Skip to content
SPECIFICTION
Get listed

Cppcheck

cppcheck.com

Free plan Open source WindowsmacOSLinuxSelf-hosted
Visit cppcheck.com
Spec score 8.8 #1 of 33 in Linters

What it is

Cppcheck is a static analysis tool for C and C++ code that detects bugs, undefined behavior, and dangerous coding constructs. It can analyze non-standard syntax commonly found in embedded projects. The tool fully supports C++11, C++14, and C++17, with partial support for C++20, and lists integrations with Visual Studio, VSCode, Keil, Eclipse, CLion, Qt Creator, and C++ Builder. Its Soundy mode is intended to help find hard-to-find bugs discovered during testing. The free Open-source plan provides core static analysis. Premium adds checks for safety and security standards, with compliance reports for supported standards; the maker describes Premium as TÜV SÜD certified for safety-critical development. A three-week free trial is offered without a credit card or commitment. Individual licensing excludes CI environments, virtual machines, and containers, while Enterprise supports those environments and air-gapped use. Project requires at least five users and one Git repository. Paid plan prices are available by tailored quotation.

Spec sheet

What it does
Cppcheck statically analyzes C and C++ code, concentrating on bugs such as undefined behavior and dangerous constructs.Read 15 Oct 2026 · cppcheck.com
Purpose
Cppcheck is a static analysis tool for C and C++ code that detects bugs, undefined behavior, and dangerous coding constructs.Read 3 Oct 2026 · cppcheck.com
Intended users
The company describes Cppcheck Premium licensing for individual developers, teams, and large organizations, including safety-critical industries.Read 3 Oct 2026 · cppcheck.com
Deployment
Cppcheck can run locally and in air-gapped environments without license servers or network configuration.Read 15 Oct 2026 · cppcheck.com
Trial
The site offers a three-week free trial with no credit card or commitments required.Read 3 Oct 2026 · cppcheck.com
Integrations
The site lists integrations with Visual Studio, VSCode, Keil, Eclipse, CLion, Qt Creator, and C++ Builder.Read 3 Oct 2026 · cppcheck.com
Support
Enterprise includes onboarding and configuration support and access to an enterprise support portal; Project includes onboarding support and prioritized second-line support.Read 3 Oct 2026 · cppcheck.com
Headquarters
Stockholm, SwedenRead 28 Sep 2026 · cppcheck.com
Founded
2021Read 28 Sep 2026 · cppcheck.com
Analysis speed
The vendor describes bidirectional analysis as very fast and says installation-to-result can take at most 30 minutes.Read 15 Oct 2026 · cppcheck.com
Baseline workflow
The manual documents content-hash XML suppressions that keep accepted warnings stable when unrelated lines move.Read 15 Oct 2026 · cppcheck.sourceforge.io
Bug hunting
Its “Soundy” bug-hunting mode is intended to help identify hard-to-find bugs discovered during testing.Read 3 Oct 2026 · cppcheck.com
C++ standards
Cppcheck fully supports C++11, C++14, and C++17, and partially supports C++20.Read 3 Oct 2026 · cppcheck.com
Certification
Cppcheck Premium is TÜV SÜD certified for safety-critical development, with coverage including IEC 61508, ISO 26262, EN 50128, EN 50657, and EN 50716.Read 3 Oct 2026 · cppcheck.com
CI deployment
Project and Enterprise licenses support CI/CD and virtualized environments such as Docker; only Enterprise is marked for air-gapped use.Read 15 Oct 2026 · cppcheck.com
CLI and extensibility
The documented command-line interface supports checker selection, error exit codes, parallel jobs, platform and standard settings, suppressions, templates and XML output.Read 15 Oct 2026 · github.com
Code coverage
The tool is designed to analyze C and C++ containing non-standard syntax often found in embedded projects.Read 15 Oct 2026 · cppcheck.com
Company founding
Cppcheck Solutions AB was founded in 2021 by Daniel Marjamäki, Pär Jelger and Magnus Janagård.Read 15 Oct 2026 · cppcheck.com
Company headquarters
Cppcheck Solutions AB lists S:t Göransgatan 95, 112 45 Stockholm, Sweden.Read 15 Oct 2026 · cppcheck.com
Company size
LinkedIn lists Cppcheck as privately held with 2–10 employees.Read 15 Oct 2026 · linkedin.com
Compliance reports
Compliance reports are available for the supported safety and security standards.Read 15 Oct 2026 · cppcheck.com
Custom addons
