"CodeSonar® does a better job of finding the more serious problems, which are often buried deep in the code and sometimes hidden by unusual programming constructs that are hard for other static analysis tools to parse. CodeSonar is not easily fooled."
– Smiths Aerospace
"We conducted a detailed evaluation of in-depth static analysis tools. This included a hands-on trial of three leading tools. We decided to purchase CodeSonar. Although each of the analysis tools found a few unique defects requiring correction, CodeSonar found, by far, the most defects. All three tools had comparable precision (defined as the ratio of the number of real problems found to the total number of warnings). CodeSonar’s source line color coded approach, with comments in the left margin, makes the results very readable and easy to use."
– SanDisk Corporation
"In the last six years, we assessed and used several static analysis tools. We assessed CodeSonar and we decided to purchase it because it gives valuable results easily and quickly. Easily because it can be run directly using the existing compilation procedures with no or minimal change to the original code. Quickly because the analysis is very fast compared to other analysis tools. The results given by CodeSonar are easily readable, need no special tool to be read (HTML format) and are relevant"
– Électricité de France (EDF)
My original evaluation included many different static analysis tools with various capabilities, including several lint-based variations. Several points were focused on while doing the evaluation. These included price, ease of use, quantity of bugs, and the quality of bugs discovered. When the final decision was made, the fact that CodeSonar found more substantive, quality bugs than any other product evaluated weighed in heavily as a major factor in our decision. This fact was easy to verify, since CodeSonar has a more intuitive user interface to verify bugs with than their competition did.
Since we have purchased CodeSonar, the product has played an instrumental role in improving the quality of the software at Ross Video. CodeSonar found critical, complex bugs in the software that are nearly impossible to find during a manual inspection. Our development team immediately addressed these problems, and as a result, has had more time to concentrate on feature development rather than hunting for bugs. We have only been using CodeSonar for 3 months, yet from the impact it has had on our software, CodeSonar has already paid for itself.
– Ross Video
"CodeSonar from GrammaTech, a tool for C/C++, does an exceptionally precise job on a C++ version of the [null-pointer bug] benchmark, as appropriate for a defect detection tool designed for a language that lacks memory safety. "
– Professor William Pugh of the University of Maryland
"We had been trying for a year to track down a bug that caused a crash that our customers had been reporting, but we were unable to duplicate it in house. CodeSonar quickly pointed out the line of code that was causing it. The report generated by CodeSonar was very easy to follow."
– Ohana Software
"We tried a static analysis tool from a more expensive vendor and tried all the open source tools. We also use Flexelint. But CodeSonar was the only tool that found the memory leaks that have taunted us for months. Every item that CodeSonar found, FlexeLint failed to find. While FlexeLint found many issues that CodeSonar didn't, CodeSonar found the bugs that should be on the top of everyone's list to fix."
– Thralling Penguin LLC
More GrammaTech customers are listed here.