---
title: Klocwork Reviews
meta_title: 'Klocwork Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 23 reviews by the users' company size, role or industry to
  find out how Klocwork works for a business like yours.
aggregate_rating:
  rating_value: 4.4
  review_count: 23
  scale: '5'
date_modified: '2026-05-05'
parent_category:
  name: Source Code Management
  url: https://www.g2.com/categories/source-code-management
---

# Klocwork Reviews
**Vendor:** Perforce  
**Category:** [Peer Code Review Software](https://www.g2.com/categories/peer-code-review)  
**Average Rating:** 4.4/5.0  
**Total Reviews:** 23
## About Klocwork
Perforce Klocwork is an enterprise grade SAST solution for C, C++, C#, Rust (support coming March 2026), Java, JavaScript, Python, and Kotlin. It helps development teams detect security vulnerabilities, quality issues, and reliability defects early, while supporting compliance with industry and regulatory standards. Klocwork is purpose built to analyze very large, complex codebases and scales to hundreds of millions of lines of code, well beyond the practical limits of many traditional SAST tools. This makes it especially suited for organizations developing long lived, safety critical, or security critical systems. Designed for DevOps and DevSecOps, Klocwork integrates with complex build systems, CI/CD pipelines, cloud and containerized environments, and common developer tools—enabling consistent security and quality enforcement without slowing development. Static Application Security Testing (SAST) Klocwork identifies a wide range of security vulnerabilities, including SQL injection, tainted data flows, buffer overflows, and other insecure coding practices. It also detects bugs and quality issues such as null pointer dereferences, memory and resource leaks, uncaught exceptions, and code smells. The solution supports compliance with internationally recognized standards including CWE, OWASP, CERT, PCI DSS, DISA STIG, and ISO/IEC TS 17961. Automated CI/CD integrations make continuous security testing practical even for very large systems. AI Assisted Code Remediation with MCP Klocwork extends static analysis with AI assisted code remediation, designed to help developers resolve findings faster and with greater confidence. Using MCP based capabilities, Klocwork securely exposes rich static analysis context—defect data, rule knowledge, and precise fix guidance—to supported AI code assist tools directly within the IDE. Rather than relying on generic AI suggestions, Klocwork’s remediation feature combines deep static analysis insights with comprehensive documentation and exact fix instructions, enabling AI assistants to propose accurate, context aware corrections for security vulnerabilities, quality defects, and coding standard violations. Fixes are presented as clear diffs and require developer review and approval, making the approach suitable for safety and security critical environments. By integrating remediation into the developer workflow, Klocwork reduces time spent interpreting analysis results, researching fixes, and switching between tools. Developers stay in their IDE, receive guided remediation aligned with secure coding standards and project specific rules, and can immediately re analyze code to validate fixes. This completes the optimal shift left approach—helping teams not only find issues early, but fix them efficiently and consistently. Project Streams and Enterprise Scalability Klocwork’s Project Streams feature simplifies managing shared codebases with multiple variants or branches. A single rule configuration can be applied across streams, issues common to multiple variants stay synchronized, and stream specific findings are clearly identified for reporting and compliance. Developer Focused and Centralized Klocwork integrates directly into popular IDEs to deliver fast, contextual feedback as developers write code. Out of the box compiler support eliminates manual setup, while centralized dashboards provide visibility into trends, risk, and compliance across projects of any size.




## Klocwork Reviews
  ### 1. Klocwork Review

**Rating:** 5.0/5.0 stars

**Reviewed by:** April M. | Technology Integration Safety Intern, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 14, 2021

**What do you like best about Klocwork?**

There are a lot of built-in checkers that were helpful. There are so many of them, and they are all very well documented, so using them was straightforward. Creating checkers was also easy because they have a guide on getting started and links that explain the different checkers. Customer support always got back to me quickly. There is an entire library of information on the portal. If you need help or information it's probably already documented and it's easy to find.

**What do you dislike about Klocwork?**

At first, getting started was confusing. I wasted a lot of time trying to set up and install. It was much easier and faster when I had a link to a setup/install guide.

**Recommendations to others considering Klocwork:**

Reach out when you need assistance; the customer support team is phenomenal and always responded quickly and followed up with me before closing out a support ticket. The videos and tutorials help a lot if you're having any trouble. If you need information, it's either located on their website or the portal. It's much easier to use Klocwork on your local machine than a virtual machine. There are many built-in checkers, so make sure you look at those before implementing new ones.

