Splint Description
The University of Virginia Department of Computer Science has developed and maintained Splint. David Evans is the project leader, and the primary developer for Splint. David Larochelle created the memory bounds testing. Splint was developed by four University of Virginia students, Hien Phan, Mike Lanouette, David Friedman and Mike Friedman. Splint is the successor of LCLint. This tool was originally developed as part of a joint research project by the Massachusetts Institute of Technology (MIT) and the Digital Equipment Corporation's System Research Center (DEC). LCLint was developed and designed by David Evans. Jim Horning and John Guttag had the original idea of LCLint, a static checking tool that could detect inconsistencies between LCL specifications & their C implementations. They were invaluable in the development of the tool's functionality and design.
Splint Alternatives
Kiuwan Code Security
Security Solutions for Your DevOps Process
Automate scanning your code to find and fix vulnerabilities. Kiuwan Code Security is compliant with the strictest security standards, such OWASP or CWE. It integrates with top DevOps tools and covers all important languages.
Static application security testing and source analysis are both effective, and affordable solutions for all sizes of teams. Kiuwan provides a wide range of essential functionality that can be integrated into your internal development infrastructure.
Quick vulnerability detection: Simple and quick setup. You can scan your area and receive results in minutes.
DevOps Approach to Code Security: Integrate Kiuwan into your Ci/CD/DevOps Pipeline to automate your security process.
Flexible Licensing Options. There are many options. One-time scans and continuous scanning. Kiuwan also offers On-Premise or Saas models.
Learn more
Klocwork
Klocwork static code analysis for C, C++ and C#, JavaScript, and the SAST tool for JavaScript, helps to identify software security, reliability, quality, and compliance issues. Klocwork is designed for enterprise DevOps/DevSecOps. It scales to any project, integrates with large complex environments and a wide variety of developer tools. It also provides control, collaboration and reporting for the entire enterprise. Klocwork is the most popular static analyzer, allowing developers to work faster while still maintaining security and quality. Klocwork static application security tests (SASTs) are available for DevOps (DevSecOps). Our security standards help to identify security flaws and allow you to fix them quickly. They also prove compliance with internationally recognized security standards. Klocwork integrates easily with CI/CD tools and containers, as well as cloud services and machine provisioning, making automated security testing simple.
Learn more
PT Application Inspector
PT Application Inspector is a source code analyzer that provides high-quality analysis and easy tools to automatically confirm vulnerabilities. This allows security specialists and developers to work more efficiently and speed up the process of creating reports. Combining static, dynamic, as well as interactive application security testing (SAST+ DAST+ IAST) yields unparalleled results. PT Application Inspector only identifies the real vulnerabilities, so you can concentrate on the issues that really matter. Special features such as automatic vulnerability verification, filtering and incremental scanning for each vulnerability, as well interactive data flow diagrams (DFDs) for each vulnerability, make remediation much faster. Reduce vulnerabilities in the final product, and reduce the cost of fixing them. Analyze the software at the very beginning of its development.
Learn more
Axivion Static Code Analysis
Static code analysis tool for C++ and C code that helps developers to check compliance with standards, security vulnerabilities and code quality issues. It performs an automated analysis to detect violations of coding standards like MISRA and detect clones and dead code. The key features include coding standards, metric monitoring and defect analysis.
Learn more
Pricing
Free Version:
Yes
Integrations
Company Details
Company:
University of Virginia
Year Founded:
2007
Headquarters:
United States
Website:
splint.org
Media
Recommended Products
Power Up Your AI with Databricks – Free Trial
Take your data and AI to the next level with Databricks – free trial on AWS, Azure, or Google Cloud. Create production-ready Generative AI apps that are accurate, secure, and tailored to your business. Simplify data ingestion from hundreds of sources with effortless ETL automation. Plus, tap into instant, elastic serverless compute during your trial (available on AWS/Azure). Sign up with your work email now to unlock premium trial perks and transform how you work with data – don’t wait!
Product Details
Platforms
SaaS
Type of Training
Documentation
Customer Support
Online
Splint Features and Options
Splint User Reviews
Write a Review- Previous
- Next