Manager, Quality, Functional Safety, Cybersecurity Embedded Processing at a manufacturing company with 10,001+ employees
Real User
Top 20
Jun 9, 2025
I do not have experience with Black Duck's Polaris software and QMetry. QMetry is used internally for Adaptivist Test Management for Jira. In the last 2 years, I have not been using another SCA solution or any other testing products. I do not have experience with JFrog or Snyk. LDRA and Klocwork are the main tools I use. Black Duck serves a different purpose than Klocwork and is not in direct comparison to it. On a scale of 1-10, I rate Klocwork a 7.
I rate Klocwork six out of ten. Even though it does the job, there's room for feature enhancements, such as integrations with Git for better tracking and notifications.
We are end-users. I'd advise users to remember that they need to analyze the static analysis. Just because the product flags something doesn't mean something is wrong. You have to be mindful. If you try to fix all the findings you might have other problems. I'd rate the solution eight out of ten.
Principle engineer at a manufacturing company with 10,001+ employees
Real User
May 10, 2023
I rate Klocwork a seven out of ten. I rate Klocwork a seven because of the way we use it. We do not use all the capabilities. It's more solution-oriented, and that's not how we leverage it. It's designed to meet different standards and provide specific capabilities depending on what each business hopes to get out of it. That flexibility is what makes me lean toward an eight rating. If you know exactly what you want to achieve and your marketplace, then that would be great. However, the process of getting the tool to be what you want it to be is why I rate it as a seven. It can do whatever you need if you invest in it. I like static code analysis and think it's suitable for development teams. It's like an impartial third party providing you with insight and information. In this day and age, it's good to have some insight and to question what you're doing. I'd recommend it from the point of view that it provides the insights you need. You must understand what your business needs are to compare Klocwork with competing products. The Klocwork infrastructure offers flexibility and historical knowledge of trends and changes in the build. Understanding the problems you are trying to solve and engaging Klocwork's technical team about how the solution can work for you is critical. Klocwork knows how to solve your concerns, and they will give you confidence in the tool itself.
Sr. Test Engineering Manager - Embedded Linux SW / RF at a comms service provider with 51-200 employees
Real User
Apr 25, 2022
When we first purchased Klocwork I would have rated it a nine or ten out of ten. However, because of the performance of the execution and cost, I would no longer rate it that high. I rate Klocwork a six out of ten.
VP Delivery & Customer Success at a computer software company with 11-50 employees
Real User
Dec 22, 2021
I would recommend, first creating a baseline of their source code with all of the issues, and then handling the new issues on a daily basis while gradually resolving the old ones. I would rate Klocwork a nine out of ten.
Software Chief Engineer at a transportation company with 10,001+ employees
Real User
Nov 21, 2019
My advice to others would be that they should determine their use case before buying the program. If they have many codes, I would not recommend it. If they have a separate project where not many codes are shared between projects, I will recommend it. I would like to see better codes between projects and a more user-friendly desktop in the next release. On a scale from one to 10, I rate this product a seven.
We use Klocwork in two different configurations, on-prem and cloud. Basically we can summarize on-premises. We connect the client directly to the server on-premises remotely. But for certain products and features, we also use a local server that is on-premise but with different configurations. In this case, the server is deployed with some rule set and configured in a certain manner locally with the second option of redirecting the connection directly to our headquarter. I would recommend the latest version. In the roadmap of the product, a lot of improvements have been made. We are currently on hold with moving over to this tool because of the license but once we're able to, we'll import our profiles from the previous version to the new one. The previous version was not compatible with the .NET framework. 4.7.2 it didn't fully consider the retargeting option of C++ I would rate Klocwork seven out of ten.
Specialist at a non-tech company with 5,001-10,000 employees
Real User
Jun 11, 2019
Klocwork is a good product, but keep in mind that before building the code you have to get a report. Then you use the code. If you don't need to get a report after building the source code then this is a good solution for you. I prefer this tool. I would rate Klocwork as eight out of ten.
Make sure before you go to a new major upgrade of Klocwork that you copy your database. Shut down Klocwork and all of its services. Then, back up the database before you decide to migrate, or before you decide to run the JavaScript that checks databases. Back it up first, before you do anything. Otherwise, you could lose everything. The databases are finicky.
Software Solutions Engineer at Meteonic Innovation Pvt. Ltd.
User
Jul 12, 2018
Support for more languages would be helpful since this is my trustworthy tool. One more advice from my side would be to do some webinars on Klocwork will be helpful for some new users.
Sr. Software Solution Engineer at Meteonic Innovation Pvt Ltd at Meteonic Innovation Pvt. Ltd.