**What problems is Klocwork solving and how is that benefiting you?**

Our organization has specific requirements for each system. I needed a way to report on these requirements to ensure implementation. Klocwork has many built-in checkers that meet these requirements, and for the ones that weren't there, we built them.

  ### 2. Klocwork is a very mature, robust and helpful static code analysis tool

**Rating:** 5.0/5.0 stars

**Reviewed by:** Chris W. | Software Assurance Tools Program Manager/Static Analysis Domain Expert, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 09, 2021

**What do you like best about Klocwork?**

Klocwork does a really good job of finding the most critical defects. The incremental build capabilities to compare results between different versions of the software is very helpful. The web review interface is intuitive and supports effective review of any analysis results.

**What do you dislike about Klocwork?**

It would be great to have continued improvements in creating possible custom checkers tailored to your specific software under analysis. It would also be helpful to provide even more robust export and reporting capabilities for the results so that we can more readily incorporate analysis results into other business processes where appropriate in the organization.

**Recommendations to others considering Klocwork:**

The most important thing is always to focus on making the tool work for your specific business needs, so don't get hung up on every particular feature of the tool itself. Make the tool work for what is essential to your business.

It would be wise to consider integrating it into an automated development operations pipeline if possible. We use Docker to containerize specific software builds. We use Jenkins as our build automation server to provide a complete end-to-end pipeline for supporting the automated use of Klocwork and other tools for analysis against our target software.

We have found it helpful to review the default checker configuration with our software team before analyzing the target software. This approach helps us to understand better what results are of most interest to us before starting the process of generating multiple analysis builds for review. It is also helpful to review the initial set of generated results to determine if any particular checkers may be causing some "noise" in terms of a significant number of results or possible false positives. We may decide to disable a select number of checkers for the following analysis build.

Finally, it is crucial to maintain awareness of new features and any patches that the vendor may release to best support the tool for any users.

**What problems is Klocwork solving and how is that benefiting you?**

We perform independent verification and validation of mission-critical software. Klocwork helps us to prioritize our analysis efforts in the areas of most concern to start, including any possible security aspects, which have been a significant focus recently.

  ### 3. Static code analysis fit for modern CI/CD

**Rating:** 4.5/5.0 stars

**Reviewed by:** Markus N. | Expert SW integration and toolchain, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 05, 2021

**What do you like best about Klocwork?**

Klocwork helps us to analyze source code against coding standards like MISRA C as well as standards like CVE which we look forward to use for cyber security analysis. Klocwork also integrates well with our CI/CD toolchain and provides nice integrations with popular IDE's. But most importatnly perhaps is the awesome support and quick feedback Perforce provides to the customers.

**What do you dislike about Klocwork?**

Perforce could improve the REST API. More functions to allow creation of projects and other administrative tasks, which are done with the kwadmin tool for us to improve automation even further. A docker container on docker hub would also be nice to get.

**Recommendations to others considering Klocwork:**

Consider using a docker container for the server. The upgrade process will be more straightforward when using migration: old server to new server in docker.

**What problems is Klocwork solving and how is that benefiting you?**

The main benefit Klocwork provides (in a CI/CD context) is that we are catching issues early in the development cycle. Many bugs, e.g., array out of bounds, are challenging to find in HIL testing and can be avoided. Furthermore, the developers do not need to worry about coding standards as Klocwork provides the checks for them.

  ### 4. Great tool for static analysis on embedded projects

**Rating:** 5.0/5.0 stars

**Reviewed by:** Daniel P. | Senior Firmware Engineer, Enterprise (> 1000 emp.)

**Reviewed Date:** December 02, 2021

**What do you like best about Klocwork?**

The provided tools, documentation, and support make static analysis report creation an easy task. Also, the MISRA C checkers add to get complete reports fulfills customer requirements. With the Klocwork reports, we have been able to prevent and fix critical issues, and improve our source code.

**What do you dislike about Klocwork?**

I consider that the report creation can be improved. Being able to customize better which data and charts are added. The report can be obtained on PDF format, but this document does not include detailed information about the build.

**What problems is Klocwork solving and how is that benefiting you?**

When we started using Klocwork, as a customer requirement to obtain static analysis reports, multiple potential (and real) risks were avoided. As must of the issues detected on static analysis were cleaned, we use it now to prevent new issues and to create static analysis reports, based on MISRA checkers.

  ### 5. Leading with Cyber Excellence using Klocwork

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Defense & Space | Small-Business (50 or fewer emp.)

