Name: Perforce Klocwork
Author: Perforce Software

Help Desk

Web and Video Conferencing

Customer Support

AI Development

Beta Testing

Performance Testing

Virtual Reality

Development

Business Intelligence (BI)

Collaboration

Emissions Management

Integrated Workplace Management (IWMS)

Intellectual Property (IP) Management

Online Notary

Enterprise

Accounting

Accounts Receivable

Crypto Tax

Payment Gateway

Finance and Accounting

Applicant Tracking

Corporate Learning Management

HR Management

Payroll

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

3D Printing

AI Governance

Cloud Storage

Custom Software Development Services

Data Deduplication

Data Science

Database-as-a-Service (DBaaS)

Fraud Detection

Game Engine

Integration Platform as a Service (iPaaS)

Intranet

Migration

Network Performance Monitoring

Open-Source Database

SaaS Management

Service Virtualization

Time Series Databases

Value-Added Resellers (VARs)

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Content Management

Data Management

Ecommerce Personalization

Email Marketing

Marketing Automation

Mobile Advertising

Press Release Management

Product Intelligence

Social Media Management

Survey & Forms Building

Video Streaming

Web Analytics

Marketing

Project Management

Professional Services

Customer Relationship Management (CRM)

Point of Sale

Sales Enablement

Sales Training

Sales

Secure Service Edge (SSE)

Security

Banking

Digital Forensics

Equation Editors

Geographic Information

Hospital Management

Insurance Agency Management

Insurance Claims Management

Intelligent Document Processing

Medical Office EMR & EHR

Physical Therapy

Veterinary

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

Coverity Static Analysis (SAST)

Synopsys

TeamCity

JetBrains

GoCD

ThoughtWorks

Veracode

SonarQube Server

SonarSource Sarl

Snyk

Black Duck Software Composition Analysis (SCA)

GitLab

Palo Alto Networks Prisma Cloud

Palo Alto Networks

### Code Quality Improvement
Users appreciate Klocwork's robust code quality improvement capabilities, noting its effectiveness in early error detection and enhancing overall code quality. The tool's ability to identify and resolve static code issues, syntax errors, and security vulnerabilities has been instrumental in ensuring application security and maintaining high code standards. Additionally, reviewers highlight Klocwork's user-friendly interface, quality gates, and extensive library of built-in taxonomies as valuable features that contribute to the platform's success in improving code quality.

### Static Code Analysis Techniques
Users generally appreciate Klocwork's wide range of checkers and its ability to provide valuable issue segregation and easy report visibility for all types of issues and warnings. While some users find the user interface a bit challenging to navigate through the depth of analysis, the overall consensus is positive regarding the effectiveness of Klocwork's static code analysis techniques in enhancing application security and code quality. Suggestions for improvement include adding more security checks, enhancing filtering and report analysis features, and improving the user interface for better code visibility and a more user-friendly experience.

### Security and Vulnerability Detection
Users consistently highlight Klocwork's security and vulnerability detection as a standout feature, praising its ability to identify and address potential security risks within their codebase. The integration with industry-standard security standards such as CWE, OWASP, and PCI DSS is particularly lauded for enhancing the overall security posture of applications. While some users express a desire for additional security checks and improved reporting features, the general sentiment leans towards Klocwork being a reliable tool for bolstering application security and mitigating vulnerabilities effectively.

### Development and Integration Tools
Users generally praise Klocwork's robust development and integration tools for enhancing their CI/CD processes. The tool's integration with popular IDEs, CI/CD platforms like Jenkins, and Docker containers streamlines the development workflow, allowing for efficient code analysis and issue detection early in the development cycle. While some users highlight the need for improvements in areas like REST API functionality and issue suppression traceability, overall, Klocwork's development and integration tools are recognized for their valuable contributions to software development and security practices.

### Project and Build Management
User sentiment regarding Klocwork's project and build management capabilities is mixed. While users appreciate the tool's ability to find critical defects and support incremental builds for software versions comparison, there are concerns about the outdated web UI and issues with the scanner not returning accurate results when project rules are not met. Additionally, users highlight the need for better customization options in report creation, improved traceability of developer issue suppression, and the desire for enhanced support for a wider range of programming languages and security checks. Despite these drawbacks, users acknowledge the potential benefits of integrating Klocwork into automated development operations pipelines and emphasize the importance of tailoring the tool to meet specific business needs.

### Error and Issue Management
Users appreciate Klocwork's robust error and issue management capabilities, particularly its ability to detect coding issues that do not adhere to standards like MISRA. However, concerns have been raised about the lack of traceability for developer issue suppression from their desktops, leading to potential bottlenecks in reviewing suppressions for multiple projects. Despite this drawback, users find Klocwork's error and issue management tools instrumental in maintaining code quality and preventing runtime failures.