Documentation allows custom addon scripts or JSON configurations through the --addon option, including Python-based checks.Read 15 Oct 2026 · cppcheck.sourceforge.io
Deployment limits
The Individual license does not support CI environments, virtual machines, or containers; Enterprise supports those environments and air-gapped use.Read 3 Oct 2026 · cppcheck.com
Documentation and support
The project publishes a manual, bug tracker, IRC support channel and contribution guidance, while noting that only a few bugs currently have detailed documentation.Read 15 Oct 2026 · cppcheck.sourceforge.io
IDE integrations
Officially listed integrations include Visual Studio, VS Code, Keil, Eclipse, CLion, Qt Creator and C++ Builder.Read 15 Oct 2026 · cppcheck.com
Independent limitation
Slant reviewers say Cppcheck's custom parser can miss some template constructs and may be weaker than Clang for certain bug patterns.Read 15 Oct 2026 · slant.co
Language standards
Cppcheck fully supports C++11, C++14 and C++17, with partial C++20 support.Read 15 Oct 2026 · cppcheck.com
Limit: complex integration
The Gartner review identifies integrating Cppcheck with complex C++ projects as a challenge.Read 15 Oct 2026 · gartner.com
Limit: detection breadth
G2 reviewers report limited bug detection, recommend combining Cppcheck with Clang or other tools, and mention false positives and missing style checks.Read 15 Oct 2026 · g2.com
Limit: installation and paths
SourceForge review history includes Windows runtime-DLL installation failures, MSVC path interpretation problems, refresh issues and Android/Linux path failures.Read 15 Oct 2026 · sourceforge.net
Non-standard syntax
The tool can analyze C/C++ code with non-standard syntax commonly found in embedded projects.Read 3 Oct 2026 · cppcheck.com
Official VS Code extension
The Cppcheck Official extension runs analysis on save, supports project files, dynamic argument scripts, severity filtering and shared workspace settings.Read 15 Oct 2026 · marketplace.visualstudio.com
Open-source license
The Cppcheck project is distributed under the GNU General Public License version 3.0.Read 15 Oct 2026 · sourceforge.net
Praise: practical analysis
The Gartner reviewer describes Cppcheck as simple, quick and good at finding real bugs.Read 15 Oct 2026 · gartner.com
Praise: speed and integration
G2 reviewers repeatedly praise fast analysis, regular new checks, flexible report formats, ease of use and integration into complex setups.Read 15 Oct 2026 · g2.com
Praise: value and configurability
SourceForge reviewers praise the free tool's speed, ease compared with paid tools, configurable CMake targets, MISRA addon and discussion-forum support.Read 15 Oct 2026 · sourceforge.net
Premium pricing
Premium pricing is based on scope and usage, with a tailored quotation supplied after contacting sales.Read 15 Oct 2026 · cppcheck.com
Qualification add-ons
Add-ons cover EN 50128, EN 50657, EN 50716, IEC 61508, ISO 26262 and aerospace DO-178C/DO-330 qualification.Read 15 Oct 2026 · cppcheck.com
Rating on G2
4.6 out of 5 from 4 reviewsRead 15 Oct 2026 · g2.com
Rating on Gartner Peer Insights
4.0 out of 5 from 1 ratingRead 15 Oct 2026 · gartner.com
Rating on SourceForge
4.7 out of 5 from 77 reviewsRead 15 Oct 2026 · sourceforge.net
Release news
Cppcheck open-source 2.13, announced December 23, 2023, added checks including callback, returnImplicitInt and iterateByValue plus addon and CMake improvements.Read 15 Oct 2026 · cppcheck.com
Safety checks
Premium lists MISRA C 2023 and 2025, MISRA C++ 2008 and 2023, and AUTOSAR C++ 2014 coverage.Read 15 Oct 2026 · cppcheck.com
Safety standards
Premium supports MISRA C:2023 and C:2025, MISRA C++ 2008 and 2023, and AUTOSAR C++ 2014, with compliance reports available for supported standards.Read 3 Oct 2026 · cppcheck.com
Security checks
Premium lists CWE Top 25 plus CERT C 2016 and CERT C++ 2016 checks.Read 15 Oct 2026 · cppcheck.com
Security standards
Cppcheck Premium supports CERT C 2016, CERT C++ 2016, and CWE Top 25 compliance checking.Read 3 Oct 2026 · cppcheck.com
Supplier assurance
The Supplier Qualification Kit includes supplier documentation and an ISO 27001:2022 Statement of Applicability.Read 15 Oct 2026 · cppcheck.com
System packages
Homebrew provides Cppcheck 2.22.0 binaries for Apple Silicon macOS and ARM64/x86_64 Linux.Read 15 Oct 2026 · formulae.brew.sh