**Reviewed Date:** November 30, 2021

**What do you like best about Klocwork?**

A complete solution, desktop, server, API, reports, compliance tailoring, CI/CD integration with JIRA, JENKINS and Github.  The support team is the best!

**What do you dislike about Klocwork?**

A narrow set of computer languages supported, out-of-the-box works but can result in false positives or false negatives if not configured correctly.

**Recommendations to others considering Klocwork:**

Make sure with your customer's IA team the checkers used meet the IA requirements.

**What problems is Klocwork solving and how is that benefiting you?**

NIST and PCI compliance gives us the confidence to tell our customers that the product delivered has a low risk of containing a vulnerability and a low risk of adverse consequences as a result.   Removing vulnerabilities and weaknesses improves the integrity of the delivered product.  Klocwork use also lowers latent defects discovered post-delivery reducing the cost of development and adoption.

  ### 6. Klocwork review

**Rating:** 2.5/5.0 stars

**Reviewed by:** Verified User in Automotive | Mid-Market (51-1000 emp.)

**Reviewed Date:** December 03, 2021

**What do you like best about Klocwork?**

Included links to how to fix found issues.

**What do you dislike about Klocwork?**

Inexistent traceability of developer's issue suppression from their desktop. The way of working proposed by Klocwork is to have dedicated team that reviews suppressions but this becomes a bottleneck when this team needs to overwatch many small embedded projects. Therefore in such situation everyone gets allowed to suppress issues in order to maintain development agility. This in turn leads to people suppressing issues without discussing them with a peer programmer. With the possibility to trace that an issue was suppresed by a developer from the desktop it would help discover issues that were suppressed despite they should not been suppressed. 

It is a good feature to be able to configure that the issues can be suppressed from the portal only but it is not possible today to configure the tool to hinder developers suppressing issues from the desktop tool.

**What problems is Klocwork solving and how is that benefiting you?**

We use it only in projects where MISRA is compliant or in the projects that we want to make it MISRA compliant.

**Official Response from Steve Howard:**

> Dear Reviewer. 

Thank you for taking the time to review Klocwork. 

Klocwork will actually trace all defects throughout the codebase and even suppressions made on the desktop, PROVIDED that you 'connect' those local desktop projects in the developer IDEs or on the command line, etc. to the central server project for the Master branch, etc. Once you are using 'connected' local projects, all status changes made by the developers on their local feature branches will be stored within the Klocwork defect database and tracked with a full audit trail of who made the change, when and why. 

It is also possible, using the granular Klocwork permissions structure to setup a compliance workflow, whereby different project personnel (developers, QA, build engineers) have different permissions in terms of moving the defects between states. i.e. you can require that only QA team members have the right to change a status from, say 'defer' (indicating a deviation request) to 'ignore' (indicating a deviation approval'). This means that you won't then suffer with the problem you mention that this "leads to people suppressing issues without discussing them". 

It additionally means that when you get into the release stream for the project, you will know that all deviations to the required standard (e.g. MISRA) have already been approved by QA through the cycle and the generated standards compliance reports will be correct and ready for certification, so no further review are required, saving time.

I hope this is useful information but please feel free to raise a support ticket via the portal should you encounter further issues.

Kind regards
Steve

  ### 7. Using Klockwork as our main static code analysis tool.

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Defense & Space | Mid-Market (51-1000 emp.)

**Reviewed Date:** December 07, 2021

**What do you like best about Klocwork?**

Build a successful product by minimizing code issues at any stage of development. Modern UI, Quality Gates. We can manage each project's configuration and rules. Also, KW taxemonics has a lot of built-in known ones.

**What do you dislike about Klocwork?**

The web UI looks and feels outdated, and the scanner on the build machine does not return a non-zero value when project rules are not met.

**What problems is Klocwork solving and how is that benefiting you?**

Identify coding issues that do not comply with standards such as MISRA.

  ### 8. Good practice for static code review, not so easy to use

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Industrial Automation | Small-Business (50 or fewer emp.)

**Reviewed Date:** December 03, 2021

**What do you like best about Klocwork?**

inline analisys of C++ code directly from Eclipse.

**What do you dislike about Klocwork?**

unprofiled Visual Studio plugin, that let VS crash quite often.

**What problems is Klocwork solving and how is that benefiting you?**

code profilation. code robusteness and quality assessment. In the future, we would like to meet cybersecurity requirements as well on selected software components in the embeeded software we create.

