Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • BrewPOS Reviews & Ratings
    8 Ratings
    Company Website
  • TrustInSoft Analyzer Reviews & Ratings
    6 Ratings
    Company Website
  • Parasoft Reviews & Ratings
    143 Ratings
    Company Website
  • ZeroPath Reviews & Ratings
    2 Ratings
    Company Website
  • Aikido Security Reviews & Ratings
    226 Ratings
    Company Website
  • SenseIP Reviews & Ratings
    1 Rating
    Company Website
  • Altium Develop Reviews & Ratings
    1,346 Ratings
    Company Website
  • DbVisualizer Reviews & Ratings
    565 Ratings
    Company Website
  • Elation Health Reviews & Ratings
    88 Ratings
    Company Website
  • FastBound Reviews & Ratings
    24 Ratings
    Company Website

What is Splint?

The Secure Programming Group within the Department of Computer Science at the University of Virginia is charged with both the creation and continual enhancement of Splint, a static analysis tool. Leading this initiative is David Evans, who is also the primary developer of the project. The initial concept of memory bounds checking was introduced by David Larochelle, while University of Virginia students such as Chris Barker, David Friedman, Mike Lanouette, and Hien Phan made notable contributions to the project's advancement. Splint is essentially an evolution of LCLint, a tool that emerged from a collaborative research project involving the Massachusetts Institute of Technology and Digital Equipment Corporation's System Research Center. David Evans also played a pivotal role as the chief designer and developer of LCLint. The foundational idea for a static checking tool that could pinpoint inconsistencies between LCL specifications and their C implementations was conceived by John Guttag and Jim Horning. Their expertise and innovative ideas were instrumental in shaping both LCLint and its successor, Splint, thereby establishing a strong framework for developing tools that significantly improve software reliability and security. This collaborative effort highlights the importance of interdisciplinary teamwork in addressing complex programming challenges.

What is Coverity Static Analysis?

Coverity Static Analysis acts as a comprehensive tool for scanning code, aiding developers and security teams in creating high-quality software that aligns with security, functional safety, and various industry benchmarks. It adeptly identifies complex issues within extensive codebases, effectively highlighting and resolving quality and security vulnerabilities that may occur across different files and libraries. By ensuring compliance with multiple standards such as OWASP Top 10, CWE Top 25, MISRA, and CERT C/C++/Java, Coverity provides detailed reports that facilitate the tracking and prioritization of potential issues. Utilizing the Code Sightâ„¢ IDE plugin allows developers to receive instant feedback, including guidance on CWE and remediation strategies, which is seamlessly integrated into their development environments. This integration not only promotes security practices throughout the software development lifecycle but also helps maintain high levels of developer productivity. Furthermore, the use of this tool significantly enhances code reliability and cultivates a proactive approach to software security enhancement among teams.

Media

No images available

Media

Integrations Supported

C
C++
Android
ArmorCode
Black Duck
C#
Docker
GitHub
Go
Google Cloud Platform
Kondukto
Logilica
MATLAB
Salesforce
Terraform
ThreadFix
Travis CI
Tromzo
Visual Basic
Vue.js

Integrations Supported

C
C++
Android
ArmorCode
Black Duck
C#
Docker
GitHub
Go
Google Cloud Platform
Kondukto
Logilica
MATLAB
Salesforce
Terraform
ThreadFix
Travis CI
Tromzo
Visual Basic
Vue.js

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

University of Virginia

Date Founded

2007

Company Location

United States

Company Website

splint.org

Company Facts

Organization Name

Black Duck

Date Founded

2002

Company Location

United States

Company Website

www.blackduck.com/static-analysis-tools-sast/coverity.html

Categories and Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Categories and Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Popular Alternatives

david3 Reviews & Ratings

david3

Tobit Software

Popular Alternatives

MB&G MobileMap Reviews & Ratings

MB&G MobileMap

Mason Bruce & Girard
Revenera SCA Reviews & Ratings

Revenera SCA

Revenera
david.net Reviews & Ratings

david.net

2R Software GmbH