StatiCode

Help enterprises solve quality and safety problems at low cost in the process ofsoftware coding, thus enhancing product competitiveness.

 

 

Product Introduction

 

StatiCode is a set of Static Application Security Testing tools, which helps the development and security team to find the security and quality defects in the code quickly and accurately. In the process of software development, StatiCode can continuously analyze software defects and improve code quality through integration with development environment to improve the quality of code. When the acceptance test is carried out after the software development is completed, StatiCode can find the security defects, quality defects and mixed defects through a comprehensive testing and analysis of the software source code. Therefore, we can not only help the security audit department to conduct a comprehensive code inspection of the developed system, but also track and deal with the security and quality problems of the code to help improve the code security management of enterprises and organizations.

 

In the automotive industry,  StatiCode have obtained ISO 26262 & IEC 61508 certifications issued by TÜV NORD, an internationally renowned certification agency. The analysis tool can be used in the development process in terms of any ASIL level. Besides, we can also provide coding compliance checks including but not limited to MISRA, AUTOSAR, CWE and CERT as well as core runtime defect detection.

 

Advantages

Advanced problem detection capabilities

 

• Vairous Build Security In and Build-In Quality testers that can detect all kinds of defections, such as memory corruption, improper dynamic type conversion, control flow defect, defects in integer processing, null pointer reference/dereference, resource leakage, program suspended animation, uninitialized variables, illegal memory access, unsafe data processing and sensitive information leakage, etc.
• Supported Compilers:Clang,GNU GCC/G,ARM C/C,Keil,S32D,Microsoft Visual C ,QNX C/C ,HighTec Tricore,Tasking Tricore,GreenHills, fast on-demand scalability

Adapting to the user experience of agile development

 

 

 

• Complete Android full-device project analysis within hours.
• Analyze million-line code projects and deliver results within an hour (recommended configuration).
• Maintain an overall false positive rate below 15%, ensuring high developer acceptance.
• Incremental solutions paired with comprehensive command-line and API support to enforce gatekeeping at every CI/CD stage.

A wide range of language rules and environment adaptation

 

• Languages supported: C, C, Java, JavaScript, TypeScript, Python, Golang, PHP, C#, Kotlin, Ruby, XML, YMAL
• Coding standards supported: MISRA C 2012,MISRA C 2023,MISRA C 2008,MISRA C 2023,AUTOSAR C 14,CERT C/C ,GJB 5369,GJB 8114, GB/T 34943, GB/T 34944,OWASP Top 10,CWE Top 25
• Operating System: Windows, CentOS, Ubuntu, Fedora, OpenSUSE, Kylin, REHL, Debian, Domestic Creators

Robust defect management capabilities

 

• Present the steps of embedded code defect occurrences, enabling efficient root cause identification.
• Role-based customizable defect filtering strategies prioritize tasks effectively.
• Defect classification supports partial or global inheritance, eliminating redundant work.
• Scalable platform expansion ensures seamless handling of massive data volumes.

 

 

 

Compliance Certifications

 

• StatiCode have obtained ISO 26262 & IEC 61508 certifications issued by TÜV NORD, an internationally renowned certification agency. The analysis tool can be used in the development process in terms of any ASIL level. Besides, we can also provide coding compliance checks including but not limited to MISRA, AUTOSAR, CWE and CERT as well as core runtime defect detection.

 

 

Application Scenarios

 

 

Development

Integrate with development tools to locate quality and safety issues quickly and accurately to improve the overall quality of code.

 

 

Security

Conduct comprehensive security audit of the source code of the project, and track the vulnerabilities throughout the process, reducing the workload of the security department and improving work efficiency.

 

 

DevOps

 

Integrate with CI/CD pipeline and conduct static analysis and detection of the code under development to ensure the quality and safety of the code submitted.

 

 

Management

 

Control the overall situation of the project from the macro dimension through paying attention to the trend change of the problem and developing a ranking list of code vulnerabilitie of each person to measure the coding ability of the team.

 

 

Audit

 

Conduct code audit on the source code, provide professional audit reports and provide suggestions and guidance for bug repair at the same time.