Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

The Secure Programming Group at the University of Virginia's Department of Computer Science is responsible for the development and ongoing maintenance of Splint. David Evans leads the project and serves as its main developer. Memory bounds checking was created by David Larochelle. Significant contributions to Splint's development were also made by University of Virginia students, including Chris Barker, David Friedman, Mike Lanouette, and Hien Phan. Splint serves as the evolution of LCLint, a tool that originated from a collaborative research effort between the Massachusetts Institute of Technology and Digital Equipment Corporation's System Research Center. David Evans was also the chief designer and developer of LCLint. The initial concept for a static checking tool aimed at identifying discrepancies between LCL specifications and their C implementations came from John Guttag and Jim Horning. Their insights into the design and functionality proved invaluable, playing a crucial role in shaping both LCLint and its successor, Splint. Together, the team has fostered a robust environment for developing tools that enhance software reliability and security.

Description

Use potent code analysis to integrate security into SDLC. Software development must include security. It has not been historically. Static application security testing was used to be separated from Code quality reviews. This resulted in limited impact and value. beSOURCE focuses on the code security of applications and integrates SecOps with DevOps. Other SAST offerings view security as a separate function. Beyond Security has turned this model on its head by adopting the SecOps perspective when addressing security from every angle. Security Standards. beSOURCE adheres all relevant standards.

API Access

Has API

API Access

Has API

Screenshots View All

No images available

Screenshots View All

Integrations

Agari
Amazon Web Services (AWS)
C
C++
Censys
Cisco Identity Services Engine (ISE)
Core Impact
FileCatalyst
Globalscape Enhanced File Transfer (EFT)
IBM QRadar SIEM
Jira
MATLAB
Microsoft 365
Microsoft Azure
PhishLabs
Titus Classification Suite
VMware vSphere
Vera
Zendesk

Integrations

Agari
Amazon Web Services (AWS)
C
C++
Censys
Cisco Identity Services Engine (ISE)
Core Impact
FileCatalyst
Globalscape Enhanced File Transfer (EFT)
IBM QRadar SIEM
Jira
MATLAB
Microsoft 365
Microsoft Azure
PhishLabs
Titus Classification Suite
VMware vSphere
Vera
Zendesk

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

University of Virginia

Founded

2007

Country

United States

Website

splint.org

Vendor Details

Company Name

Beyond Security (Fortra)

Founded

1999

Country

United States

Website

beyondsecurity.com/solutions/besource.html

Product Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Product Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Alternatives

MB&G MobileMap Reviews

MB&G MobileMap

Mason Bruce & Girard

Alternatives

david3 Reviews

david3

Tobit Software
Klocwork Reviews

Klocwork

Perforce
SonarQube Server Reviews

SonarQube Server

SonarSource