Name: Klocwork
Author: Perforce Software

Help Desk

Web and Video Conferencing

Customer Support

Augmented Reality Development

Batch Management Software

Software Configuration Management

Development

Business Intelligence (BI)

Collaboration

Data Discovery and Visualization

Digital Rights Management (DRM)

Document Management

Dropshipping

Electronic Signature

Operational Analytics

Enterprise

Accounting

Trust Management

Finance and Accounting

Applicant Tracking

Corporate Learning Management

Corporate Volunteering

HR Management

Payroll

Recruitment Agency

Relocation

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

eLearning Content

Human Resources

3D Printing

AI Governance

Application Lifecycle Management (ALM)

Cloud Storage

Consulting and Advisory Services

Content Delivery Networks (CDN)

Data Fabric

Data Recovery Service

Fraud Detection

Hadoop-Related

Integration Platform as a Service (iPaaS)

Internet Performance Monitoring

Managed File Transfer (MFT)

Network Performance Monitoring

Office Migration and Repair

Robotic Process Automation (RPA)

System Monitoring

Zero Trust Security Solutions

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Audience Engagement

Blogging

Competitive Intelligence

Content Management

Email Marketing

Local Marketing

Marketing Automation

Social Media Management

Survey & Forms Building

Text to Speech

Web Analytics

Wholesale Marketplace

Marketing

Job Site Management

Project Management

Waste Management

Writing and Proofreading Tools

Professional Services

Customer Relationship Management (CRM)

Sales

Cloud Access Security Brokers

User and Entity Behavior Analytics (UEBA)

Security

Architecture

Camp Management

Chargeback Management

Dental

Digital Forensics

Nonprofit CRM

Plagiarism Checker

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

Checkmarx

SonarQube Server

Sonar

Coverity Static Analysis (SAST)

Synopsys

S4 for Salesforce

DigitSec

Sentinel Source

ZAP by Checkmarx

Mend SAST

Mend.io

Reshift

Reshift Security

Beyond Security beSOURCE

Fortra

Brakeman Scanner

Open Source

### Code Quality Improvement
Users appreciate Klocwork's robust code quality improvement capabilities, noting its effectiveness in early error detection and enhancing overall code quality. The tool's ability to identify and resolve static code issues, syntax errors, and security vulnerabilities has been instrumental in ensuring application security and maintaining high code standards. Additionally, reviewers highlight Klocwork's user-friendly interface, quality gates, and extensive library of built-in taxonomies as valuable features that contribute to the platform's success in improving code quality.

### Static Code Analysis Techniques
Users generally appreciate Klocwork's wide range of checkers and its ability to provide valuable issue segregation and easy report visibility for all types of issues and warnings. While some users find the user interface a bit challenging to navigate through the depth of analysis, the overall consensus is positive regarding the effectiveness of Klocwork's static code analysis techniques in enhancing application security and code quality. Suggestions for improvement include adding more security checks, enhancing filtering and report analysis features, and improving the user interface for better code visibility and a more user-friendly experience.

### Security and Vulnerability Detection
Users consistently highlight Klocwork's security and vulnerability detection as a standout feature, praising its ability to identify and address potential security risks within their codebase. The integration with industry-standard security standards such as CWE, OWASP, and PCI DSS is particularly lauded for enhancing the overall security posture of applications. While some users express a desire for additional security checks and improved reporting features, the general sentiment leans towards Klocwork being a reliable tool for bolstering application security and mitigating vulnerabilities effectively.

### Development and Integration Tools
Users generally praise Klocwork's robust development and integration tools for enhancing their CI/CD processes. The tool's integration with popular IDEs, CI/CD platforms like Jenkins, and Docker containers streamlines the development workflow, allowing for efficient code analysis and issue detection early in the development cycle. While some users highlight the need for improvements in areas like REST API functionality and issue suppression traceability, overall, Klocwork's development and integration tools are recognized for their valuable contributions to software development and security practices.

### Project and Build Management
User sentiment regarding Klocwork's project and build management capabilities is mixed. While users appreciate the tool's ability to find critical defects and support incremental builds for software versions comparison, there are concerns about the outdated web UI and issues with the scanner not returning accurate results when project rules are not met. Additionally, users highlight the need for better customization options in report creation, improved traceability of developer issue suppression, and the desire for enhanced support for a wider range of programming languages and security checks. Despite these drawbacks, users acknowledge the potential benefits of integrating Klocwork into automated development operations pipelines and emphasize the importance of tailoring the tool to meet specific business needs.

### Error and Issue Management
Users appreciate Klocwork's robust error and issue management capabilities, particularly its ability to detect coding issues that do not adhere to standards like MISRA. However, concerns have been raised about the lack of traceability for developer issue suppression from their desktops, leading to potential bottlenecks in reviewing suppressions for multiple projects. Despite this drawback, users find Klocwork's error and issue management tools instrumental in maintaining code quality and preventing runtime failures.