  ### 9. Klocwork has improved our code quality. Checkers have kept our code quality at very high note.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Vikash K. | Validation, Quality, DevOps, SW Legal compliance, SW Security & Cloud Performance, Enterprise (> 1000 emp.)

**Reviewed Date:** January 19, 2021

**What do you like best about Klocwork?**

Wide range of checkers. valuable issue segregation and easy report visibility for all type is issues/warnings. User friendly commands for building and analysis. Awesome commands to automate klocwork scan activities. It  integrates with CI/CD tools, containers, cloud services, and machine provisioning making automated security testing easy. Security Standards: CWE, OWASP, CERT, PCI DSS, DISA STIG, and ISO/IEC TS 17961.
It  analyzes source code in real time, simplifies peer code reviews, and extends the life of complex software.

**What do you dislike about Klocwork?**

Only few programming languages are supported. Few more security checks required. strong filtering and report analysis features required. would like to see better codes between projects and a more user-friendly desktop in the next release.  Issue we have is that whenever we need to get the code we have to build it first. Then we can get the report. I would like to see a dashboard added to provide a clear look and feel. The dashboard would then supplement the users to enable them to get a quick view of the content, as long is it is clear. A presentational dashboard would be good.

**Recommendations to others considering Klocwork:**

Klocwork is industry leading and proven static code analysis tool. Use it to improve Application security and code quality. It works like spell check for developers.

**What problems is Klocwork solving and how is that benefiting you?**

Resolving all static code issues, syntax issues, security issues and null issues. solution is scalable. It improves Application security and code quality.

  ### 10. klockworks is great

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Defense & Space | Mid-Market (51-1000 emp.)

**Reviewed Date:** July 24, 2020

**What do you like best about Klocwork?**

It's easy to use and customize to flag just the items you will to catch. Also you can omit files you know have issues (lots of time commercial software you don't want to change)

**What do you dislike about Klocwork?**

Nothing really its so easy to use. We use it to catch potential coding errors

**Recommendations to others considering Klocwork:**

Keep customizing it

**What problems is Klocwork solving and how is that benefiting you?**

We have made our code more robi=ust and we catch potential errors before we check files in.

  ### 11. A good and comprehensive static code analysis tool

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.)

**Reviewed Date:** February 10, 2021

**What do you like best about Klocwork?**

Allows customization of levels at which possible issues should be reported
Allows filtering out of false negatives

**What do you dislike about Klocwork?**

The time to review the report, when the tool is run for the first time on an existing project, may be significant. Once issues have been analyzed and corrected / filtered out (as false negatives), incremental issues are easy to deal with.

**What problems is Klocwork solving and how is that benefiting you?**

Improving code quality. Now have greater confidence before start of formal test cycles.

  ### 12. Klocwork providing exceptional results for C++ code

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 31, 2021

**What do you like best about Klocwork?**

During the years I found that Klocwork provides very good findings when analyzing C++ code.

**What do you dislike about Klocwork?**

Maybe there could be some enhancement on searching for issues easier.

**What problems is Klocwork solving and how is that benefiting you?**

Klocwork was able to reveal issues that other similar tools couldn't.

  ### 13. Klocwork Insight review

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 21, 2021

**What do you like best about Klocwork?**

Good integration with IDEs offering plugins

**What do you dislike about Klocwork?**

UI is a bit cryptic to navigate thru the analysis depth

**What problems is Klocwork solving and how is that benefiting you?**

Identifying coding issues & best practices to minimize runtime failures

  ### 14. Good tool for static analysis.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** January 31, 2018

**What do you like best about Klocwork?**

Klocwork is a very user friendly tool. It has its own interface which is very good for developers to detect their problems in code. We can import industry coding standards like MISRA, DISA, STIG, OWASP, AUTOSAR and so on. The reports which we get from the server are very useful while analyzing the code. One of the best feature I like the most is on the fly analysis which most of the Static code analyzers dint have. One more important thing to mention is we can create our own internal standards and we can use it for analyzing the code through Klocwork which will reduce the manual intrevention.

It has both Precheck-in and post checkin which is the most important feature. Most of the Static Code analysers don't have this option.

Klocwork has a supportability to lot of compilers. If it doesn't support then it is easy to add the compiler if you know the exact family name of Compiler.

Klocwork has direct plugins availability to Jenkins, Visual Studio, Eclipse, Intellij Idea and so on. You can generate results in Klocwork in such a way that you can import them to JIRA and create automatic tickets in JIRA.

**What do you dislike about Klocwork?**

Nothing much. This has almost all of the best features only. Klocwork is providing regular updates as well as it is improving it's checker counts.

