Splint

Splint

University of Virginia
+
+

Related Products

  • Parasoft
    152 Ratings
    Visit Website
  • TrustInSoft Analyzer
    6 Ratings
    Visit Website
  • Aikido Security
    364 Ratings
    Visit Website
  • DbVisualizer
    593 Ratings
    Visit Website
  • CloudFiler
    24 Ratings
    Visit Website
  • Elation Health
    90 Ratings
    Visit Website
  • Altium Develop
    1,448 Ratings
    Visit Website
  • AuctionMethod
    43 Ratings
    Visit Website
  • ALMobile
    29 Ratings
    Visit Website
  • FastBound
    24 Ratings
    Visit Website

About

Splint is developed and maintained by the Secure Programming Group at the University of Virginia Department of Computer Science. David Evans is the project leader and the primary developer of Splint. David Larochelle developed the memory bounds checking. University of Virginia students Chris Barker, David Friedman, Mike Lanouette and Hien Phan all contributed significantly to the development of Splint. Splint is the successor to LCLint, a tool originally developed as a joint research project between the Massachusetts Institute of Technology and Digital Equipment Corporation's System Research Center. David Evans was the primary designed and developer of LCLint. John Guttag and Jim Horning had the original idea for a static checking tool for detecting inconsistencies between LCL specifications and their C implementations. They provided valuable advice on its functionality and design and were instrumental in its development.

About

ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with advanced program analysis to find and automatically fix vulnerabilities. ZeroPath provides complete security coverage: 1. AI-powered SAST for business logic flaws & broken authentication 2. SCA with reachability analysis 3. Secrets detection and validation 4. Infrastructure as Code 5. Automated patch generation. any more... ZeroPath delivers 2x more real vulnerabilities with 75% fewer false positives. Our research team has been successful in finding vulns like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce. Trusted by 750+ companies and performing 200k+ code scans monthly.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Development teams interested in a Static Application Security Testing (SAST)

Audience

Teams seeking a solution to enhance their application security processes without compromising development speed

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Supported
24/7 Live Support Supported
Online Supported

API

Offers API Not Supported

API

Offers API Supported

Screenshots and Videos

No images available

Screenshots and Videos

Pricing

No information available.
Free Version Supported
Free Trial Not Supported

Pricing

Free
- Free personal plan (free forever, incl. 1 repo, unlimited PR scans and more).

- Core plan (Platform fee: $200/month, up to 25 repos, unlimited PR scans and patches, integration w/ Jira, Linear, and more).

- Enterprise plan for organizations with advanced needs.
Free Version Supported
Free Trial Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 5.0 / 5
design 4.0 / 5
support 5.0 / 5

Pros & Cons from Real Users

Pros

  • The scanner is absolutely amazing. We have used Synk, Semgrep and Aikido but no one comes close to the logic vulns ZeroPath is able to detect.

Cons

  • The UI is a little hard to understand and take some time getting used to

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Supported
In Person Not Supported

Company Information

University of Virginia
Founded: 2007
United States
splint.org

Company Information

ZeroPath
Founded: 2024
United States
zeropath.com

Alternatives

david3

david3

Tobit Software

Alternatives

MB&G MobileMap

MB&G MobileMap

Mason Bruce & Girard
CodeSonar

CodeSonar

CodeSecure
Oscar

Oscar

Oscar McMaster
david.net

david.net

2R Software GmbH

Categories

Categories

Static Application Security Testing (SAST) Features

Application Security Supported
Dashboard Supported
Debugging Not Supported
Deployment Management Supported
IDE Supported
Multi-Language Scanning Supported
Real-Time Analytics Supported
Source Code Scanning Supported
Vulnerability Scanning Supported

Static Code Analysis Features

Analytics / Reporting Supported
Code Standardization / Validation Supported
Multiple Programming Language Support Supported
Provides Recommendations Supported
Standard Security/Industry Libraries Supported
Vulnerability Management Supported

Application Security Features

Analytics / Reporting Supported
Open Source Component Monitoring Supported
Source Code Analysis Supported
Third-Party Tools Integration Supported
Training Resources Supported
Vulnerability Detection Supported
Vulnerability Remediation Supported

Cybersecurity Features

AI / Machine Learning Supported
Behavioral Analytics Not Supported
Endpoint Management Not Supported
Incident Management Not Supported
IOC Verification Not Supported
Tokenization Not Supported
Vulnerability Scanning Supported
Whitelisting / Blacklisting Not Supported

Vulnerability Scanners Features

Asset Discovery Not Supported
Black Box Scanning Not Supported
Compliance Monitoring Not Supported
Continuous Monitoring Supported
Defect Tracking Not Supported
Interactive Scanning Not Supported
Logging and Reporting Supported
Network Mapping Not Supported
Perimeter Scanning Not Supported
Risk Analysis Not Supported
Threat Intelligence Not Supported
Web Inspection Not Supported

Integrations

C Supported
C++ Supported
ClickUp Not Supported
Devin Desktop Not Supported
DigitalOcean Not Supported
Docker Not Supported
Elixir Not Supported
GitHub Not Supported
GitLab Not Supported
IntelliJ IDEA Not Supported
Java Not Supported
Jira Not Supported
Kotlin Not Supported
Laravel Not Supported
MATLAB Supported
Node.js Not Supported
Sprinto Not Supported
Visual Studio Code Not Supported
monday AI work platform Not Supported

Integrations

C Supported
C++ Supported
ClickUp Supported
Devin Desktop Supported
DigitalOcean Supported
Docker Supported
Elixir Supported
GitHub Supported
GitLab Supported
IntelliJ IDEA Supported
Java Supported
Jira Supported
Kotlin Supported
Laravel Supported
MATLAB Not Supported
Node.js Supported
Sprinto Supported
Visual Studio Code Supported
monday AI work platform Supported
Claim Splint and update features and information
Claim Splint and update features and information
Claim ZeroPath and update features and information
Claim ZeroPath and update features and information