CodeSonar

CodeSonar is a static analysis tool (SAST) that performs whole-program analysis of C and C++ code, as well as Java, C#, Kotlin, Go, Python, Rust, JavaScript and TypeScript, and can also analyse compiled binaries. It uses abstract interpretation, symbolic execution and taint analysis to find defects and security vulnerabilities, and checks coding standards such as MISRA C/C++, AUTOSAR C++14, CERT C/C++ and CWE.

CodeSonar was developed by GrammaTech and is now published by AdaCore after its merger with CodeSecure. It runs on Windows and Linux, integrates with IDEs and CI/CD pipelines, and is qualified for safety standards such as ISO 26262, IEC 61508 and DO-178C. It is a commercial product.