**Recommendations to others considering Klocwork:**

Developers who are facing difficulties in checking the code then they can go with the Klocwork tool.

**What problems is Klocwork solving and how is that benefiting you?**

We are having our own internal Standards. We used to do manual checkings previously. But with Klocwork we wrote nearly some 80 Checkers on our own. Writing our own checkers is very easy and Straight forward in Klocwork.

  ### 15. Good Tool for Static Analysis

**Rating:** 4.5/5.0 stars

**Reviewed by:** Dinesh  M. | Senior Module Lead, Mid-Market (51-1000 emp.)

**Reviewed Date:** January 02, 2019

**What do you like best about Klocwork?**

Klocwork has very good number of Checkers list. Klocwork has provided a very good documentation for each and every checker by providing documentation which will consist of some examples. Klocwork has one more good feature of creating our own Internal Checkers. Its on the fly analysis capabilities are very strong and good.

**What do you dislike about Klocwork?**

Nothing much as of now. My suggestion would be to increase the support for other languages.

**What problems is Klocwork solving and how is that benefiting you?**

We have completely eliminated the manual process of checking our internal standards. Now we are completely working on Klocwork for checking Internal Standards. Also Klocwork has good support for Some well known Industry Standards like MISRA, CWE, CERT, OWASP, Autosar and so on.

  ### 16. Best tool for checking Industry Standards !!

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** December 23, 2018

**What do you like best about Klocwork?**

Its vast support to some of the industry standards like MISRA, CWE, CERT, DISA-STIG is one of the best thing which i like the most. In this we use mostly the MISRA standards and I believe Klocwork is the best tool for this. Its report section is one of the best thing which will be easy for anyone to get reviewed.

**What do you dislike about Klocwork?**

Nothing much as of now. I will let you know if i feel any.

**What problems is Klocwork solving and how is that benefiting you?**

Mostly our main challenge is to cross check the MISRA standards and Klocwork is good in this. One more is custom checkers.

  ### 17. Static Code Analysis tool to create Custom Checker

**Rating:** 5.0/5.0 stars

**Reviewed by:** Archana  K. | Technical Architect, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 10, 2018

**What do you like best about Klocwork?**

It is very easy to create Custom Checkers using Klocwork, provides great supportability of Industrial Standards like MISRA, CERT, CWE, DISA STIG, OWASP, AUTOSAR etc... which is very helpful in Automotive domain.

**What do you dislike about Klocwork?**

Nothing much as of now. Will update in near future

**Recommendations to others considering Klocwork:**

One of the best Static Code Analysis Tool! Must  Try it out!!

**What problems is Klocwork solving and how is that benefiting you?**

Less Time Consumed in finding defects and better product

  ### 18. Good Static Analyzer for detecting Run time errors

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** December 14, 2018

**What do you like best about Klocwork?**

For one of our project we need to check the run time errors. I am using Klocwork which is having great capability in detecting run time issues like Memory leaks, Array out of bounds, Null Pointer dereference, Divided by Zero issues. With Klocwork we are able to fix lot of run time issues. 

**What do you dislike about Klocwork?**

Not much. As of now everything is going fine.

**What problems is Klocwork solving and how is that benefiting you?**

Detecting run time issues and one more is internal standards verification. Creating Internal Standards is bit a lengthy process but it's fine for us.

  ### 19. Very useful tool

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Program Development | Small-Business (50 or fewer emp.)

**Reviewed Date:** January 28, 2019

**What do you like best about Klocwork?**

This tool helps, analyze your code, find bugs and fix security flaws
I install this program on corporate workstations.

**What do you dislike about Klocwork?**

It`s awesome tool, issues only on the little things. Users do not complain about how it works.

**What problems is Klocwork solving and how is that benefiting you?**

It saves time and helps to optimize programming code

  ### 20. Fix the issues on the fly

**Rating:** 5.0/5.0 stars

**Reviewed by:** Sivanesh S. | Sr Software Solution Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** February 02, 2018

**What do you like best about Klocwork?**

On the fly analysis, Quality checkers, Security vulnerability catch, Build chain report, complexity metrics, plugin support ability, custom checkers and the support from support team.

**What do you dislike about Klocwork?**

Nothing as such. but, in longer run we expect more language support ability. 

**Recommendations to others considering Klocwork:**

Take up an evaluation to get the taste and its free. I worth your time and effort.  

