TechValidate Research on Klocwork


Klocwork Case Study

Small Business Computer Software Company

Introduction

This case study of a small business computer software company is based on a March 2021 survey of Klocwork customers by TechValidate, a 3rd-party research service. The profiled company asked to have their name blinded to protect their confidentiality.

“Klocwork is relatively easy to install and use and supports most major programming languages.”

“Working with certified tools increases trust in the tool execution results.”

“I prefer to work with solution vendors that participate with compliance boards.”

Tools evaluated/used prior to Perforce:

SonarSource/SonarQube

Fortify

Use Case

They are not comfortable with sharing and uploading their source code to an SAST tool vendor cloud.

  • Security and safety coding standards coverage most important for them:
    • DISA STIG

Importance of the following:

  • Have a consistent pricing model from your Static Application Security Testing (SAST) tool vendor: very Important
  • Have a SAST tool that can be executed via flexible deployment options (Desktop/IDE/CI/Cloud/Containers): important
  • Have customizable quality reports and analysis: very Important
  • Get accurate and clean of noise reports: very Important

Said that audit and/or stakeholder-ready scan results help to speed up release cycles and time to market faster.

Enterprise console and reporting framework capabilities they value the most:

  • Defining global or project-specific QA and security objectives and rule configurations
  • Compliance and security reports
  • Prioritize defects based on severity, location, and lifecycle

Level of agreement on key features for static code analysis tools:

  • The ease of setting up and running static code analysis: strongly agree
  • Integration into CI/CD systems: strongly agree
  • Differential analysis for speed and efficiency: agree
  • The ability to support huge codebases: agree
  • Support for all coding languages that we use: strongly agree
  • No need to pre-process code prior to scanning: strongly agree

Results

Features of Klocwork compared to other tools that used or evaluated:

  • Ability to scale to projects of any size: best-in-class
  • Wide range of developer tools: superior
  • Continuous compliance: superior
  • Ease of automation: best-in-class
  • Differential analysis: superior
  • Flexible deployment options: superior




About This Data

This data was sourced directly from verified users of Klocwork by TechValidate.

TechValidate verifies the identity and organizational affiliation of all participants that contribute to published research data. When research participants so desire, we also guarantee their anonymity so that they may share information honestly and freely.


More Research on Klocwork