Real User
Jul 5, 2017
Unlike other static code analysis tools, Klocwork integrates seamlessly into desktop IDEs, build systems, continuous integration tools, and any team's natural workflow. Mirroring how code is developed at any stage, Klocwork prevents defects and finds vulnerabilities on-the-fly, as code is being written. Klocwork also helps prioritize work with SmartRank, the revolutionary new recommendation engine that prioritizes issues and helps select which ones to work on first. Take prioritized, corrective action immediately to deliver more secure and reliable code.
Klocwork detects security, safety, and reliability issues in real-time by using this static code analysis toolkit that works alongside developers, finding issues as early as possible, and integrates with teams, supporting continuous integration and actionable reporting.
I do not have experience with Black Duck's Polaris software and QMetry. QMetry is used internally for Adaptivist Test Management for Jira. In the last 2 years, I have not been using another SCA solution or any other testing products. I do not have experience with JFrog or Snyk. LDRA and Klocwork are the main tools I use. Black Duck serves a different purpose than Klocwork and is not in direct comparison to it. On a scale of 1-10, I rate Klocwork a 7.
I rate Klocwork six out of ten. Even though it does the job, there's room for feature enhancements, such as integrations with Git for better tracking and notifications.
I would rate Klocwork at eight out of ten. The main concern is the excessive warnings and the need to evaluate plugin support.
We are end-users. I'd advise users to remember that they need to analyze the static analysis. Just because the product flags something doesn't mean something is wrong. You have to be mindful. If you try to fix all the findings you might have other problems. I'd rate the solution eight out of ten.
I rate Klocwork a seven out of ten. I rate Klocwork a seven because of the way we use it. We do not use all the capabilities. It's more solution-oriented, and that's not how we leverage it. It's designed to meet different standards and provide specific capabilities depending on what each business hopes to get out of it. That flexibility is what makes me lean toward an eight rating. If you know exactly what you want to achieve and your marketplace, then that would be great. However, the process of getting the tool to be what you want it to be is why I rate it as a seven. It can do whatever you need if you invest in it. I like static code analysis and think it's suitable for development teams. It's like an impartial third party providing you with insight and information. In this day and age, it's good to have some insight and to question what you're doing. I'd recommend it from the point of view that it provides the insights you need. You must understand what your business needs are to compare Klocwork with competing products. The Klocwork infrastructure offers flexibility and historical knowledge of trends and changes in the build. Understanding the problems you are trying to solve and engaging Klocwork's technical team about how the solution can work for you is critical. Klocwork knows how to solve your concerns, and they will give you confidence in the tool itself.
I would rate this solution a nine out of ten.
When we first purchased Klocwork I would have rated it a nine or ten out of ten. However, because of the performance of the execution and cost, I would no longer rate it that high. I rate Klocwork a six out of ten.
I would recommend, first creating a baseline of their source code with all of the issues, and then handling the new issues on a daily basis while gradually resolving the old ones. I would rate Klocwork a nine out of ten.
My advice to others would be that they should determine their use case before buying the program. If they have many codes, I would not recommend it. If they have a separate project where not many codes are shared between projects, I will recommend it. I would like to see better codes between projects and a more user-friendly desktop in the next release. On a scale from one to 10, I rate this product a seven.
We use Klocwork in two different configurations, on-prem and cloud. Basically we can summarize on-premises. We connect the client directly to the server on-premises remotely. But for certain products and features, we also use a local server that is on-premise but with different configurations. In this case, the server is deployed with some rule set and configured in a certain manner locally with the second option of redirecting the connection directly to our headquarter. I would recommend the latest version. In the roadmap of the product, a lot of improvements have been made. We are currently on hold with moving over to this tool because of the license but once we're able to, we'll import our profiles from the previous version to the new one. The previous version was not compatible with the .NET framework. 4.7.2 it didn't fully consider the retargeting option of C++ I would rate Klocwork seven out of ten.
Klocwork is a good product, but keep in mind that before building the code you have to get a report. Then you use the code. If you don't need to get a report after building the source code then this is a good solution for you. I prefer this tool. I would rate Klocwork as eight out of ten.
Not much as of now.
Make sure before you go to a new major upgrade of Klocwork that you copy your database. Shut down Klocwork and all of its services. Then, back up the database before you decide to migrate, or before you decide to run the JavaScript that checks databases. Back it up first, before you do anything. Otherwise, you could lose everything. The databases are finicky.
Support for more languages would be helpful since this is my trustworthy tool. One more advice from my side would be to do some webinars on Klocwork will be helpful for some new users.
Unlike other static code analysis tools, Klocwork integrates seamlessly into desktop IDEs, build systems, continuous integration tools, and any team's natural workflow. Mirroring how code is developed at any stage, Klocwork prevents defects and finds vulnerabilities on-the-fly, as code is being written. Klocwork also helps prioritize work with SmartRank, the revolutionary new recommendation engine that prioritizes issues and helps select which ones to work on first. Take prioritized, corrective action immediately to deliver more secure and reliable code.