The Scalable SAST Tool for Mission-Critical Software
Fit Perforce Klocwork seamlessly into your DevSecOps workflows. The static application security testing (SAST) tool provides early defense for developers by alerting them to potentially costly defects and compliance violations as soon as the code is written. It extends security analysis across the environments you already use, simplifies risk-based decision-making, and strengthens architecture and AI governance across globally distributed teams.
Identify security and reliability issues for C, C++, C#, Rust, Java, JavaScript, Python, and Kotlin programming languages — over millions of lines of code.
Increase Development Velocity and Reduce Costs Through Early Defect Detection
Teams integrating Klocwork SAST into their CI/CD pipelines catch costly defects before they spread and shorten development cycles with early remediation.
Jones, Capers. Applied Software Measurement: Global Analysis of Productivity and Quality.
Secure, Governed Development —Aligned Across Every DevSecOps Team
Align security goals across development teams, security leaders, and CISOs. By supporting targeted scans, meaningful quality gates, and shared visibility into critical findings, Klocwork creates a more collaborative security model. Architecture governance is strengthened through integrations that connect security analysis to broader engineering controls.
Development teams receive actionable guidance in context, without requiring deep security expertise.
Security leaders gain a clearer view of posture, progress, and priorities across projects.
Fix New Defects Early. Streamline Workflows. Automate Security Governance.
Perforce Klocwork Key Features
Achieve Coding Standards Compliance
Klocwork makes it easy to comply with coding standards. Use the following compliance taxonomies to enforce coding standards across your codebase. And you’ll get fewer false positives and false negatives in your diagnostics.
-
Security
-
CERT
-
CWE
-
CWE Top 25
-
OWASP
-
DISA STIG
-
PCI DSS
-
ISO/IEC TS 17961 (C Secure)
-
Safety
-
MISRA C 2004
-
MISRA C 2012
-
MISRA C 2023
-
HKMC
-
MISRA C++ 2008
-
AUTOSAR C++ 14
-
JSF AV C++
-
Quality
-
NASA's 10 Rules
-
Klocwork Quality
-
Customize
-
Create Your Own Standard
-
Create Your Own Rules
Award-Winning Security
We’re known for best-in-class static analysis security — but the industry recognition speaks for itself. Klocwork earned “Best in Show” at Embedded World North America for two consecutive years, validating its ability to help teams secure critical software with confidence.
★ ★ ★ ★ ★
“With Perforce Klocwork, our productivity has dramatically increased, leaving us with more time to mitigate potential problems leveraging the ‘what if’ testing. As a result, our end product is stronger, and Raytheon can get the end product to our customers more quickly than before.”
Robert Young | Software Engineer | Raytheon
Klocwork Professional Services: Continuous, Reliable Support
Get onboarding and ongoing support with Perforce Klocwork. You’ll start with an onboarding package for a successful experience. You may also use the Klocwork help documentation for easy-to-follow instructions — whether setting up your workflow or finding answers to specific questions.
Learn More About Onboarding PackagesVisit Klocwork Help Documentation
Strengthen Confidence in Safety-Critical Software
Reduce certification risk and simplify compliance and reporting for safety-critical regulations. Klocwork is independently certified for TÜV-SÜD, ISO 9001, and ISO 27001.
TÜV-SÜD Certified
TÜV-certified qualification materials support functional safety processes in highly regulated industries. Perforce Klocwork is TÜV-SÜD certified for compliance with key functional safety standards:
- ISO 26262 (automotive) up to ASIL D.
- IEC 61508 (general industry) up to SIL 4.
- EN 50716 (railways) up to SW-SIL 4.
- IEC 62304 (medical devices) up to Software Safety Class C.
ISO 9001 Certified
Perforce Klocwork is also certified in ISO 9001.
ISO 9001 is one of the most widely adopted standards. It ensures that organizations are striving to meet and exceed customers’ requirements and satisfaction through continuous improvement.
ISO 27001 Certified
Perforce Klocwork is also certified in ISO 27001.
ISO 27001 gives specific requirements that an organization must meet in order to be certified by an accredited certification body following the successful completion of an audit.
Test Klocwork in Your Dev Environment
See Klocwork Live
Start with your custom demo, or access our on-demand Klocwork demo to get an immediate look at Klocwork’s key features.