Astrée
Astrée is paid static-analysis software for Linux and Windows that examines C code for possible run-time errors.
What Astrée is
Astrée is paid static-analysis software for Linux and Windows that examines C code for possible run-time errors. It can detect out-of-bounds accesses, pointer errors, division by zero, arithmetic overflows, memory leaks, data races, inconsistent locking, and deadlocks, along with unreachable code and non-terminating loops. Users provide preprocessed code, select an entry point such as main, and can supply wrapper code or Astrée Annotation Language information to describe the environment or tune precision. A client offers graphical and batch operation; analyses run on a server. Findings include error type and source location, with alarms classed as definite when the error is proven in context. Release 24.10 adds C++ and mixed C/C++ race and deadlock reporting and SARIF export. Astrée supports taint analysis, static assertions, coding-rule checks, MISRA support, CI/CD and DevOps integrations, AUTOSAR ARXML analysis, and TargetLink coupling. AbsInt develops and distributes it under CNRS/ENS license. Pricing is on request.
Good
- Detects memory, pointer, arithmetic, and concurrency defects
- Supports C and mixed C/C++ analysis
- Exports findings in SARIF
- Batch mode supports automation
- Provides taint analysis and static assertions
Watch out
- Paid software with no free plan
- Pricing requires a request
- License limits concurrent clients and analyses
- Runs through a client-and-server workflow
Who it suits
It suits developers and safety-focused teams analyzing handwritten or generated C and mixed C/C++ code. Linux and Windows users can integrate analyses into automated workflows.
Verdict
Astrée provides configurable static analysis with detailed source findings and broad defect coverage. Its server workflow, licensing limits, and request-based pricing should be considered before adoption.
The facts
Each one read from Astrée's own pages, with the date it was checked.
What it does
- Analysis features
- Additional features include finding unreachable code and non-terminating loops, user-configurable taint analysis, and proving functional properties with static assertions.checked 30 Sep 2026
- Analysis input
- Astrée analyzes preprocessed C code and includes a preprocessor to handle that step if desired.checked 30 Sep 2026
- Analysis setup
- Users can choose an analysis entry point, such as main, and Astrée analyzes code reachable from it.checked 30 Sep 2026
- Automation
- The client provides a graphical interface and batch mode for automation and integration.checked 30 Sep 2026
- C++ analysis
- Release 24.10 says Astrée can report data races and deadlocks in C++ and mixed C/C++ analysis mode.checked 30 Sep 2026
- Client and server
- Astrée has a client for setting up analyses and reviewing results, and a server where analyses run.checked 30 Sep 2026
- Code support
- Astrée can analyze handwritten or automatically generated code without requiring the program to be instrumented, executed, or stimulated by test cases.checked 30 Sep 2026
- Configuration
- Users can supply wrapper code and separate Astrée Annotation Language information to describe the execution environment or control analysis precision.checked 30 Sep 2026
- Coverage and precision
- The maker says Astrée considers all possible data and function pointer targets and thread interleavings, provides 100% control and data coverage, and can be tuned to eliminate false alarms.checked 30 Sep 2026
- Defects detected
- It detects issues including out-of-bounds array accesses, pointer errors, division by zero, arithmetic overflows, memory leaks, data races, inconsistent locking, and deadlocks.checked 30 Sep 2026
- Developer and distributor
- The release notes state that Astrée is developed and distributed by AbsInt under license from CNRS and ENS.checked 30 Sep 2026
- Integration
- Release 24.10 notes that the Astrée Jenkins plugin was updated.checked 30 Sep 2026
- Integrations
- The maker describes CI/CD and DevOps integration, automatic AUTOSAR integration analysis from ARXML files, and a TargetLink coupling; release notes also mention an Astrée Jenkins plugin.checked 30 Sep 2026
- Language standards
- The product factsheet lists support for C90, C99, C11, C18, C++98, C++11, C++14, and C++17.checked 30 Sep 2026
- License
- Astrée is developed and distributed by AbsInt under license from CNRS/ENS.checked 30 Sep 2026
- License limits
- The Astrée workflow page says the license file determines how many clients may access the server concurrently and how many analyses may run in parallel.checked 30 Sep 2026
- Purpose
- Astrée is a sound static analyzer designed to prove the absence of runtime errors and data races in C/C++ programs.checked 30 Sep 2026
- Results
- Astrée reports possible run-time errors with their type and source-code location, and can classify an alarm as a definite run-time error when it proves it must occur in a given context.checked 30 Sep 2026
- Safety qualification
- A Qualification Support Kit is available for automatic tool qualification, and the maker says Astrée can support verification objectives under standards including DO-178C and ISO 26262.checked 30 Sep 2026
- SARIF export
- Release 24.10 added export of analysis findings in SARIF format.checked 30 Sep 2026
- Scale
- The maker reports that projects with more than 10 million lines of code have been analyzed successfully.checked 30 Sep 2026
- Security
- The maker says connections between Astrée servers and clients are TLS-encrypted and external user authentication via OAuth 2.0/OIDC is supported.checked 30 Sep 2026
The company
- Founded
- 1998checked 28 Sep 2026
- Headquarters
- Saarbrücken, Germanychecked 28 Sep 2026
Alternatives to Astrée
- 1
Semgrep Code
Free planOpen sourceWebAPIExtensionLinux8.3From $15 a month - 2
Qodana
Free planWebAPIExtensionLinux7.9From $5 a month - 3
GitHub CodeQL
Free planWebExtensionLinuxmacOS7.5From $30 a month - 4
Understand
APIExtensionLinuxmacOS7.2From $100 a month - 5
Infer
Free planWebLinuxmacOSSelf-hosted6.7Free plan - 6
CBMC
Free planLinuxmacOSWindows6.5Free plan