PVS-Studio
Developer Tools · Application Security
Overview
A static analyzer for C, C++, C#, and Java code. Works on Windows, Linux, and macOS. Analyzes code for 32-bit, 64-bit, and ARM embedded platforms.
Official records
News
Error that we had to ignore
Developing a static analyzer, as with any software project, involves trade-offs. Sometimes this means dropping perfectly valid analyzer warnings to make the tool better overall. In the article, well...
Read more
Report
Integrating SAST into DevSecOps
As software delivery accelerates, security must move at the same speed. In this webinar, we'll explore how to effectively integrate Static Application Security Testing (SAST) into your DevSecOps pipeline to identify vulnerabilities early, reduce risk, and
Read more
Report
How to build your own programming language in C++
Mistakes happen in Go code just like in any other language: typos, duplicates, broken condition checks, and so on.But why do they still slip through? After all, many teams use tools like go vet, which catches all of this perfectly well... right?In this we
Read more
Report
Code legacy: Analyzing Erlangs C and C++ modules that have been running for decades
Code for some Erlang/OTP modules is older than most modern junior developers. These files are the true digital patriarchs. For decades, they have made sure that banking transactions, telephone...
Read more
Report
Box of bugs (exploded): Perils of cross-platform development
In September, we broke down the 86Box v5.0 release, timed for the 30th anniversary of Windows 95 retail launch, and promised to show you something else. What is it that we promised? And why did we...
Read more
Report
Whats new in C# 14: overview
C# 14 is almost here, so its time for our annual feature overview. This year brought fewer changes than the last. Some might consider them minor, but is it really so? Lets take a closer look.
Read more
Report
PVS-Studio team invites you to share examples of errors related to vibe coding
One way or another, vibe coding is becoming-and in some cases has already become-part of the software development process. The PVS-Studio team sees this as a new challenge for static code analyzers...
Read more
Report
OWASP Top Ten 2021 explained with simple Java examples and SAST insights
In this article, we talk about the OWASP Top Ten 2021 categories through the lens of PVS-Studio Java analyzer warnings. So, if you want to peek at patterns of potential vulnerabilities in Java code...
Read more
Report
Whats new in Java 25
Java continues to actively evolve! The new Java 25 is just around the corner. This release brings changes to boilerplate code and constructors, and discontinues support for deprecated systems. You...
Read more
Report
std::array in C++ is faster than array in C. Sometimes
Hi, folks! Lets see if std::array overtakes the built-in array with the help of compiler optimizations or falls behind.
Read more
Report
Show more news
