SplintUniversity of Virginia
|
||||||
Related Products
|
||||||
About
Splint is developed and maintained by the Secure Programming Group at the University of Virginia Department of Computer Science. David Evans is the project leader and the primary developer of Splint. David Larochelle developed the memory bounds checking. University of Virginia students Chris Barker, David Friedman, Mike Lanouette and Hien Phan all contributed significantly to the development of Splint. Splint is the successor to LCLint, a tool originally developed as a joint research project between the Massachusetts Institute of Technology and Digital Equipment Corporation's System Research Center. David Evans was the primary designed and developer of LCLint. John Guttag and Jim Horning had the original idea for a static checking tool for detecting inconsistencies between LCL specifications and their C implementations. They provided valuable advice on its functionality and design and were instrumental in its development.
|
About
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with advanced program analysis to find and automatically fix vulnerabilities.
ZeroPath provides complete security coverage:
1. AI-powered SAST for business logic flaws & broken authentication
2. SCA with reachability analysis
3. Secrets detection and validation
4. Infrastructure as Code
5. Automated patch generation.
any more...
ZeroPath delivers 2x more real vulnerabilities with 75% fewer false positives.
Our research team has been successful in finding vulns like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce.
Trusted by 750+ companies and performing 200k+ code scans monthly.
|
|||||
Platforms Supported
Windows
Not Supported
Mac
Not Supported
Linux
Not Supported
Cloud
Supported
On-Premises
Not Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
Platforms Supported
Windows
Not Supported
Mac
Not Supported
Linux
Not Supported
Cloud
Supported
On-Premises
Supported
iPhone
Not Supported
iPad
Not Supported
Android
Not Supported
Chromebook
Not Supported
|
|||||
Audience
Development teams interested in a Static Application Security Testing (SAST)
|
Audience
Teams seeking a solution to enhance their application security processes without compromising development speed
|
|||||
Support
Phone Support
Not Supported
24/7 Live Support
Not Supported
Online
Supported
|
Support
Phone Support
Supported
24/7 Live Support
Supported
Online
Supported
|
|||||
API
Offers API
Not Supported
|
API
Offers API
Supported
|
|||||
Screenshots and VideosNo images available
|
Screenshots and Videos |
|||||
Pricing
No information available.
Free Version
Supported
Free Trial
Not Supported
|
Pricing
Free
- Free personal plan (free forever, incl. 1 repo, unlimited PR scans and more).
- Core plan (Platform fee: $200/month, up to 25 repos, unlimited PR scans and patches, integration w/ Jira, Linear, and more). - Enterprise plan for organizations with advanced needs.
Free Version
Supported
Free Trial
Supported
|
|||||
Reviews/
|
Reviews/
|
|||||
Pros & Cons from Real UsersPros
Cons
|
||||||
Training
Documentation
Supported
Webinars
Not Supported
Live Online
Not Supported
In Person
Not Supported
|
Training
Documentation
Supported
Webinars
Not Supported
Live Online
Supported
In Person
Not Supported
|
|||||
Company InformationUniversity of Virginia
Founded: 2007
United States
splint.org
|
Company InformationZeroPath
Founded: 2024
United States
zeropath.com
|
|||||
Alternatives |
Alternatives |
|||||
|
|
|
|||||
|
|
||||||
|
|
||||||
Categories |
Categories |
|||||
Static Application Security Testing (SAST) Features
Application Security
Supported
Dashboard
Supported
Debugging
Not Supported
Deployment Management
Supported
IDE
Supported
Multi-Language Scanning
Supported
Real-Time Analytics
Supported
Source Code Scanning
Supported
Vulnerability Scanning
Supported
Static Code Analysis Features
Analytics / Reporting
Supported
Code Standardization / Validation
Supported
Multiple Programming Language Support
Supported
Provides Recommendations
Supported
Standard Security/Industry Libraries
Supported
Vulnerability Management
Supported
Application Security Features
Analytics / Reporting
Supported
Open Source Component Monitoring
Supported
Source Code Analysis
Supported
Third-Party Tools Integration
Supported
Training Resources
Supported
Vulnerability Detection
Supported
Vulnerability Remediation
Supported
Cybersecurity Features
AI / Machine Learning
Supported
Behavioral Analytics
Not Supported
Endpoint Management
Not Supported
Incident Management
Not Supported
IOC Verification
Not Supported
Tokenization
Not Supported
Vulnerability Scanning
Supported
Whitelisting / Blacklisting
Not Supported
Vulnerability Scanners Features
Asset Discovery
Not Supported
Black Box Scanning
Not Supported
Compliance Monitoring
Not Supported
Continuous Monitoring
Supported
Defect Tracking
Not Supported
Interactive Scanning
Not Supported
Logging and Reporting
Supported
Network Mapping
Not Supported
Perimeter Scanning
Not Supported
Risk Analysis
Not Supported
Threat Intelligence
Not Supported
Web Inspection
Not Supported
|
||||||
Integrations
C
Supported
C++
Supported
ClickUp
Not Supported
Devin Desktop
Not Supported
DigitalOcean
Not Supported
Docker
Not Supported
Elixir
Not Supported
GitHub
Not Supported
GitLab
Not Supported
IntelliJ IDEA
Not Supported
|
Integrations
C
Supported
C++
Supported
ClickUp
Supported
Devin Desktop
Supported
DigitalOcean
Supported
Docker
Supported
Elixir
Supported
GitHub
Supported
GitLab
Supported
IntelliJ IDEA
Supported
|
|||||
|
|
|