Plans and prices

Cppcheck Premium trial Free Three-week evaluation · no credit card · no commitment Read 15 Oct 2026 · cppcheck.com
Open-source Free Free to download and use · Core static analysis functionality Read 3 Oct 2026 · cppcheck.com
Open-source Cppcheck Free Core static analysis · free to download and use Read 15 Oct 2026 · cppcheck.com
Enterprise Priced on request Contact for a tailored quotation Unlimited repositories · Supports CI/CD, virtual machines, containers, and air-gapped environments · Enterprise support portal Read 3 Oct 2026 · cppcheck.com
Enterprise License Priced on request Minimum 25 users · unlimited repositories · air-gapped support · onboarding and configuration · enterprise support portal Read 15 Oct 2026 · cppcheck.com
Individual Priced on request Contact for a tailored quotation Standard support · No CI/CD integration · No air-gapped environments Read 3 Oct 2026 · cppcheck.com
Project Priced on request Contact for a tailored quotation Minimum 5 users · One Git repository with submodules · Users counted as repository authors · No air-gapped environments Read 3 Oct 2026 · cppcheck.com
Project License Priced on request Minimum 5 users · one Git repository with submodules · prioritized second-line support · no air-gapped use Read 15 Oct 2026 · cppcheck.com

Every Cppcheck plan and price →

Strong points and limits

Strong points

  • Free Open-source plan includes core static analysis
  • Analyzes non-standard syntax used in embedded projects
  • Supports C++11, C++14, and C++17 fully
  • Three-week trial needs no credit card

Limits

  • C++20 support is partial
  • Individual licensing excludes CI, virtual machines, and containers
  • Project requires at least five users
  • Paid plan prices require a tailored quotation

Who it suits

It suits C and C++ developers seeking static analysis, including teams working with embedded syntax or safety-critical standards. Enterprise is the listed option for CI/CD, virtual machines, containers, and air-gapped environments.

Cppcheck in depth

Read the full write-up

Cppcheck is a static analysis tool for finding bugs and risky constructs in C and C++ code. It is best suited to developers working with embedded code or teams that need checks against named safety and security standards. Its free core covers analysis, while paid licenses add compliance coverage, support and deployment options.

Overview

Cppcheck focuses on C and C++, including code with non-standard syntax commonly used in embedded projects. That makes it a practical fit for codebases that do not follow conventional syntax. It fully supports C++11, C++14 and C++17, but only partially supports C++20, so it is a less complete fit for teams standardizing on C++20.

The “Soundy” bug-hunting mode is intended to help find hard-to-detect bugs discovered during testing. Cppcheck also supports custom and security rules. Its central trade-off is scope: the free edition provides core analysis, while named compliance checks and reports are reserved for Premium licensing.

Key features

Embedded-code analysis: Support for non-standard C/C++ syntax is useful when embedded code would otherwise be awkward to analyze with conventional assumptions.

Safety checks: Premium covers MISRA C:2023 and C:2025, MISRA C++ 2008 and 2023, and AUTOSAR C++ 2014, with compliance reports for supported standards. This is relevant to teams working under those rules, but not a substitute for checking whether the specific license and project requirements align.

Security checks: Premium includes compliance checking for CERT C 2016, CERT C++ 2016 and CWE Top 25. Teams that need these checks must budget for a paid license rather than rely on the free core.

Safety-critical certification: Premium is TÜV SÜD certified for safety-critical development, with coverage including IEC 61508, ISO 26262, EN 50128, EN 50657 and EN 50716. That makes it relevant to regulated development contexts, though the certification scope should be matched to the project’s applicable standard.

