klocwork.comStatic Code Analyzer for C/C++/C#/Java| Perforce

Skip to main content Search Secondary navigation Downloads Integrations Blog Company About Us Team Culture Careers Partners Press Events Contact Contact Us Request Support Subscribe Language English 日本語 简体中文 한국어 Perforce Main Navigation - Mega Menu Products Main Navigation - Mega Menu Explore Products All Products Main Navigation - Mega Menu Version Control Development Lifecycle Planning Automated Testing & Code Quality Java Developer Toolkit Open Source Support API Management PHP Application Platform Embedded Components Helix Core Helix 4Git Helix TeamHub Helix ALM Hansoft Gliffy Helix QAC Klocwork Perfecto Mobile Perfecto Web TotalView Akana OpenLogic Zend Server JRebel XRebel SourcePro IMSL Solutions Main Navigation - Mega Menu Explore Solutions Solutions Overview Main Navigation - Mega Menu By Need By Industry Main Navigation - Mega Menu Version Control Agile Project Management Application Lifecycle Management Audit & Compliance DevOps Backlog Management Project Portfolio Management Static Analysis Main Navigation - Mega Menu Aerospace & Defense Automotive Embedded Systems Energy Financial Game Development Government Medical Devices Software Customers Mobile Only Off Resources Main Navigation - Mega Menu Explore Resources Papers & Videos Recorded Webinars Events Blog Demos Subscribe How to Lock Down Git Read Now Support Main Navigation - Mega Menu Explore Support Support Plans Self-Service Resources Documentation Video Tutorials Migrating to Perforce Training Consulting Release Notes Download Software Request Support Get answers quick by searching our public knowledgebase Visit Perforce KB Try Free Downloads Mobile Only On Integrations Mobile Only On Blog Mobile Only On Company Main Navigation - Mega Menu About Us Mobile Only Off Careers Mobile Only Off Culture Mobile Only Off Events Mobile Only Off Partners Mobile Only Off Press Mobile Only Off Team Mobile Only Off Contact Mobile Only On logo-klocwork-horizontal-reversed-02 Static Code Analysis For C, C++, C#, and Java REQUEST MY TRIAL SEE A DEMO Klocwork What's New Contact Klocwork Contact Klocwork Why Choose Klocwork? Klocwork is one of the most accurate code analyzers for C, C++, C#, and Java programming languages. It’s a modern, Agile static code analyzer that scales to projects of any size and works effectively within the DevOps cycle. What’s more, it’s certified for functional safety compliance by TÜV-SÜD , including IEC 61508, ISO 26262, IEC 62304, and EN 50128. PRODUCT BRIEF Compliance Safe, Secure, & Reliable Code Higher Code Quality industry-energy Faster Releases Why Use Klocwork Klocwork Key Features DevOps Ready Klocwork tools are designed with Continuous Integration and Continuous Delivery foremost in our thinking, which makes it easy to include static code analysis as part of your CI/CD pipelines. Differential Analysis: Using system context data from the Klocwork Server, it is possible to analyze only the files that changed while also providing differential analysis results as if the entire system had been analyzed. This provides you with the shortest possible analysis times. Easy to Automate: Klocwork tools have common command line interfaces, the Klocwork defect data can be accessed via a REST API and all output formats use standard formats, such as XML, JSON, and PDF. Containerized Builds: Klocwork can be run within containerized and Cloud build systems and supports the provisioning of machine instances as required. Providing maximum flexibility and opportunity to use internal or external Cloud services for code analysis. Control, Collaboration, and Reporting The Klocwork Portal dashboard is a centralized store of analysis data, trends, metrics, and configurations for codebases across the organization — accessed through a web browser. The dashboard is highly customizable, enabling your developers, managers, and other stakeholders to: Define global or project-specific QA and security objectives and rule configurations. Control access permissions and approval workflows. View trending and metrics data for project quality and compliance. Produce compliance and security reports. Prioritize defects based on severity, location, and lifecycle. Distinguish new issues from legacy code issues. Push backlog issues to Change Control systems. Designed for Developers By seamlessly integrating static code analysis with the rest of your development toolset, Klocwork will shift-left defect detection and improve developer adoption as a tool for developer training and increasing productivity. No User Configuration: Klocwork provides out of the box support for hundreds of compilers and cross-compilers, so build integration is automatic. Easy to Use: Plugins for popular IDEs (including Microsoft Visual Studio , Eclipse, IntelliJ, and more). Connected Desktop: Local code changes made using the connected desktop plugins provide immediate differential analysis results within IDEs. Detailed Feedback and Help: Intraprocedural defects and coding violations are identified by severity of risk. For each defect and coding violation, you will receive detailed information of cause with rich, context-sensitive help and guidance on remediation. This allows for easily accessible opportunities for understanding and learning. Custom Rules: A graphical custom checker creation tool makes the implementation of project- or organization-specific rule quick and easy — further enriching the learning opportunities. Architectural Analysis Klocwork also integrates with architectural visualization and enforcement tools like Structure 101 to allow users to further improve the overall quality and maintainability of their codebase through clean and correct dependencies. “With Klocwork we’ve been able to identify problems that would have been missed, and discover errors more quickly than through traditional manual analysis and testing. That’s allowed us to deliver the high-quality software we pride ourselves on and that our customers expect.” — Engineering Manager, SCM Systems Klocwork Quality Coding Standards Klocwork makes it easy to comply with quality coding standards. You can use the following compliance taxonomies to enforce coding standards across your codebase. And, you’ll get fewer false positives and false negatives in your diagnostics. MISRA AUTOSAR NASA CERT CWE DISA STIG OWASP Klocwork Quality MISRA Compliance for C and C++ Check your code against the MISRA C ® and C++ coding standards — automatically. The MISRA coding rules identify potential issues in safety-critical systems and flag sections of your code that violate these rules. The MISRA C checkers enforce MISRA C:2012, including Amendment 1 security rules. The MISRA C++ checkers enforce MISRA C++:2008 rules. AUTOSAR Compliance for C++14 Check your code against the AUTOSAR C++14 coding standard — automatically. The AUTOSAR coding rules identify safety issues in C++14. Use the AUTOSAR C++14 compliance taxonomy to flag any code that violates these rules. So, you’ll be able to ensure compliance — and fulfill ISO standards. And, you’ll be able to track and report on compliance. NASA Compliance for C and C++ Check your code against the NASA Compliance for C and C++ — automatically. The taxonomy eliminates coding practices that make code difficult to review or statically analyze. The rules complement the MISRA C guidelines and are incorporated into the Jet Propulsion Laboratory (JPL) coding standards. The taxonomy identifies code with those 10 weaknesses or vulnerabilities and prioritizes those violations. CERT Compliance for C and C++ Check your code against the CERT C and C++ coding standards — automatically. The CERT coding rules identify security vulnerabilities in your code. Use the CERT C and C++ taxonomies to flag code that violates these rules. This helps you eliminate undefined behaviors and apply best practices for secure code. And, Klocwork helps you to prioritize and fix the most critical violations first. It will even provide you with...