailers, SaaS platforms, utilities, payment service providers, universities, and public sector organizations, Feroot safeguards hundreds of millions of users worldwide. Feroot AI solutions include PaymentGuard AI, HealthData Shield AI, AlphaPrivacy AI, CodeGuard AI, and MobileGuard AI. Visit feroot for more information.
-
Rocket z/Assure VAPYour mission-critical systems carry the weight of your entire organization. Protecting them shouldn't leave you guessing about hidden vulnerabilities or compliance risks. Rocket® z/Assure™ Vulnerability Analysis Program (VAP) is a specialized mainframe security solution built to proactively scan and safeguard your most valuable environments. By identifying system-level risks before they become active threats, we partner with you to ensure your infrastructure remains locked down, resilient, and fully compliant. We understand the responsibility of managing enterprise security, and our tool gives you the exact insights you need to confidently eliminate weak points. Key benefits for your security team: - Identify and resolve hidden vulnerabilities with deep, automated scanning. - Protect your mission-critical data from evolving external and internal threats. - Streamline compliance reporting with clear, actionable security insights. Take control of your mainframe security. Partner with Rocket Software to protect your digital foundation today.
-
Epicor Connected Process ControlEpicor Connected Process Control (CPC) is a flexible no-code/low-code MES and manufacturing operations platform that helps manufacturers standardize production and assembly processes, improve quality, and increase visibility across the shop floor. Using digital work instructions with multimedia content, manufacturers can guide operators through critical tasks, enforce process control, and improve consistency across products, workstations, and production lines. CPC connects equipment and devices to collect production and quality data in real time, helping manufacturers identify issues faster, reduce waste, and support continuous improvement. CPC provides product traceability with a complete historical record of each product's build and inspection history. Manufacturers use CPC to support assembly verification, error proofing, quality inspections, operator guidance, and other connected manufacturing initiatives. For manufacturers with complex product variations, CPC can dynamically present the correct work instructions based on the product or configuration being built, helping ensure products are assembled accurately and consistently. Available on-premises or in the cloud, CPC scales from a single work cell to enterprise-wide deployments.
-
KrakenDEngineered for peak performance and efficient resource use, KrakenD can manage a staggering 70k requests per second on just one instance. Its stateless build ensures hassle-free scalability, sidelining complications like database upkeep or node synchronization. In terms of features, KrakenD is a jack-of-all-trades. It accommodates multiple protocols and API standards, offering granular access control, data shaping, and caching capabilities. A standout feature is its Backend For Frontend pattern, which consolidates various API calls into a single response, simplifying client interactions. On the security front, KrakenD is OWASP-compliant and data-agnostic, streamlining regulatory adherence. Operational ease comes via its declarative setup and robust third-party tool integration. With its open-source community edition and transparent pricing model, KrakenD is the go-to API Gateway for organizations that refuse to compromise on performance or scalability.
-
NodeMavenNodeMaven employs a sophisticated filtering mechanism that evaluates IPs in real-time prior to allocation, guaranteeing that you receive high-quality addresses 95% of the time. With access to over 30 million premium, pre-screened residential IPs spanning more than 150 countries and 1,400 cities, NodeMaven facilitates targeted usage at the country, region, and city levels. Their state-of-the-art filtering process ensures that 95% of the IPs maintain clean records, thereby boosting success rates in activities such as web scraping, SEO monitoring, and social media management. The platform allows for unlimited concurrent sessions and features super sticky sessions that can endure for up to 24 hours, ensuring stable and dependable connections. NodeMaven's intuitive dashboard makes the selection of proxies and their integration with popular third-party applications like Selenium, Puppeteer, and various anti-detect browsers a breeze. Additionally, they offer comprehensive onboarding assistance and expert support to help users successfully navigate anti-bot systems, thereby enhancing user experience and efficiency. This combination of features positions NodeMaven as a leading choice for those in need of reliable proxy solutions.
