Klocwork

1. Application Security:

• Built-in checkers for secure coding standards
  • CWE
  • CERT
  • DISA STIG
  • CWE/SANS Top 25
  • OWASP
  • MISRA
• A configurable arsenal of security checkers out of the box
• Engineered to detect these weaknesses:
  • Buffer overflows
  • Un-validated user input
  • Injection
  • Cross-site scripting
  • Information leakage
  • Vulnerable coding practices
  • Banned APIs
  • Memory and resource leaks
  • Concurrency violations
  • Infinite loops
  • Dereferencing NULL pointers
  • Usage of uninitialized data
  • Resource management
  • Memory allocation errors

2. Code Refactoring:

• Maintains C/C++ code within Visual Studio or Eclipse
• Built-in C/C++ 11 refactoring provides a consistent, refactoring discipline
• Desktop analysis functions - enables intelligent clone detection when extracting methods or introducing variables

3. Code Review:

• Collaborative problem-solving environment
• Social notifications, threaded discussions, and an infinite activity wall
• Real-time notifications
• Personal backlogs, to-do lists, and a rich search grammar
• Relevant actions can be assigned to authors, other reviewers
• Customizable, visual reports

4. Reporting and Metrics:

• Customizable dashboards
• Drag and drop
• Automatically aggregates information about what is being found and fixed at the desktop

5. Static Code Analysis:

• Vulnerability and defect detection
• Runs while code is created, checking line-by-line
• C/C++, Java or C# source code

Update tool info HERE