BLOG

SWAP Detector: Preventing API Errors from Swapped Arguments

Third-party application programming interfaces (APIs), libraries, and frameworks are a fact for modern software developers. They are usually complex, rapidly evolving, and sometimes...

Alan Shimel Interviews GrammaTech on TechStrong TV

    Interested in what the teams at GrammaTech have been working on? Alan Shimel at TechStrong.tv sat down with Mark Hermeling on November 19 in this...

Webinar Recording - Achieving Industrial Functional Safety with IAR and GrammaTech

      This webinar reviews current functional safety standards including IEC61508, EN50128, ISO26262 and how to execute towards necessary safety...

What the Building In Security Maturity Model (BSIMM) Says About the Role of SAST and SCA

The BSIMM is an annual study of the real-world software security initiatives – “SSIs” in the report - across the software industry drawing from data and experience from 130...

Latest Version of CodeSonar Improves on C++ Analysis, MISRA Support; Introduces Subcommands for DevSecOps and More

The latest version of GrammaTech CodeSonar, Version 5.4, continues our commitment to being the go-to provider for static application security testing (SAST) and the static analysis tool...

[Video] Functional Safety Certification with Exida and GrammaTech

At GrammaTech, we specialize in helping customers improve their software development processes. Many of our customers work with software that has to be certified to certain levels of...

GrammaTech Featured in Cyber Security Forum Initiative (CSFI) Podcast

GrammaTech is a new gold sponsor of the Cyber Security Forum Initiative (CSFI), a non-profit organization with a mission “to provide Cyber Warfare awareness, guidance, and security...

Staying on the Rails: Piper Networks + CodeSonar Case Study

Piper Networks is an innovative IT solutions provider and systems integrator specializing in the transportation industry. Founded in 2011, Piper helps transit...

Webinar Recording - Tools to Perform a Security Review on Unknown Code with Imagix

      Performing a deep security review on third party code is hard. You typically receive a bunch of source code, no design documents,...

GrammaTech Named Top 20 Most Promising Automotive Solution Provider

In the most recent issue of CIO Review, GrammaTech was named one of the Top 20 Most Promising Automotive Solution Providers. The list of companies was selected by a panel of experts and...

CodeSonar helps Stoneridge Achieve Safety and Security

Stoneridge, Inc. is a global leader in highly engineered electrical and electronic components for the commercial vehicle, passenger car, and off-highway markets. Stoneridge solutions...

Expanding CodeSonar SAST Capabilities with Java and C#

GrammaTech recently acquired the intellectual property and assets of JuliaSoft S.r.l. to extend its CodeSonar Static Application Security Testing (SAST) platform with automated code...

Memory Management is the Leading Cause of Security Vulnerabilities in Google Chrome

Google recently has studied the root cause of high severity security vulnerabilities detected in their Chrome browser project (specifically the open source Chromium project which Chrome...

MergeResolver — Automatic Merge Conflict Resolution

Latest Version of CodeSonar Improves on Functional Safety, MISRA Support, C++ Parsing and Visualization

The latest version of GrammaTech CodeSonar, Version 5.3, continues our commitment to being the go-to provider for static application security testing (SAST) and the static analysis tool...

DevSecOps in Safety Critical Avionics Software and the Role of Static Analysis

DO-178C, Software Considerations in Airborne Systems and Equipment Certification, is a standard published by RTCA, Inc and developed jointly with EUROCAE, the European Organization for...

Webinar Recording - Right Tool, Right Methodology: Developing Safety and Security Critical Systems (with AFuzion)

  Recently GrammaTech and AFuzion presented solutions to these questions: Are you prepared enough in your knowledge of Safety-Critical or DO-178C to be...

Using SARIF to Extend Analysis of SAST Tools

The static analysis interchange format (SARIF) is now an approved OASIS standard. We have discussed in other posts the benefits of having a standardized format for static analysis....

GrammaTech CodeSonar Refreshes IEC 61508, ISO26262 and CENELEC EN 50128 Certifications

Three fresh new functional safety certificates are now available for CodeSonar version 5.2p0 and later covering IEC 61508, ISO 26262 and CENELEC EN 50128. These certificates have been...