Secure Coding mailing list archives

Re: Missing the point?


From: "Jared W. Robinson" <jwr () xmission com>
Date: Wed, 21 Apr 2004 16:44:50 +0100

Does anyone know more about the Fortify product? Gary mentioned it in 
his webcast the other day.

Details are sketchy on the Fortify product. It's supposed to be able to
analyze C, C++ and Java. See http://fortifysoftware.com and contact them
directly if you want to evaluate their product.

See also 
http://coverity.com
http://ouncelabs.com
http://www.klocwork.com/products/inforce.asp

It would be nice if someone could do a comparison of these tools against
a standard set of benchmarks at some future time.

- Jared






Current thread: