Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • TrustInSoft Analyzer Reviews & Ratings
    6 Ratings
    Company Website
  • Parasoft Reviews & Ratings
    126 Ratings
    Company Website
  • Aikido Security Reviews & Ratings
    100 Ratings
    Company Website
  • ThriveSparrow Reviews & Ratings
    13 Ratings
    Company Website
  • Wiz Reviews & Ratings
    1,051 Ratings
    Company Website
  • Astra Pentest Reviews & Ratings
    204 Ratings
    Company Website
  • Globalscape Enhanced File Transfer (EFT) Reviews & Ratings
    84 Ratings
    Company Website
  • Adobe PDF Library SDK Reviews & Ratings
    35 Ratings
    Company Website
  • Nutrient SDK Reviews & Ratings
    93 Ratings
    Company Website
  • Twilio Reviews & Ratings
    1,301 Ratings
    Company Website

What is Sparrow SAST?

Supports an extensive range of over 20 programming languages including Java, JSP, C/C++, C#, Python, Swift, ASP(.NET), ABAP, and Objective C, among others. It complies with international security standards and regulations. The system performs in-depth analyses of MVC frameworks, file associations, and function call relationships across multiple levels. To enhance efficiency, it employs incremental analysis that targets only the newly added or modified files along with their related components, effectively reducing analysis time. In collaboration with other Sparrow AST solutions like DAST and RASP, it identifies connections between vulnerabilities, which improves the precision of search results. The platform includes an issue navigator that tracks and monitors vulnerabilities from their origin to the specific implementation in the code. Furthermore, it provides automated guidance for fixing genuine source code issues while efficiently classifying vulnerabilities. Users can also access a dashboard to oversee analysis findings and statistical information. Rule management is centralized (Checker), integrating data on risk levels, configurations, and additional parameters for a thorough security strategy. Moreover, it allows users to keep a historical record of vulnerabilities, aiding in a more comprehensive understanding and resolution process over time, thereby enhancing the overall security posture.

What is C-STAT?

Static analysis serves as a crucial method for uncovering potential issues within your code by evaluating it directly at the source code level. C-STAT provides an impressive array of nearly 700 distinct checks, many of which align with the standards set forth in MISRA C:2012, MISRA C++:2008, and MISRA C:2004, alongside over 250 checks that address vulnerabilities defined by CWE. In addition to this, it evaluates compliance with the CERT C coding standard, emphasizing safe coding practices. C-STAT functions quickly and generates thorough and detailed error reports, which significantly aid in troubleshooting efforts. There’s no need to worry about intricate tool configurations or the complexities of language support and build system issues. Fully integrated into the IAR Embedded Workbench IDE, C-STAT allows for seamless maintenance of code quality throughout your development activities. This tool is designed to work with a broad spectrum of IAR Embedded Workbench products. By implementing static analysis, not only can you identify potential coding flaws, but it also supports adherence to recognized industry coding standards, thereby fostering improved software reliability and maintainability. Consequently, using C-STAT enables developers to focus more on innovation while ensuring that their code remains robust and compliant.

Media

Media

Integrations Supported

C
C++
ASP.NET
C#
IAR Embedded Workbench
Java
Kotlin
Microsoft Excel
Microsoft Word
Objective-C
Python
Swift

Integrations Supported

C
C++
ASP.NET
C#
IAR Embedded Workbench
Java
Kotlin
Microsoft Excel
Microsoft Word
Objective-C
Python
Swift

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

Sparrow

Date Founded

2018

Company Location

South Korea

Company Website

www.sparrowfasoo.com/en/product/sast

Company Facts

Organization Name

IAR Systems

Date Founded

1983

Company Location

Sweden

Company Website

www.iar.com/products/c-stat/

Categories and Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Categories and Features

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Popular Alternatives

PT Application Inspector Reviews & Ratings

PT Application Inspector

Positive Technologies

Popular Alternatives

DoubleCheck Code Analysis Reviews & Ratings

DoubleCheck Code Analysis

Green Hills Software
Snappytick Reviews & Ratings

Snappytick

Snappycode Audit
Helix QAC Reviews & Ratings

Helix QAC

Perforce
YAG-Suite Reviews & Ratings

YAG-Suite

YAGAAN
Klocwork Reviews & Ratings

Klocwork

Perforce
CppDepend Reviews & Ratings

CppDepend

CoderGears