Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • TrustInSoft Analyzer Reviews & Ratings
    6 Ratings
    Company Website
  • Parasoft Reviews & Ratings
    120 Ratings
    Company Website
  • Aikido Security Reviews & Ratings
    71 Ratings
    Company Website
  • BrewPOS Reviews & Ratings
    8 Ratings
    Company Website
  • actiTIME Reviews & Ratings
    145 Ratings
    Company Website
  • ALMobile Reviews & Ratings
    29 Ratings
    Company Website
  • QVscribe Reviews & Ratings
    1 Rating
    Company Website
  • FastBound Reviews & Ratings
    24 Ratings
    Company Website
  • Action1 Reviews & Ratings
    455 Ratings
    Company Website
  • Classter Reviews & Ratings
    174 Ratings
    Company Website

What is Splint?

The Secure Programming Group within the Department of Computer Science at the University of Virginia is charged with both the creation and continual enhancement of Splint, a static analysis tool. Leading this initiative is David Evans, who is also the primary developer of the project. The initial concept of memory bounds checking was introduced by David Larochelle, while University of Virginia students such as Chris Barker, David Friedman, Mike Lanouette, and Hien Phan made notable contributions to the project's advancement. Splint is essentially an evolution of LCLint, a tool that emerged from a collaborative research project involving the Massachusetts Institute of Technology and Digital Equipment Corporation's System Research Center. David Evans also played a pivotal role as the chief designer and developer of LCLint. The foundational idea for a static checking tool that could pinpoint inconsistencies between LCL specifications and their C implementations was conceived by John Guttag and Jim Horning. Their expertise and innovative ideas were instrumental in shaping both LCLint and its successor, Splint, thereby establishing a strong framework for developing tools that significantly improve software reliability and security. This collaborative effort highlights the importance of interdisciplinary teamwork in addressing complex programming challenges.

What is OpenText Fortify Static Code Analyzer?

Identify and address security vulnerabilities early on with the highest precision in the industry. The OpenTextâ„¢ Fortifyâ„¢ Static Code Analyzer effectively detects security flaws, prioritizes the most critical issues, and offers comprehensive guidance on how to resolve them. A centralized security management tool accelerates the resolution process for developers, supporting an extensive framework that includes 1,657 vulnerability categories across over 33 programming languages and more than a million APIs. Fortify's integration platform enables seamless incorporation of security measures into the application development tools you already use. The Audit Assistant feature allows users to manage the speed and accuracy of SAST scans by adjusting their depth, which helps reduce false-positive results. Additionally, you can dynamically scale SAST scans according to the evolving requirements of the CI/CD pipeline. This robust solution facilitates shift-left security for cloud-native applications, encompassing everything from infrastructure as code to serverless architectures, ensuring comprehensive protection throughout the development lifecycle. Embracing such proactive security measures not only enhances the overall integrity of applications but also fosters a culture of security awareness within development teams.

Media

No images available

Media

Integrations Supported

Amazon Web Services (AWS)
Azure DevOps Server
Bitbucket
Black Duck
C
CrowdStrike Container Security
GitHub
Gradle
HivePro Uni5
Jira
MATLAB
Microsoft 365
Nucleus
Phoenix Security
Selenium
Slack
SonarQube Server
Sonatype Nexus Repository
ThreadFix
Tromzo

Integrations Supported

Amazon Web Services (AWS)
Azure DevOps Server
Bitbucket
Black Duck
C
CrowdStrike Container Security
GitHub
Gradle
HivePro Uni5
Jira
MATLAB
Microsoft 365
Nucleus
Phoenix Security
Selenium
Slack
SonarQube Server
Sonatype Nexus Repository
ThreadFix
Tromzo

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Pricing Information

Pricing not provided.
Free Trial Offered?
Free Version

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

University of Virginia

Date Founded

2007

Company Location

United States

Company Website

splint.org

Company Facts

Organization Name

OpenText

Date Founded

1991

Company Location

Canada

Company Website

www.opentext.com/products/fortify-static-code-analyzer

Categories and Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Categories and Features

Application Security

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Popular Alternatives

Popular Alternatives

Klocwork Reviews & Ratings

Klocwork

Perforce
PT Application Inspector Reviews & Ratings

PT Application Inspector

Positive Technologies
Flawnter Reviews & Ratings

Flawnter

CyberTest
PT Application Inspector Reviews & Ratings

PT Application Inspector

Positive Technologies