Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • BrewPOS Reviews & Ratings
    8 Ratings
    Company Website
  • TrustInSoft Analyzer Reviews & Ratings
    6 Ratings
    Company Website
  • Parasoft Reviews & Ratings
    143 Ratings
    Company Website
  • ZeroPath Reviews & Ratings
    2 Ratings
    Company Website
  • Aikido Security Reviews & Ratings
    226 Ratings
    Company Website
  • SenseIP Reviews & Ratings
    1 Rating
    Company Website
  • Altium Develop Reviews & Ratings
    1,346 Ratings
    Company Website
  • DbVisualizer Reviews & Ratings
    565 Ratings
    Company Website
  • Elation Health Reviews & Ratings
    88 Ratings
    Company Website
  • FastBound Reviews & Ratings
    24 Ratings
    Company Website

What is Splint?

The Secure Programming Group within the Department of Computer Science at the University of Virginia is charged with both the creation and continual enhancement of Splint, a static analysis tool. Leading this initiative is David Evans, who is also the primary developer of the project. The initial concept of memory bounds checking was introduced by David Larochelle, while University of Virginia students such as Chris Barker, David Friedman, Mike Lanouette, and Hien Phan made notable contributions to the project's advancement. Splint is essentially an evolution of LCLint, a tool that emerged from a collaborative research project involving the Massachusetts Institute of Technology and Digital Equipment Corporation's System Research Center. David Evans also played a pivotal role as the chief designer and developer of LCLint. The foundational idea for a static checking tool that could pinpoint inconsistencies between LCL specifications and their C implementations was conceived by John Guttag and Jim Horning. Their expertise and innovative ideas were instrumental in shaping both LCLint and its successor, Splint, thereby establishing a strong framework for developing tools that significantly improve software reliability and security. This collaborative effort highlights the importance of interdisciplinary teamwork in addressing complex programming challenges.

What is DeepSource?

DeepSource is an AI-powered platform designed to automate code reviews and help engineering teams build more secure and reliable software. It uses a hybrid analysis approach that combines deterministic static code analysis with advanced AI review agents to examine code changes. The platform integrates seamlessly with development environments such as GitHub, GitLab, Bitbucket, and Azure DevOps, enabling automatic analysis of pull requests. Each code change is scanned for bugs, security vulnerabilities, performance risks, complexity issues, and maintainability concerns. Developers receive inline comments and structured review summaries that explain problems and suggest improvements. The system includes Autofix capabilities that generate verified patches for many detected issues, allowing developers to resolve problems quickly. DeepSource also monitors dependency vulnerabilities using reachability and taint analysis to identify which open-source risks actually affect the codebase. Security tools detect exposed secrets, API keys, and credentials before they reach production environments. Infrastructure-as-code scanning helps identify configuration weaknesses in Terraform and CloudFormation files. Teams can track test coverage to ensure new code is properly tested before merging. Compliance reports map vulnerabilities to recognized security standards such as OWASP Top 10 and SANS Top 25. The platform also offers full codebase scanning to identify long-term quality and security issues across existing repositories. By combining automation, security intelligence, and actionable feedback, DeepSource enables organizations to scale development without sacrificing code quality.

Media

No images available

Media

Integrations Supported

C++
.NET
Amazon Web Services (AWS)
Ansible
Azure DevOps
C
C#
CircleCI
GitHub Student Developer Pack
GitLab
JSON
JavaScript
MATLAB
PHP
Python
Ruby
Rust
Scala
Terraform
Travis CI

Integrations Supported

C++
.NET
Amazon Web Services (AWS)
Ansible
Azure DevOps
C
C#
CircleCI
GitHub Student Developer Pack
GitLab
JSON
JavaScript
MATLAB
PHP
Python
Ruby
Rust
Scala
Terraform
Travis CI

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Pricing Information

$24/user/month
Free Trial Offered?
Free Version

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

University of Virginia

Date Founded

2007

Company Location

United States

Company Website

splint.org

Company Facts

Organization Name

DeepSource

Date Founded

2018

Company Location

United States

Company Website

deepsource.com

Categories and Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Categories and Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Popular Alternatives

david3 Reviews & Ratings

david3

Tobit Software

Popular Alternatives

MB&G MobileMap Reviews & Ratings

MB&G MobileMap

Mason Bruce & Girard
SonarQube Cloud Reviews & Ratings

SonarQube Cloud

SonarSource
david.net Reviews & Ratings

david.net

2R Software GmbH