Editor integrations: Integrations are listed for Visual Studio, VSCode, Keil, Eclipse, CLion, Qt Creator and C++ Builder, giving users several common development environments to work with.

Pricing

Cppcheck uses a freemium model. The free Open-source plan costs nothing and provides core static analysis, making it the sensible starting point for individual use that does not require Premium standards checks or paid support.

Open-source: free. It is free to download and use, with core static analysis functionality.

Individual: Custom pricing by quotation, with standard support. It does not include CI/CD integration, and the license does not support CI environments, virtual machines or containers. It is therefore best suited to an individual whose workflow stays outside those environments.

Project: Custom pricing by quotation, with onboarding support and prioritized second-line support. It requires a minimum of 5 users and covers one Git repository with submodules; users are counted as repository authors. It does not allow air-gapped environments. The repository and user limits make it a defined team option rather than a fit for multi-repository work.

Enterprise: Custom pricing by quotation, with unlimited repositories, support for CI/CD, virtual machines, containers and air-gapped environments, plus an enterprise support portal, onboarding and configuration support. It is the option for organizations whose deployment requirements rule out the narrower licenses.

A three-week free trial is offered without a credit card or commitment. That gives teams a way to assess the paid offering before requesting a quotation, but it does not change the free plan’s core-analysis scope.

Platforms

Cppcheck supports Linux, macOS and Windows, as well as self-hosted deployments. The Individual license’s restrictions on CI environments, virtual machines and containers are significant for automated or containerized workflows; Enterprise is the license that explicitly supports those environments and air-gapped use.

Who it's for

Cppcheck is a strong candidate for C and C++ developers who want focused static analysis, particularly when their code uses embedded-style syntax. The free plan suits users who need core checks without paid compliance coverage. Teams working to supported MISRA, AUTOSAR, CERT or CWE requirements have a clearer reason to consider Premium, while organizations with CI/CD, virtualized, containerized or air-gapped deployments should look to Enterprise. It is a weaker fit for projects centered on C++20 or for users seeking a broad, multi-language analyzer.

Pros and cons

Pros: It handles non-standard syntax common in embedded work, which broadens its usefulness for those codebases.

Pros: Premium combines named safety and security checks with compliance reports and safety-critical certification coverage.

Pros: The free core and three-week trial let individuals and teams start without an immediate license purchase.

Cons: C++20 support is partial, leaving a standards gap for projects already using it.

Cons: Individual excludes CI/CD, virtual machines and containers, while Project excludes air-gapped use; deployment needs can force a move to Enterprise.

Cons: Paid plans require a tailored quotation, and Project has a five-user minimum and one-repository scope.

Alternatives

For other tools in the same broad categories, compare Linters and Static Analysis Tools.

Biome is a free toolchain for web projects, so it is the more relevant choice when the work is web-focused rather than C or C++ analysis.

actionlint is a free MIT-licensed static checker with a command-line tool and browser playground; choose it for that checker’s scope rather than C/C++ analysis.

PMD is a free, BSD-style downloadable static code analyzer and is an alternative for readers comparing static analyzers.

Ruff is a free Python-ecosystem tool from Astral, whose tools are open source and permissively licensed; it is a better match for Python-focused work.

SwiftLint is a free, MIT-licensed Swift linting tool, making it the relevant alternative for Swift projects.

Astral offers free, open-source and permissively licensed tools including Ruff, uv and ty; consider it for that Python-ecosystem toolset.

Hadolint is a free, open-source Dockerfile linter under GPL-3.0, so it fits Dockerfile linting rather than C/C++ analysis.

JSHint is publicly available with no paid plans stated; it is another option to consider for its own linting scope.

Verdict

Choose Cppcheck if you need focused C/C++ analysis, especially for embedded syntax, and can use its free core or justify Premium’s standards checks and support. Look elsewhere if your priority is complete C++20 coverage, multi-language breadth, or a paid deployment option that avoids the limits of Individual and Project.

Verdict

Cppcheck offers a free core edition and paid licensing for additional standards checks and deployment needs. Compare the environment restrictions and team requirements with the license options before requesting a quotation.

Where Specifiction places it

Alternatives to CppcheckAll alternatives →