Klocwork

Klocwork is a static code analysis and SAST tool for C, C++, C#, and Java that identifies software security, quality, and reliability issues helping to enforce compliance with standards. This has made Klocwork the preferred static analyzer that keeps development velocity high while enforcing continuous compliance for security and quality.

Languages supported:

9.0/10 (Expert Score) ★★★★★
Product is rated as #6 in category Peer Code Review Software
Ease of use
8.2
Support
9.3
Ease of Setup
7.9

Klocwork is a static code analysis and SAST tool for C, C++, C#, and Java that identifies software security, quality, and reliability issues helping to enforce compliance with standards.

Built for enterprise DevOps and DevSecOps, Klocwork scales to projects of any size, integrates with large complex environments, a wide range of developer tools, and provides control, collaboration, and reporting for the entire enterprise. This has made Klocwork the preferred static analyzer that keeps development velocity high while enforcing continuous compliance for security and quality.

Klocwork
Klocwork

Show more categories

Customer Reviews

Klocwork Reviews

Vikash K.

Advanced user of Klocwork
★★★★★
Klocwork has improved our code quality. Checkers have kept our code quality at very high note.

What do you like best?

Wide range of checkers. valuable issue segregation and easy report visibility for all type is issues/warnings. User friendly commands for building and analysis. Awesome commands to automate klocwork scan activities. It integrates with CI/CD tools, containers, cloud services, and machine provisioning making automated security testing easy. Security Standards: CWE, OWASP, CERT, PCI DSS, DISA STIG, and ISO/IEC TS 17961.

It analyzes source code in real time, simplifies peer code reviews, and extends the life of complex software.

What do you dislike?

Only few programming languages are supported. Few more security checks required. strong filtering and report analysis features required. would like to see better codes between projects and a more user-friendly desktop in the next release. Issue we have is that whenever we need to get the code we have to build it first. Then we can get the report. I would like to see a dashboard added to provide a clear look and feel. The dashboard would then supplement the users to enable them to get a quick view of the content, as long is it is clear. A presentational dashboard would be good.

Recommendations to others considering the product:

Klocwork is industry leading and proven static code analysis tool. Use it to improve Application security and code quality. It works like spell check for developers.

What problems are you solving with the product? What benefits have you realized?

Resolving all static code issues, syntax issues, security issues and null issues. solution is scalable. It improves Application security and code quality.

Review source: G2.com

Leave a reply

Your total score

B2B Software Guide