Users who have reviewed Klocwork commonly make the following recommendations:

1. Utilize the exceptional customer support: Users have commended Klocwork's customer support team for their phenomenal responsiveness and recommend reaching out to them for assistance and issue resolution.

2. Take advantage of the provided resources: Users suggest utilizing the videos and tutorials provided by Klocwork as they are beneficial in understanding the tool and getting started with it.

3. Consider integrating Klocwork into development operations: Users advise considering integrating Klocwork into an automated development operations pipeline to streamline the code analysis process and improve efficiency.

These recommendations highlight the strengths of Klocwork, namely its excellent customer support, comprehensive resources, and potential for integration into existing development workflows.

Klocwork has proven to be a valuable tool for users in addressing various business problems. Users have reported that the software helps them ensure the implementation of specific requirements by allowing them to report on those requirements effectively. The built-in checkers provided by Klocwork have met many organizational requirements, and any missing ones have been easily built by users themselves. This capability has allowed users to prioritize their analysis efforts, especially in areas of concern such as security aspects.

In terms of code quality, Klocwork has been highly effective in finding coding issues that do not meet standards like MISRA code profiling, code robustness, and quality assessment. By catching potential errors before checking files in, Klocwork increases confidence and reduces rework before formal test cycles. Users have also found Klocwork to be more effective than similar tools in identifying coding issues and best practices to minimize runtime failures.

Moreover, Klocwork's compliance with industry standards such as NIST and PCI has given users confidence in delivering products with low risk of vulnerabilities and adverse consequences. By eliminating vulnerabilities and weaknesses, the software reduces the cost of development and adoption. Additionally, Klocwork's support for industry standards like MISRA, CWE, CERT, OWASP, and Autosar makes it suitable for various use cases.

Users have found value in the simplicity and ease of use provided by Klocwork. The software enables users to write their own checkers, saving time and optimizing programming code. It also eliminates the manual process of checking internal standards by providing easy-to-generate reports and customization options. Furthermore, Klocwork provides an easy means to track the number and severity of bugs over time in a large codebase.

While manual analysis is still required, users consider the time invested in setting up and running Klocwork to be worthwhile. However, it is worth noting that some users have discontinued using the tool due to project completion or pending budget considerations for the next year.

Built-in Checkers: Users have found the built-in checkers in Klocwork to be highly effective in reducing false positives and providing on-the-fly analysis. Several reviewers have praised the impact of these checkers on improving code quality.

Customer Support: The customer support team for Klocwork has been widely praised for their high responsiveness and quick assistance. Many users have expressed their satisfaction with the level of support they received when encountering issues or needing guidance.

Integration with IDEs: Klocwork's integration with popular IDEs like Eclipse, Visual Studio, and Jenkins has been well-received by users. This integration allows for inline analysis of C++ code directly within the development environment, making it easier for developers to identify and address potential issues while coding.

Confusing Interface and Difficulty Getting Started: Some users have found the interface of the dashboard and added features to be confusing, making it difficult for them to get started with the software. They expressed a need for improved clarity and intuitiveness in order to streamline their workflow.

Setup and Installation Process: Users have expressed concerns about the setup and installation process, describing it as time-consuming. They have suggested that providing a setup install guide would greatly improve their experience by helping them navigate through this initial stage more efficiently.

Outdated Web UI: Several users have mentioned that the web UI of Klocwork looks outdated and could benefit from a more modern look and feel. They believe that updating the interface would enhance user satisfaction and make working with the software more visually appealing.

Klockwork, from Perforce Software, supports Static Code Analysis for C, C++, C#, Java, JavaScript, and Python.

SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines to ensure the software you produce is secure, reliable, and maintainable.

Community

Developer EDITION

Enterprise EDITION

Data Center EDITION

GitLab Essential

GitLab Premium

GitLab Ultimate

GitLab

Klocwork

Application Security Testing is a key element of ensuring that web applications remain secure. Various tools and managed services exist to provide continuous testing, besides application security platforms that include app testing as part of their functionality. Static Application Security Tests (SAST) examine applications while they are not running, searching source code for errors and security vulnerabilities.

Static Application Security Testing (SAST)

Klocwork Desktop Static Analysis Demo

Create. Develop. Version everything with Perforce.

Only Perforce products have the Perforce Server - the fast version management platform that powers productive teamwork. Built from the ground up to be scalable and easy to manage, Perforce helps thousands of the world's leading organizations innovate and succeed.

Perforce Software is a privately held company headquartered in Alameda, California; with international offices in Wokingham, United Kingdom and Sydney, Australia.

Join the Perforce User Group:
http://www.linkedin.com/companies/23081?debasic=

Perforce Software

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Home

Static Application Security Testing (SAST) Tools

Klocwork

Overview

What is Klocwork?