Embedded Systems Solutions

PRODUCTS


Advanced Driver Assistant Systems Compilers and IDE Data Acquisition Systems Debuggers and Emulators Device Driver Development tools Embedded PCs and Add On Cards Ethernet Diagnostic Tools Evaluation Board and Development Kits Protocol Analyzers and Storage Emulators		Programmers and Flashers PCB Diagnostic Tools RTOS and Middleware Semiconductor Components Simulation Driven System Modelling Tools Software Quality Tools Test and Measuring Instruments Vehicle Networking tools







	Events & Promos

CodeSecure is a 2023 spin-off of the GrammaTech products division which included CodeSonar and CodeSentry. GrammaTech originally developed an early Integrated Development Environment in 1978 (the Cornell Program Synthesizer) and a system for generating language-based environments from attribute-grammar specifications in 1982 (the Synthesizer Generator).

Accelerating Software Application Security Testing - find Vulnerabilities others Miss

CodeSonar is a static code analysis solution that helps you find and understand quality and security defects in your source code or binaries. CodeSonar makes it easy to integrate SAST into your development process with support for over 100 compilers and compiler versions, numerous integrations to popular development tools and IDEs, and whole-program analysis that finds issues other tools miss.

Static Application Security Testing
(SAST)

Software teams are under constant pressure to deliver more content with higher complexity, in shorter timeframes, with increased quality and security. Static Application Security Testing is a proven best practice to help software teams deliver the best code in the shortest timeframe. CODESECURE has been a leader in this field for over 30 years with CodeSonar delivering multi-language SAST capabilities for enterprises where software quality and software security matter.

Fulfill Functional Safety & Coding Standards

CodeSonar automates both the detection and prevention of critical software defects and make sure the software adheres to following safety standards

IEC 61508 - Functional Safety of Electric / Electrical / Programmable Electronic Safety-Related Systems
ISO 26262 / ISO 21434 (Automotive software) - Road Vehicles Functional Safety
DO 178C / DO 330 (Airborne systems) - Software Considerations in Airborne Systems and Equipment Certification / Software Tool Qualification Considerations
IEC 62443 (Industrial systems) - Security for Industrial Automation and Control Systems
IEC 62304 / ISO 13485 (Medical Devices) - Medical Device Software - Software Life Cycle Management / Medical Devices - Quality Management Systems. Requirements for Regulatory Purposes
EN 50128 (Railway systems) - Railway Applications. Communication, Signaling, and Processing Systems. Software for Railway Control and Protection Systems

Ensure Coding Standard Compliance and Enforcement

Central to each of these functional safety standards are safe and secure coding. Static analysis is a crucial capability in supporting all standards. Static analysis simplifies the enforcement of coding standards across teams, improving the overall compliance for a required certification standard as well as code quality. CodeSecure supports the following standards:

AUTOSAR (AUTomotive Open System ARchitecture)
DISA-STIG (Security Technical Implementation Guide)
ISO/IEC TS 17961 (C Secure Coding Rules Technical Specification)
JPL (JPL Institutional Coding Standard for the C Programming Language)
Power of Ten (NASA Jet Propulsion Lab)
MISRA (Motor Industry Software Reliability Association)
MITRE CWE (Common Weakness Enumeration)
OWASP (Open Worldwide Application Security Project)
CERT (Software Engineering Institute Computer Emergency Response Team)
JSF++ (Lockheed Martin Corporation)

Gain In-Development Insights - Beyond Simply "We think there's a problem"

Go beyond just finding problems to a deep understanding of where a warning comes from and what the risks are, even in code you did not write. In addition, CodeSonar provides whole-program SAST along with unique inspection reporting capabilities, helping developers understand, prioritize, and remediate issues rapidly.

Language Support:

CodeSonar supports many popular languages, including C/C++, Java, C# and Android, as well as support for native binaries in Arm instruction set architectures. CodeSonar also supports OASIS SARIF, for exchange of information with other tools in the DevSecOps environment.

Built-In DevSecOps Integration with CodeSonar

CodeSonar enables the shift to DevSecOps by integrating with the most popular CI tools such as GitLab, GitHub, Jenkins and others. Managers can report on the application security state with their preferred reporting tool. Developers can view and remediate security issues and quality defects within their familiar CI/CD environments, and access more detailed information from CodeSonar with a single mouse click.