Try our new research platform with insights from 80,000+ expert users
Klocwork Logo

Klocwork pros and cons

Vendor: Perforce
4.1 out of 5
468 followers
Start review

Pros & Cons summary

Klocwork provides valuable static analysis and code refactoring essential for software safety and reliability. It helps anticipate potential bugs before they arise and allows custom checker creation as a significant advantage. Despite supporting languages like C, C++, Java, and Python, it struggles with defining rules and detecting true positives. Enhanced integration with Agile and DevOps is needed to boost user efficiency, alongside better management of excessive warnings.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Klocwork helps teams think about corner cases and potential bugs in advance, enhancing code reliability and safety-critical levels.
Klocwork's static code analysis, including on-the-fly and incremental analysis, allows developers to find defects during coding, similar to using spell check.
It offers valuable language support, expanding beyond C, C++, C#, and Java to include JavaScript and Python.
Klocwork's reporting feature tracks improvement trends and demonstrates software development value over time.
It features quick setup time, which is highly valued.

CONS

The process to define rules is complex, and automating rule definition for static analysis according to various SILs could reduce confusion.
Klocwork struggles with identifying true positives, finding only 30% in the Juliet test case.
Integration with Agile DevOps and methodologies could be improved to better align with modern development practices.
Support for more programming languages such as Python, JavaScript, Ada, and Golang is needed, with Klocwork currently supporting only seven languages.
An excess of warnings that require expertise to categorize complicates the analysis of reports, necessitating improved management to differentiate between issue types.
 

Klocwork Pros review quotes

reviewer2180745 - PeerSpot reviewer
May 10, 2023
The reporting helps us understand the trend of our results and whether we improve over time. We can see the history within Klocwork's server architecture and know that we're making things better. It creates a great story for our management. We can demonstrate value and how our software is developing over time.
Read full review
BD
Aug 2, 2018
I like not having to dig through false positives. Chasing down a false positive can take anywhere from five minutes for a small easy one, then something that is complicated and goes through a whole bunch of different class cases, and it can take up to 45 minutes to an hour to find out if it is a false positive or not.
Read full review
AnirbanSarkar - PeerSpot reviewer
Oct 18, 2022
The most valuable feature of Klocwork is finding defects while you're doing the coding. For example, if you have an IDE plug-in of Klocwork on Visual Studio or Eclipse, you can find the faults; similar to using spell check on Word, you can find out defects during the development phase, which means that you don't have to wait till the development is over to find the flaws and address the deficiencies. I also find language support in Klocwork good because it used to support only C, C++, C#, and Java, but now, it also supports Java scripts and Python.
Read full review
Buyer's Guide
Klocwork
March 2025
Free Report: Klocwork Reviews and More
Learn what your peers think about Klocwork. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
DOWNLOAD NOW
842,592 professionals have used our research since 2012.
RE
Aug 23, 2023
It's integrated into our CI, continuous integration.
Read full review
MG
Nov 19, 2019
There is a central Klocwork server at our headquarter in France so we connect the client directly to the server on-premises remotely.
Read full review
reviewer1553658 - PeerSpot reviewer
Oct 29, 2022
On-the-fly analysis and incremental analysis are the best parts of Klocwork. Currently, we are using both of these features very effectively.
Read full review
SivaneshWaran - PeerSpot reviewer
Apr 22, 2024
There's a feature in Klocwork called 'on-the-fly analysis', which helps developers to find and fix the defects at the time of development itself.
Read full review
reviewer1184322 - PeerSpot reviewer
Nov 21, 2019
One can increase the number of vendors, so the solution is scalable.
Read full review
reviewer937347 - PeerSpot reviewer
Apr 30, 2022
Klocwork's most valuable feature is the static code analysis feature. It detects the potential problem earlier to allow the developer to receive feedback quickly and then address it before it becomes a problem.
Read full review
reviewer988890 - PeerSpot reviewer
Dec 22, 2021
The most valuable feature is the Incremental analysis.
Read full review
Show 5 more reviews (out of 15)
 

