PVS-Studio
pvs-studio.com
What it is
PVS-Studio analyzes source code to find bugs and potential vulnerabilities in C, C++, C# and Java projects on Windows, Linux and macOS. Its download workflow also lists JavaScript, TypeScript and Go. The analyzer can flag vulnerable components, passwords in code, Trojan Source, SQL injections, XXE/XEE attacks and errors in clearing private data. It uses methods including tainted data analysis, intermodular analysis, symbolic execution, data-flow analysis, type inference and software composition analysis. Warnings can be classified against CWE, SEI CERT, MISRA, OWASP and AUTOSAR. Integrations include development environments and tools such as Visual Studio, IntelliJ IDEA, Rider, Jenkins, SonarQube, DefectDojo and CodeChecker. Reports are available in HTML, XML, CSV, TXT, JSON and other formats. PVS-Studio can be used offline for installation, activation and source analysis. Pricing is on request, with a seven-day trial key that provides full analyzer features and developer support. Team licensing is for fewer than ten developers; Enterprise is for larger teams and has no analyzer-feature limits.
Spec sheet
- What it does
- PVS-Studio detects bugs and potential vulnerabilities in C, C++, C#, and Java source code on Windows, Linux, and macOS.Read 30 Sep 2026 · pvs-studio.com
- Trial
- A trial key provides full access to the analyzer's features and support for one week.Read 30 Sep 2026 · pvs-studio.com
- Integrations
- Plugins and integrations are provided for Visual Studio, IntelliJ IDEA, Rider, CLion, Jenkins, SonarQube, DefectDojo, CodeChecker, Unity, Unreal Engine, and IncrediBuild.Read 30 Sep 2026 · pvs-studio.com
- Support
- Clients receive technical support directly from PVS-Studio analyzer developers.Read 30 Sep 2026 · pvs-studio.com
- Founded
- 2008Read 28 Sep 2026 · pvs-studio.com
- Analysis methods
- PVS-Studio uses tainted data analysis, intermodular analysis, symbolic execution, data-flow analysis, type inference, and software composition analysis.Read 30 Sep 2026 · pvs-studio.com
- Company history
- The company timeline records the founding of OOO Program Verification Systems on 21 March 2008.Read 30 Sep 2026 · pvs-studio.com
- Enterprise license
- Enterprise licenses are intended for medium and large teams, have no analyzer-feature limitations, and can be used by multiple teams in one company.Read 30 Sep 2026 · pvs-studio.com
- Included tools
- The installation includes command-line tools, compiler monitoring for C and C++, a report converter, DefectDojo and CodeChecker integrations, and a SonarQube plugin.Read 30 Sep 2026 · pvs-studio.com
- Offline operation
- PVS-Studio can be used offline for installation, activation, launching, source-code analysis, and other use cases.Read 30 Sep 2026 · pvs-studio.com
- Reports
- Analyzer reports are available in HTML, XML, CSV, TXT, JSON, CompileError, TaskList, and TeamCity formats.Read 30 Sep 2026 · pvs-studio.com
- Security detection
- The analyzer can detect vulnerable components, passwords in code, Trojan Source, SQL injections, XXE/XEE attacks, and errors in clearing private data.Read 30 Sep 2026 · pvs-studio.com
- Security standards
- PVS-Studio classifies warnings according to CWE, SEI CERT, MISRA, OWASP, and AUTOSAR.Read 30 Sep 2026 · pvs-studio.com
- Supported languages
- The download workflow lists C, C++, C#, Java, JavaScript, TypeScript, and Go.Read 30 Sep 2026 · pvs-studio.com
- Team license limit
- The Team license is intended for teams of nine people or fewer and has limitations on automatic notifications, centralized analysis-result work, cloud-service integration, and other development-process features.Read 30 Sep 2026 · pvs-studio.com
Plans and prices
Strong points and limits
Strong points
- Analyzes code on Windows, Linux and macOS.
- Supports multiple analysis methods and security classifications.
- Can operate offline for analysis and activation.
- Trial includes full features and developer support.
Limits
- Paid plans have no listed prices.
- Team license is limited to fewer than ten developers.
- Automated fixes are not provided.
Who it suits
It suits developers and teams who want source-code analysis across the listed languages and operating systems. Team is aimed at groups of fewer than ten developers, while Enterprise is intended for medium and large teams.
Verdict
PVS-Studio offers broad analysis methods, security checks and integrations, with offline use for teams that need it. The Team license has stated development-process limitations; larger groups can consider Enterprise, for which pricing is also on request.
Where Specifiction places it
- IDE Code Security Plugins#6 of 197.5
- Application Security Testing#16 of 287.4
- Static Analysis Tools#24 of 387.4
- C and C++ Static Analysis Tools#16 of 257.4
- SAST Tools#18 of 267.4
- Static Application Security Testing Software#19 of 257.4