Parasoft C/C++test is static analysis, unit testing and coverage software for C and C++ in safety-critical work, sold yearly with quote-only compliance plans.
Parasoft C/C++test catches defects and coding-standard violations early in C and C++ source, and produces the test and coverage evidence that functional safety audits ask for. Parasoft, a Monrovia, California testing company founded in 1987, develops it next to its Java and .NET tools, Jtest and dotTEST. It ships in two editions. C/C++test runs inside Eclipse, Visual Studio and VS Code. C/C++test CT works without an IDE and suits teams that test in CI pipelines with a unit testing framework of their own. Static analysis combines control flow, data flow and pattern-based checks, run in Fast, Standard or Aggressive mode. Data flow analysis flags null pointers, division by zero and memory leaks, while compliance checking covers MISRA, CERT, CWE, AUTOSAR C++14 and JSF, with OWASP rules for security. RuleWizard lets a team write its own rules, and code duplication analysis finds copied blocks. A reference report sets aside existing findings so newly introduced defects stand out. Unit and integration test generation, runtime analysis and coverage from statement and branch up to MC/DC run on host, simulator or target hardware, and requirements traceability ties each test to what it verifies. The audience is embedded software engineers, QA leads and safety managers in automotive, aerospace and defense, medical and industrial work. Those teams answer to ISO 26262, DO-178C or IEC 62304, and a TUV certificate with tool qualification kits covers qualifying the tool itself for ISO 26262 and DO-178C. A developer who simply wants bugs caught early can use the static analysis on its own. Teams that already write tests in GoogleTest or Boost.Test keep that framework under C/C++test CT and gain coverage, traceability and reporting on top of it. A typical project starts by running a MISRA or CERT configuration across the codebase, then turns the same rule set into a quality gate in Jenkins or Azure DevOps so every merge is checked. Developers get instant feedback in Visual Studio or VS Code while they work, and in VS Code a GenAI assistant suggests corrective code for each violation. Before an audit, coverage measured on target hardware and requirement links kept in Jama Connect or Polarion become part of the certification package. Managers then follow quality and compliance across projects in Parasoft DTP dashboards, which makes C/C++test a working part of how a safety-critical C or C++ team ships a release.
Pricing
View plans-
Individual
$35 per month
Per month, billed annually
- Control flow, data flow and pattern-based static analysis
- Fast, Standard and Aggressive analysis modes
- RuleWizard custom static analysis rules
- Code duplication analysis
- No MISRA, CERT or AUTOSAR compliance packs; those start at Essentials
-
Essentials
Custom pricing
- Price on request after a demo
- Everything in Individual
- MISRA, CERT, CWE, AUTOSAR C++14 and JSF compliance
- Instant feedback in the IDE, command-line runs and CI/CD quality gates
-
Enterprise
Custom pricing
- Price on request through Parasoft sales
- Everything in Essentials
- Unit and integration test generation with GoogleTest support
- Code coverage on host, simulator or target hardware
- Custom dashboards for organization-wide quality and compliance
- TUV certificate and tool qualification kits for ISO 26262 and DO-178C
- Industry-specific compliance packs
- Quick Start Package
Features
- Included: Quality gate that fails the build
- Not included: Pull request decoration with findings
- Included: New-code-only analysis against a baseline
- Included: Custom rule authoring
- Included: Rule set configuration per project
- Included: SAST security vulnerability rules
- Not included: Hardcoded secrets detection
- Not included: Software composition analysis of dependencies
- Included: Code duplication detection
- Not included: Complexity and maintainability metrics
- Not included: Test coverage import and tracking
- Included: IDE plugin with live findings
- Not included: Analysis for 20 or more languages
- Not included: Infrastructure-as-code scanning
- Included: Automated fix suggestions for findings
- Included: Portfolio-level quality dashboards
- Not included: Self-hosted analysis server
- Not included: Free analysis for open source projects
Additional Features
- Control flow and data flow analysis
- Pattern-based static analysis
- Fast, Standard and Aggressive analysis modes
- RuleWizard custom rule authoring
- Per-project coding standard configurations
- MISRA compliance checking
- CERT C and CERT C++ secure coding rules
- CWE and OWASP security checks
Best for
- embedded C and C++ teams working to MISRA, CERT or AUTOSAR
- automotive teams producing ISO 26262 evidence
- aerospace and defense teams on DO-178C projects
- medical device teams following IEC 62304
- individual C and C++ developers catching bugs early
- CI-focused teams already testing with GoogleTest or Boost.Test
- organizations whose codebase is C and C++
Use cases
- checking code against MISRA before a release
- enforcing CERT and CWE secure coding rules
- blocking merges that add new violations in CI
- finding null pointer, division by zero and memory leak defects
- writing custom static analysis rules for in-house standards
- removing duplicated code
- generating unit and integration tests for C and C++ code
- measuring MC/DC coverage on target hardware
- tracing requirements to tests for a certification audit
- qualifying a testing tool for ISO 26262 or DO-178C
- fixing static analysis violations with suggested code in VS Code
Screenshots & Videos
Explore Parasoft C/C++test in action
User Reviews
Compare with Similar Software
Click to compare side by side with Parasoft C/C++test