-
Splashtop Autonomous Endpoint ManagementSplashtop Autonomous Endpoint Management offers a solution driven by automation for endpoint management, aimed at assisting IT teams in the remote monitoring, security, patching, and management of endpoints while reducing the need for manual intervention. This solution delivers immediate insights into device health, automates the patching process for both system and third-party applications, and ensures compliance tracking in distributed settings. With the capability of secure remote access and real-time patch management, it works effectively alongside tools like Microsoft Intune to identify and address zero-day vulnerabilities swiftly. Centralized dashboards present a comprehensive view of inventory, security metrics, and endpoint conditions, enabling IT teams to proactively resolve issues before they affect end users while ensuring adherence to crucial regulations such as ISO/IEC 27001, SOC 2, GDPR, HIPAA, and PCI. Furthermore, AEM streamlines routine operations, such as patch deployment and system updates, thereby liberating IT personnel from monotonous tasks and empowering them to focus on more complex challenges. Overall, this advanced endpoint management solution not only enhances efficiency but also fortifies the security landscape of an organization.
-
Jama ConnectJama Connect®, a product development platform, uniquely creates Living Requirements™. This digital thread is created through siloed, test, and risk activities to provide end to end compliance, risk mitigation, process improvement, and compliance. Companies creating complex products, systems, and software can now define, align, and execute on what they need. This reduces the time and effort required to prove compliance and saves on rework. You can be sure of success by choosing a solution that is easy-to-use, flexible, and offers support and services that are adoption-oriented.
Description
Coverity Static Analysis serves as an all-encompassing solution for code scanning, assisting both developers and security teams in producing superior software that meets security, functional safety, and various industry standards. It efficiently detects intricate defects within large codebases, pinpointing and addressing quality and security concerns that may arise across multiple files and libraries. Coverity ensures adherence to numerous standards such as OWASP Top 10, CWE Top 25, MISRA, and CERT C/C++/Java, and offers comprehensive reports that help in monitoring and prioritizing issues. By utilizing the Code Sight™ IDE plugin, developers benefit from immediate feedback, including insights on CWE and instructions for remediation, directly integrated into their development settings, which helps to weave security practices seamlessly into the software development lifecycle while maintaining developer productivity. This tool not only contributes to enhanced code integrity but also fosters a culture of continuous improvement in software security practices.
Description
The Secure Programming Group at the University of Virginia's Department of Computer Science is responsible for the development and ongoing maintenance of Splint. David Evans leads the project and serves as its main developer. Memory bounds checking was created by David Larochelle. Significant contributions to Splint's development were also made by University of Virginia students, including Chris Barker, David Friedman, Mike Lanouette, and Hien Phan. Splint serves as the evolution of LCLint, a tool that originated from a collaborative research effort between the Massachusetts Institute of Technology and Digital Equipment Corporation's System Research Center. David Evans was also the chief designer and developer of LCLint. The initial concept for a static checking tool aimed at identifying discrepancies between LCL specifications and their C implementations came from John Guttag and Jim Horning. Their insights into the design and functionality proved invaluable, playing a crucial role in shaping both LCLint and its successor, Splint. Together, the team has fostered a robust environment for developing tools that enhance software reliability and security.
API Access
Has API
No
API Access
Has API
No
Screenshots View All
No images available
Integrations
C
Yes
C++
Yes
Android
Yes
Apple iOS
Yes
CUDA
Yes
Coco Code Coverage
Yes
GitHub
Yes
GitLab
Yes
Go
Yes
Google Cloud Platform
Yes
Integrations
C
Yes
C++
Yes
Android
No
Apple iOS
No
CUDA
No
Coco Code Coverage
No
GitHub
No
GitLab
No
Go
No
Google Cloud Platform
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
No
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Black Duck
Founded
2002
Country
United States
Website
www.blackduck.com/static-analysis-tools-sast/coverity.html
Vendor Details
Company Name
University of Virginia
Founded
2007
Country
United States
Website
splint.org
Product Features
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Static Code Analysis
Analytics / Reporting
No
Code Standardization / Validation
No
Multiple Programming Language Support
No
Provides Recommendations
No
Standard Security/Industry Libraries
No
Vulnerability Management
No
Product Features
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Static Code Analysis
Analytics / Reporting
No
Code Standardization / Validation
No
Multiple Programming Language Support
No
Provides Recommendations
No
Standard Security/Industry Libraries
No
Vulnerability Management
No