Klocwork Cons review quotes

reviewer2180745 - PeerSpot reviewer
May 10, 2023
Under NIST cybersecurity standards, we must address vulnerabilities within a specified time after discovering them. When we try to propagate those updates and fixes through the system, it would be nice if the clients could reconnect to the existing server or have the server dynamically updated in some way. I know that isn't easy, but maybe processes could be enhanced to make that more streamlined from a DevOps perspective.
Read full review
BD
Aug 2, 2018
Klocwork does have a problem with true positives. It only found 30% of true positives in the Juliet test case.
Read full review
AnirbanSarkar - PeerSpot reviewer
Oct 18, 2022
What needs improvement in Klocwork, compared to other products in the market, is the dashboard or reporting mechanisms that need to be a bit more flexible. The Klocwork dashboard could be improved. Though it's good, it's not as good as some of the other products in the market, which is a problem. The reporting could be more detailed and easier to sort out because sorting in Klocwork could be a bit more time-consuming, mainly when sorting defects based on filters, compared to how it's done on other tools such as Coverity.
Read full review
Buyer's Guide
Klocwork
March 2025
Free Report: Klocwork Reviews and More
Learn what your peers think about Klocwork. Get advice and tips from experienced pros sharing their opinions. Updated: March 2025.
DOWNLOAD NOW
842,592 professionals have used our research since 2012.
RE
Aug 23, 2023
The main problem is that since it only parses the code, the warnings or the problems that are given as a result of the report can sometimes require a lot of effort to analyze.
Read full review
MG
Nov 19, 2019
We'd like to see integration with Agile DevOps and Agile methodologies.
Read full review
reviewer1553658 - PeerSpot reviewer
Oct 29, 2022
Modern languages, such as Angular and .NET, should be included as a part of Klocwork. They have recently added Kotlin as a part of their project, but we would like to see more languages in Klocwork. That's the reason we are using Coverity as a backup for some of the other languages.
Read full review
SivaneshWaran - PeerSpot reviewer
Apr 22, 2024
This solution could be improved if they offered support of more languages including Ada and Golang. They currently only support seven languages.
Read full review
reviewer1184322 - PeerSpot reviewer
Nov 21, 2019
I would like to see better codes between projects and a more user-friendly desktop in the next release.
Read full review
reviewer937347 - PeerSpot reviewer
Apr 30, 2022
Klocwork has to improve its features to stay ahead of other free solutions.
Read full review
reviewer988890 - PeerSpot reviewer
Dec 22, 2021
I believe it should support more languages, such as Python and JavaScript.
Read full review
Show 6 more reviews (out of 16)

Product Categories

Product Categories
Application Security Tools
Static Application Security Testing (SAST)
Static Code Analysis

Popular Comparisons

Popular Comparisons
SonarQube Server (formerly SonarQube) vs Klocwork Logo
SonarQube Server (formerly SonarQube) vs Klocwork
GitLab vs Klocwork Logo
GitLab vs Klocwork
Snyk vs Klocwork Logo
Snyk vs Klocwork
Checkmarx One vs Klocwork Logo
Checkmarx One vs Klocwork
Veracode vs Klocwork Logo
Veracode vs Klocwork
Fortify on Demand vs Klocwork Logo
Fortify on Demand vs Klocwork
CodeSonar vs Klocwork Logo
CodeSonar vs Klocwork
Polyspace Code Prover vs Klocwork Logo
Polyspace Code Prover vs Klocwork
Fortify Application Defender vs Klocwork Logo
Fortify Application Defender vs Klocwork
See all alternatives

Product Categories

Product Categories
Application Security Tools
Static Application Security Testing (SAST)
Static Code Analysis

Popular Comparisons

Popular Comparisons
SonarQube Server (formerly SonarQube) vs Klocwork Logo
SonarQube Server (formerly SonarQube) vs Klocwork
GitLab vs Klocwork Logo
GitLab vs Klocwork
Snyk vs Klocwork Logo
Snyk vs Klocwork
Checkmarx One vs Klocwork Logo
Checkmarx One vs Klocwork
Veracode vs Klocwork Logo
Veracode vs Klocwork
Fortify on Demand vs Klocwork Logo
Fortify on Demand vs Klocwork
CodeSonar vs Klocwork Logo
CodeSonar vs Klocwork
Polyspace Code Prover vs Klocwork Logo
Polyspace Code Prover vs Klocwork
Fortify Application Defender vs Klocwork Logo
Fortify Application Defender vs Klocwork
See all alternatives
Related questions
  • 702
If you had to both encrypt and compress data during transmission, which would you do first and why?
  • 48
When evaluating Application Security, what aspect do you think is the most important to look for?
  • 122
What are the Top 5 cybersecurity trends in 2022?
  • 136
What are the threats associated with using ‘bogus’ cybersecurity tools?
  • 48
We're evaluating Tripwire, what else should we consider?
  • 14
Which application security solutions include both vulnerability scans and quality checks?
  • 1,652
Is SonarQube the best tool for static analysis?
  • 23
Why Do I Need Application Security Software?
  • 76
Which Email Security enterprise solution would you choose: Cisco Secure Email vs Forcepoint Email Security vs Barracuda Email Security Gateway?
  • 69
SAST vs. DAST: Which is better for application security testing?