German version, translation pending; English draft shown for reference only
German counterpart · Reserved: translate after English approval, then internal review
What CodeSonar does
CodeSonar is a static application security testing (SAST) tool for software where quality and security matter. It analyses source code or binaries to find and explain quality and security defects, including in code your team did not write, and is used especially in embedded and automotive development.
Standards and languages
CodeSonar supports major coding standards such as MISRA C/C++, AUTOSAR C++, CERT, CWE, JSF++ and Power of Ten, and supports functional-safety work against standards such as IEC 61508, ISO 26262, DO 178C/DO 330, IEC 62304/ISO 13485, EN 50128 and IEC 62443. It covers C/C++, Java, C#, Kotlin, Python, Go, Rust, JavaScript and TypeScript, as well as native binaries, and exchanges findings with other tools through SARIF.
In your development workflow
IDE support for Eclipse, Visual Studio and Visual Studio Code, warning tracking with suppression, and GitLab, GitHub, BitBucket and Jenkins integration let CodeSonar run as part of a DevSecOps and CI/CD workflow.
Review against your environment
Discuss your tool environment and the questions you need the product to address. Product descriptions are not guarantees of coverage, compatibility, compliance or results.
Licences and next steps
EVOCEAN sells CodeSonar licences and renewals. Licence scope and commercial terms are agreed with you for your environment. Bring your tool landscape and requirements to a 15-minute call or an enquiry.
Related tool
CodeSentry is the companion binary software composition analysis tool, used where binaries must be analysed without source code. It is described on its own page under Products.