CPAchecker
cpachecker.sosy-lab.org
What it is
CPAchecker is a configurable software verification tool based on configurable program analysis concepts. It accepts C and SV-LIB inputs, lists predicate analysis for SV-LIB programs, and supports invariants, counterexamples, and proof artifacts. It can also validate termination witnesses in YAML formats 2.1 and 1.0. The project lists a hybrid verification method and provides a self-hosted deployment. CPAchecker is free software under the Apache 2.0 License. Version 4.2.2, released in December 2025, is available as Unix and Windows ZIP archives; Debian and Ubuntu users can install it from the SoSy-Lab APT repository, and a Docker image is available. Java 21 or later is required as of version 4.2. An older version, 1.6.1, can be accessed through a web interface, where some functions are unavailable in the restricted environment. Documentation includes installation instructions, tutorials, and getting-started guidance. Installation questions, bug reports, and suggestions can go to the users mailing list or issue tracker. The project is based in Munich, Germany.
Spec sheet
- Purpose
- CPAchecker is a tool for configurable software verification based on configurable program analysis concepts.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Support
- The project directs installation questions, bug reports, and suggestions to its CPAchecker users mailing list, and also provides an issue tracker.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Headquarters
- Munich, GermanyRead 28 Sep 2026 · cpachecker.sosy-lab.org
- Analysis support
- The page lists predicate analysis support for SV-LIB programs and validation of termination witnesses in YAML formats 2.1 and 1.0.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Container support
- The project provides a Docker image named sosylab/cpachecker:4.2.2.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Development
- Development takes place on GitLab, and the download page also links to a read-only GitHub mirror.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Documentation
- The documentation page links to installation instructions, getting-started guidance, tutorials, and a counterexample report for a program with a bug found by CPAchecker.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Linux installation
- Debian and Ubuntu users can install CPAchecker through the SoSy-Lab APT repository.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Newer Linux requirements
- The project says most configurations will require Ubuntu 24.04, Debian 13, or newer after the next release because of common SMT solver system requirements.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Online version
- An older version, 1.6.1, is available through a web interface, where some features are unavailable because of the restricted environment.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Release
- The download page lists version 4.2.2, released in December 2025, with Unix and Windows ZIP archives.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Requirements
- The download page says Java 21 or later is required as of CPAchecker 4.2.Read 8 Oct 2026 · cpachecker.sosy-lab.org
- Security and compliance
- The download page identifies the license as Apache 2.0; it does not state a security certification or compliance standard.Read 8 Oct 2026 · cpachecker.sosy-lab.org
Plans and prices
Strong points and limits
Strong points
- Free under the Apache 2.0 License.
- Supports C and SV-LIB inputs.
- Provides counterexamples and proof artifacts.
- Docker image and Linux package installation are available.
- Documentation includes tutorials and installation guidance.
Limits
- Java 21 or later is required for version 4.2.
- Some features are unavailable in the older web version.
- Newer Linux requirements are expected after the next release.
Who it suits
CPAchecker suits users verifying software in C or SV-LIB who can run a self-hosted tool. It may also fit teams seeking counterexamples or proof artifacts as verification outputs.
Verdict
CPAchecker offers configurable verification with a defined set of input languages, outputs, and deployment options. Check the Java and Linux requirements against the systems where you plan to run it.
Where Specifiction places it
- Formal Verification Tools#10 of 348.0
- C and C++ Static Analysis Tools#10 of 258.0