GrammaTech’s Application Security Testing Software Business sold to Battery Ventures

(Bethesda/USA, 5 September 2023)

Our partner GrammaTech today announced that Battery Ventures has acquired its software products division, including the CodeSonar and CodeSentry product lines. The transaction establishes a new, independent entity that will operate under the CodeSecure, Inc. name and be headquartered in Bethesda, Maryland.
GrammaTech will continue to offer cyber security research and development services and tools to the US defense and intelligence community.
Further information is available on the CodeSecure website

Static Analysis: GrammaTech CodeSonar 7.4 Available

(Ithaca/USA, Offenburg/Germany, 28 July 2023)

GrammaTech has released version 7.4 of CodeSonar. The new version increases the coverage for coding standards valued by aerospace and defense customers. CodeSonar now offers coverage of the JSF++ standard. In addition, the rule coverage in our Functional Safety (FUSA) kit has been increased. Improvements to the Hybrid SaaS installer means that customers are supported that want to manage a SaaS instance themselves.

Here are some more details on the improvements:

JSF++ support.
Expanded coverage in the Functional Safety (FUSA) kit.
Support for building with Bazel.
New rules to support MISRA C 2023.
Support for Android 13.
C# and Java analysis is now fully supported in Hybrid SaaS.
Self-managed Hybrid SaaS deployment option for customers.
Refreshed CodeSonar for Binaries to find errors in a program, without needing to look at the code that was used to build it.

GrammaTech has released CodeSonar 7.3

(Ithaca/USA, Offenburg/Germany, 11 April 2023)

The focus of this releases was increasing our coverage for coding standards. CodeSonar now covers 100% of the MISRA C 2012 rules. We have improved and simplified our instructions for integrating CodeSonar with GitHub or GitLab, which will make it easier for our customers to adopt CodeSonar. Improvements to compiler models, support for the .NET7 framework and the latest versions of C and C++, and improvements to Hybrid Cloud round out the highlights of the release.
CodeSonar for Binaries is also refreshed. Being able to find errors in a program, without needing to look at the code that was used to build it.

GrammaTech has released version 7.2 of the Static Code Analyzer CodeSonar

(Ithaca/USA, Offenburg/Germany, 23 December 2022)

The focus of the 7.x family of releases was GrammaTech's UI modernization initiative. Version 7.2 now has dark mode in the CodeSonar hub.
New integration to one of the popular BI (business intelligence) tools, Qlik, has been added.
There are improvements to compiler models, support for the .NET6 C# framework and improvements to Hybrid Cloud round out the highlights of the release.

GrammaTech CodeSonar 7.1 Available

(Ithaca/USA, Offenburg/Germany, 9 September 2022)

GrammaTech announces the general availability of CodeSonar version 7.1.
This release has several new features as well as numerous bug fixes, compatibility updates, and other minor improvements. The highlights are listed below; for more complete details, see the release notes at Grammatech web page.

Hybrid Cloud Deployment

Provides greater deployment flexibility and efficiency.
CodeSonar hub can now be hosted in a single-tenant AWS cloud instance within the GrammaTech Cloud, to securely support geographically distributed teams.
Combines on-premises build with a CodeSonar hub hosted in the GrammaTech Cloud on AWS.
Simplifies administrative tasks such as provisioning new users and instantly scaling up cloud resources to meet changes in code scanning needs.

Integrations

CodeSonar now has full support for Visual Studio Code. The GrammaTech extension, which will be available on the Microsoft Marketplace shortly, allows your engineers to connect securely to a hub, upload an analysis, or download, view, and work with warnings directly in the IDE.

C/C++

Support for the Tasking compiler on Linux.
Upgrades to support the latest features of GCC 12 and LLVM 14.

Java/C#

CodeSonar has added more code-style warnings for C# in addition to the deeper analysis it has always provided.

CodeSonar Hub

The look-and-feel of the help system has been modernized.

CodeSonar for Binaries

CodeSonar 7.1 includes the latest release of CodeSonar for Binaries.

Customers with an active maintenance contract will be entitled to an upgrade to the latest version.
Free trial licenses are available for companies which want to check possibilites to increase their development process and product quality.

GrammaTech CodeSonar 7.0 Available

(Ithaca/USA, Offenburg/Germany, 27 April 2022)

GrammaTech announces the availability of the static code analysis tool CodeSonar version 7.0.
There are many ways our customers use CodeSonar to validate complex systems, build secure systems, and certify critical infrastructure that cannot fail. We hear from our customers that CodeSonar is an essential component of their portfolio of tools and that they value the accuracy of our results.

This release adds new features to help customers realize even more value from CodeSonar:

Hybrid SaaS Deployment (beta for select customers). This is the first step in our CodeSonar modernization plans and will help us serve customers supporting distributed development teams. This deployment model will be fully available for all customers in the in 7.1 release.
Our Microsoft IDE plugin now supports Visual Studio 2022, the most recent version from Microsoft.
We have improved how our Jenkins plugin handles reporting when there are multiple, concurrent builds taking place, and we have updated the GitHub plugin to support the most up-to-date schema.
User roles and permissions are automatically populated in the Hub from a customer’s LDAP or SSO service. This is going to save tool administrators a lot of time.
7 new SEI CERT-C, 6 new CERT-CPP, and 4 new CWE rules.
Support for Metrowerks ColdFire 6 compiler (32-bit and 64-bit).
Improvements to how the IAR compiler reports results for built-in functions. We used to report the functions as undefined, which was problematic for some customers.
Update the C/C++ parser to EDG version 6.3. EDG is a class-leading parser and we are running the latest version of it.
We have added code-style warnings for C# in addition to the deeper analysis we have always provided and improved the warning messages to help your customers diagnose why a warning is being reported.
The CWE and OWASP reports in the Hub are updated to the 2021 standards.
CodeSonar 7.0 includes the latest release of CodeSonar for Binaries.