Users who have reviewed Klocwork commonly make the following recommendations:

1. Utilize the exceptional customer support: Users have commended Klocwork's customer support team for their phenomenal responsiveness and recommend reaching out to them for assistance and issue resolution.

2. Take advantage of the provided resources: Users suggest utilizing the videos and tutorials provided by Klocwork as they are beneficial in understanding the tool and getting started with it.

3. Consider integrating Klocwork into development operations: Users advise considering integrating Klocwork into an automated development operations pipeline to streamline the code analysis process and improve efficiency.

These recommendations highlight the strengths of Klocwork, namely its excellent customer support, comprehensive resources, and potential for integration into existing development workflows.

Klocwork has proven to be a valuable tool for users in addressing various business problems. Users have reported that the software helps them ensure the implementation of specific requirements by allowing them to report on those requirements effectively. The built-in checkers provided by Klocwork have met many organizational requirements, and any missing ones have been easily built by users themselves. This capability has allowed users to prioritize their analysis efforts, especially in areas of concern such as security aspects.

In terms of code quality, Klocwork has been highly effective in finding coding issues that do not meet standards like MISRA code profiling, code robustness, and quality assessment. By catching potential errors before checking files in, Klocwork increases confidence and reduces rework before formal test cycles. Users have also found Klocwork to be more effective than similar tools in identifying coding issues and best practices to minimize runtime failures.

Moreover, Klocwork's compliance with industry standards such as NIST and PCI has given users confidence in delivering products with low risk of vulnerabilities and adverse consequences. By eliminating vulnerabilities and weaknesses, the software reduces the cost of development and adoption. Additionally, Klocwork's support for industry standards like MISRA, CWE, CERT, OWASP, and Autosar makes it suitable for various use cases.

Users have found value in the simplicity and ease of use provided by Klocwork. The software enables users to write their own checkers, saving time and optimizing programming code. It also eliminates the manual process of checking internal standards by providing easy-to-generate reports and customization options. Furthermore, Klocwork provides an easy means to track the number and severity of bugs over time in a large codebase.

While manual analysis is still required, users consider the time invested in setting up and running Klocwork to be worthwhile. However, it is worth noting that some users have discontinued using the tool due to project completion or pending budget considerations for the next year.

Built-in Checkers: Users have found the built-in checkers in Klocwork to be highly effective in reducing false positives and providing on-the-fly analysis. Several reviewers have praised the impact of these checkers on improving code quality.

Customer Support: The customer support team for Klocwork has been widely praised for their high responsiveness and quick assistance. Many users have expressed their satisfaction with the level of support they received when encountering issues or needing guidance.

Integration with IDEs: Klocwork's integration with popular IDEs like Eclipse, Visual Studio, and Jenkins has been well-received by users. This integration allows for inline analysis of C++ code directly within the development environment, making it easier for developers to identify and address potential issues while coding.

Confusing Interface and Difficulty Getting Started: Some users have found the interface of the dashboard and added features to be confusing, making it difficult for them to get started with the software. They expressed a need for improved clarity and intuitiveness in order to streamline their workflow.

Setup and Installation Process: Users have expressed concerns about the setup and installation process, describing it as time-consuming. They have suggested that providing a setup install guide would greatly improve their experience by helping them navigate through this initial stage more efficiently.

Outdated Web UI: Several users have mentioned that the web UI of Klocwork looks outdated and could benefit from a more modern look and feel. They believe that updating the interface would enhance user satisfaction and make working with the software more visually appealing.

Klockwork, from Perforce Software, supports Static Code Analysis for C, C++, C#, Java, JavaScript, and Python.

Basic

Scale

Aikido Security

JFrog Security Essentials / Xray SCA can be used to discover and eliminate unwanted or unexpected packages, using JFrog’s database of identified malicious packages. It is presented as a DevOps-centric SCA solution for identifying and resolving security vulnerabilities and license compliance issues in open source dependencies.

Free

Pro Team

Enterprise +

JFrog Security (Xray)

Perforce Klocwork

Application Security Testing is a key element of ensuring that web applications remain secure. Various tools and managed services exist to provide continuous testing, besides application security platforms that include app testing as part of their functionality. Static Application Security Tests (SAST) examine applications while they are not running, searching source code for errors and security vulnerabilities.

Static Application Security Testing (SAST)

Klocwork Desktop Static Analysis Demo

Create. Develop. Version everything with Perforce.

Only Perforce products have the Perforce Server - the fast version management platform that powers productive teamwork. Built from the ground up to be scalable and easy to manage, Perforce helps thousands of the world's leading organizations innovate and succeed.

Perforce Software is a privately held company headquartered in Alameda, California; with international offices in Wokingham, United Kingdom and Sydney, Australia.

Join the Perforce User Group:
http://www.linkedin.com/companies/23081?debasic=

Perforce Software

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Home

Static Application Security Testing (SAST) Tools

Perforce Klocwork

Overview

What is Perforce Klocwork?