Splint

Splint

University of Virginia
+
+

Related Products

  • Aikido Security
    239 Ratings
    Visit Website
  • TrustInSoft Analyzer
    6 Ratings
    Visit Website
  • Parasoft
    148 Ratings
    Visit Website
  • Hyperproof
    350 Ratings
    Visit Website
  • Kasm Workspaces
    127 Ratings
    Visit Website
  • Feroot
    32 Ratings
    Visit Website
  • JetBrains Junie
    12 Ratings
    Visit Website
  • Orca Security
    606 Ratings
    Visit Website
  • New Relic
    2,934 Ratings
    Visit Website
  • Papirfly
    161 Ratings
    Visit Website

About

Snyk is the leader in developer security. We empower the world’s developers to build secure applications and equip security teams to meet the demands of the digital world. Our developer-first approach ensures organizations can secure all of the critical components of their applications from code to cloud, leading to increased developer productivity, revenue growth, customer satisfaction, cost savings and an overall improved security posture. Snyk’s Developer Security Platform automatically integrates with a developer’s workflow and is purpose-built for security teams to collaborate with their development teams. Snyk is used by 1,200 customers worldwide today, including industry leaders such as Asurion, Google, Intuit, MongoDB, New Relic, Revolut and Salesforce. Snyk is recognized on the Forbes Cloud 100 2021, the 2021 CNBC Disruptor 50 and was named a Visionary in the 2021 Gartner Magic Quadrant for AST.

About

Splint is developed and maintained by the Secure Programming Group at the University of Virginia Department of Computer Science. David Evans is the project leader and the primary developer of Splint. David Larochelle developed the memory bounds checking. University of Virginia students Chris Barker, David Friedman, Mike Lanouette and Hien Phan all contributed significantly to the development of Splint. Splint is the successor to LCLint, a tool originally developed as a joint research project between the Massachusetts Institute of Technology and Digital Equipment Corporation's System Research Center. David Evans was the primary designed and developer of LCLint. John Guttag and Jim Horning had the original idea for a static checking tool for detecting inconsistencies between LCL specifications and their C implementations. They provided valuable advice on its functionality and design and were instrumental in its development.

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Audience

Developers and security teams

Audience

Development teams interested in a Static Application Security Testing (SAST)

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

API

Offers API

API

Offers API

Screenshots and Videos

Screenshots and Videos

No images available

Pricing

$0
200 Open Source tests per month
100 Container tests per month
300 IaC tests per month
100 Snyk Code tests per month
Unlimited Developers
Free Version
Free Trial

Pricing

No information available.
Free Version
Free Trial

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 5.0 / 5
design 5.0 / 5
support 5.0 / 5

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Pros & Cons from Real Users

Pros

  • I've been using Snyk for a while now, and I have to say it’s one of the best security tools I’ve integrated into our CI/CD pipeline. As an IT Security administrator, I’m always on the lookout for vulnerabilities in open-source dependencies, and Snyk makes it ridiculously easy to catch them before they become a problem. The fact that it plugs right into our repositories and continuously scans for issues saves me a ton of time. The best thing about Snyk is how seamlessly it integrates with our existing workflows—GitHub, Jenkins, Kubernetes, you name it. The vulnerability database is top-notch, constantly updated, and the remediation suggestions are actually useful. It’s not just "here’s a problem" but "here’s how to fix it." The reporting and policy enforcement features also make compliance way less of a headache.

Cons

  • The free tier is great for small projects, but if you need enterprise-level features, the pricing can add up fast. Also, while it covers a lot of ecosystems, the scan times on larger codebases can sometimes be a bit slow. Not a dealbreaker, but something to be aware of.

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Company Information

Snyk
Founded: 2015
United Kingdom
snyk.io

Company Information

University of Virginia
Founded: 2007
United States
splint.org

Alternatives

Alternatives

david3

david3

Tobit Software
Astra Pentest

Astra Pentest

Astra Security
MB&G MobileMap

MB&G MobileMap

Mason Bruce & Girard
david.net

david.net

2R Software GmbH
Oscar

Oscar

Oscar McMaster

Categories

Categories

Static Code Analysis Features

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Cybersecurity Features

AI / Machine Learning
Behavioral Analytics
Endpoint Management
Incident Management
IOC Verification
Tokenization
Vulnerability Scanning
Whitelisting / Blacklisting

IT Security Features

Anti Spam
Anti Virus
Email Attachment Protection
Event Tracking
Internet Usage Monitoring
Intrusion Detection System
IP Protection
Spyware Removal
Two-Factor Authentication
Vulnerability Scanning
Web Threat Management
Web Traffic Reporting

Vulnerability Management Features

Asset Discovery
Asset Tagging
Network Scanning
Patch Management
Policy Management
Prioritization
Risk Management
Vulnerability Assessment
Web Scanning

Integrations

C++
AWS CodePipeline
Beats
Blink
Citrix Analytics
Claude Code
Complyance
CycloneDX
Cypago
Cyscale
FossID
GitHub
HUMAN Bot Defender
JFrog Container Registry
Maverix
OpsLevel
Roadie
Ruby
Sequence
TrustCloud

Integrations

C++
AWS CodePipeline
Beats
Blink
Citrix Analytics
Claude Code
Complyance
CycloneDX
Cypago
Cyscale
FossID
GitHub
HUMAN Bot Defender
JFrog Container Registry
Maverix
OpsLevel
Roadie
Ruby
Sequence
TrustCloud
Claim Snyk and update features and information
Claim Snyk and update features and information
Claim Splint and update features and information
Claim Splint and update features and information