**What problems is Klocwork solving and how is that benefiting you?**

Finding the coding issues while developing piece of code itself has reduced the rework and could able to deliver bug free code on time. 

  ### 21. Best Tool for Static Code Analyzer

**Rating:** 5.0/5.0 stars

**Reviewed by:** Prabhu D. | Senior Test Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** February 01, 2018

**What do you like best about Klocwork?**

Klocwork helps developers create more secure and reliable software. This tool analyse source code on-the-fly, simplify peer code reviews, and extend the life of complex software. 

**What do you dislike about Klocwork?**

Nothing much as of now. If i found any dislike, I will update it later.

**What problems is Klocwork solving and how is that benefiting you?**

We can solve some coding errors while editing the code which will save the time of developers.

  ### 22. Good starting point for static code analysis 

**Rating:** 3.0/5.0 stars

**Reviewed by:** Verified User in Defense & Space | Mid-Market (51-1000 emp.)

**Reviewed Date:** October 25, 2017

**What do you like best about Klocwork?**

The web portal is intuitive and easy to use, even for non-technical people. Customer support is extremely responsive and very helpful for both setting up the system and long-term maintenance. 

**What do you dislike about Klocwork?**

There is no way to automatically send reports to one or more email addresses. Running Klocwork every day/some other set period of time can't be done from the app itself; we had to create a cron job to do so.  I would like better source control integration.

**Recommendations to others considering Klocwork:**

I would not use this for peer code reviews on a codebase as large as ours, but it does a good job of basic static code analysis. Customer support is excellent.

**What problems is Klocwork solving and how is that benefiting you?**

We needed a way to track the number and severity of bugs over time in a very large codebase (>200,000 lines of code and counting). Klocwork has provided a simple way to show this information to our stakeholders. We are no longer using Klocwork because this project has concluded and the budget for the coming year is not yet finalized.

  ### 23. Great

**Rating:** 4.0/5.0 stars

**Reviewed by:** Ahmed Zakaria J. | Consultant en Sécurité Informatique, Enterprise (> 1000 emp.)

**Reviewed Date:** October 23, 2017

**What do you like best about Klocwork?**

user friendly environment. The least experienced users in code review had no problems understanding the outputs.

**What do you dislike about Klocwork?**

A lot of false positives. The tool actually gave a lot of outputs that needed verification each time.

**What problems is Klocwork solving and how is that benefiting you?**

Source Code analysis.


## Klocwork Discussions
  - [How do i automate klocwork scanning ?](https://www.g2.com/discussions/36356-how-do-i-automate-klocwork-scanning) - 1 comment, 1 upvote
  - [How do I integrate it in a linux make file](https://www.g2.com/discussions/30149-how-do-i-integrate-it-in-a-linux-make-file) - 1 comment

- [View Klocwork pricing details and edition comparison](https://www.g2.com/products/klocwork/reviews?section=pricing&secure%5Bexpires_at%5D=2026-06-27+13%3A16%3A19+-0500&secure%5Bsession_id%5D=af8153ef-88fe-4760-918b-eaed4f47ab1c&secure%5Btoken%5D=91fd52a10a56e4010b7f8437d78138129c0dddb4e7aad5f12eb7152ba2a68b9d&format=llm_user)

## Klocwork Features
**Administration**
- API / Integrations
- Extensibility

**Functionality**
- Integrations
- Extensibility
- Test Customization

**Documentation**
- Feedback
- Prioritization
- Remediation Suggestions

**Agentic AI - Static Code Analysis**
- Adaptive Learning
- Natural Language Interaction
- Proactive Assistance

**Analysis**
- Reporting and Analytics
- Issue Tracking
- Static Code Analysis
- Code Analysis

**Management**
- Automation
- Processes and Workflow
- Reporting

**Security**
- False Positives
- Custom Compliance
- Agility

**Testing**
- Command-Line Tools
- Compliance Testing
- Black-Box Scanning
- Detection Rate
- False Positives

**Agentic AI - Continuous Integration**
- Autonomous Task Execution
- Cross-system Integration
- Adaptive Learning
- Natural Language Interaction
- Proactive Assistance

**Agentic AI - Static Application Security Testing (SAST)**
- Autonomous Task Execution

## Top Klocwork Alternatives
  - [SonarQube](https://www.g2.com/products/sonarqube/reviews) - 4.4/5.0 (146 reviews)
  - [Coverity](https://www.g2.com/products/coverity/reviews) - 4.2/5.0 (55 reviews)
  - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) - 4.2/5.0 (41 reviews)

