PVS-Studio

PVS-Studio is a static application security testing (SAST) solution that helps enhance code quality, security, and safety. It detects bugs and potential vulnerabilities in C, C++, C#, Java, JavaScript, TypeScript and Go code on Windows, Linux, and macOS.

Features

• Supports various analysis types: intermodular, incremental, data flow analysis, taint analysis, etc.
• Integrates into cloud platforms
• Works offline & on-premise
• Provides cross-platform integration
• Offers ways to handle false positives
• Quick technical support directly from developers
• 1200+ diagnostic rules with detailed descriptions and examples
• Compliance with safety & security standards: OWASP TOP 10, MISRA C/C++, CWE, SEI CERT
• Detailed reports and reminders for developers and managers
• Efficiently handles legacy code (baselining of analyzer results)
• Active support of the Open Source Community, analysis of open-source projects
• Integration with popular IDEs, code quality platforms, CI/CD, build systems

Learn more about other features in the documentation

Good option for:

• game developers (Unity & UE integration included)
• embedded developers (embedded platform support);
• DevSecOps experts
• project managers (code quality platform integration included)
• FinTech (compliance with OWASP ASVS)
• mature projects (seamless legacy handling)

More on website: pvs-studio.com