SeaHorn
SeaHorn is an open-source framework for analyzing LLVM-based programs, developed mainly for research in automated verification.
What SeaHorn is
SeaHorn is an open-source framework for analyzing LLVM-based programs, developed mainly for research in automated verification. It prepares programs such as C for analysis by converting them to LLVM bitcode, then expressing verification conditions as Constrained Horn Clauses for backend checking. Its methods include SMT-based bounded and software model checking, abstract interpretation, and context-sensitive pointer analysis. SeaHorn can also analyze termination and non-termination, and check for inconsistent code fragments through path coverage. For C code with assertions, the `sea pf` command generates and solves verification conditions. It can show computed invariants for a safe result or save an executable counterexample when it finds a violation. The optional Crab component can provide numerical invariants to the Spacer backend. `sea inspect` reports program structure and can generate memory or call graph data. SeaHorn is not a ready-to-run static analyzer; it is a framework to assemble for analysis. It is free under a modified BSD license and supports Linux, macOS, and self-hosted deployment.
Good
- Supports C and LLVM IR inputs
- Offers multiple verification and analysis methods
- Can produce executable counterexamples
- Includes program inspection and graph output
- Free and open source
Watch out
- Not an out-of-the-box static analyzer
- Building requires LLVM, Z3, and Boost
- Docker image was updated about seven years ago
Who it suits
SeaHorn suits researchers and developers working on verification of C or other LLVM-based programs. It is also relevant to users who want to inspect program structure or investigate potential bugs through generated counterexamples.
Verdict
SeaHorn provides several verification approaches in a framework that can be adapted to analysis needs. Its setup and framework-oriented design are important considerations for anyone seeking a ready-made analyzer.
The facts
Each one read from SeaHorn's own pages, with the date it was checked.
What it does
- Additional analysis
- SeaHorn’s `sea inspect` command can report program structure and generate memory or call graph data.checked 9 Oct 2026
- Analysis engines
- Its backend uses SMT-based model checking engines based on PDR/IC3, and uses CRAB to provide numerical invariants through abstract interpretation.checked 10 Oct 2026
- Analysis output
- The `sea pf` command can display computed invariants for a safe result or save a counterexample for a violation.checked 9 Oct 2026
- Counterexamples
- SeaHorn can produce executable counterexamples when it finds a violation.checked 9 Oct 2026
- C verification
- Its `sea pf` command takes a C program with assertions, translates it to LLVM bitcode, generates verification conditions, and solves them.checked 9 Oct 2026
- Dependencies
- Building SeaHorn requires LLVM, Z3, and Boost; its README says the exact library versions change.checked 9 Oct 2026
- Download
- The site links to a SeaHorn Docker image described as SeaHorn for LLVM 3.8; Docker Hub shows the nightly image command as `docker pull seahorn/seahorn:nightly`.checked 10 Oct 2026
- Founders
- The site lists Arie Gurfinkel, Temesghen Kahsai, and Jorge Navas as founders.checked 10 Oct 2026
- Frontend
- Its frontend takes an LLVM-based program such as C and generates LLVM IR bitcode, preprocessing and optimizing it for verification.checked 10 Oct 2026
- Image status
- Docker Hub says the SeaHorn image was updated about 7 years ago and lists its size as 642.7 MB.checked 10 Oct 2026
- Inconsistency checking
- SeaHorn detects inconsistent code fragments by computing path coverage for generated Horn clauses.checked 10 Oct 2026
- Integrations
- The site identifies CRAB as the abstract interpretation analyzer SeaHorn uses to provide numerical invariants.checked 10 Oct 2026
- License
- SeaHorn is distributed under a modified BSD license.checked 9 Oct 2026
- Model checking
- SeaHorn supports SMT-based bounded model checking and constrained Horn clause based software model checking.checked 9 Oct 2026
- Not a turnkey analyzer
- The project says SeaHorn is not an out-of-the-box static analysis tool.checked 9 Oct 2026
- Optional analysis component
- Crab abstract interpretation is optional and can supply invariants to SeaHorn’s Spacer backend.checked 9 Oct 2026
- Pricing
- The opened official site provides a Download section but no pricing information.checked 10 Oct 2026
- Purpose
- SeaHorn is a verification framework for LLVM-based programs.checked 10 Oct 2026
- Static analysis
- Supported features include abstract interpretation based static analysis and context-sensitive pointer analysis.checked 9 Oct 2026
- Support
- The project says it provides support to new users and invites users to report issues when Docker tags become stale.checked 9 Oct 2026
- Termination analysis
- SeaHorn can prove termination and non-termination by synthesizing and validating candidate ranking functions or producing a witness for non-termination.checked 10 Oct 2026
- Use case
- The site describes SeaHorn as a framework for analyzing programs and cites detecting abnormalities and serious bugs as a use of inconsistency checking.checked 10 Oct 2026
- Verification conditions
- Its middle end converts optimized LLVM bitcode into verification conditions expressed as Constrained Horn Clauses.checked 10 Oct 2026
Where it runs
- Platforms
- The README includes build instructions for Linux and a separate section on compiling on a Mac.checked 9 Oct 2026
Alternatives to SeaHorn
- 1
Semgrep Code
Free planOpen sourceWebAPIExtensionLinux8.3From $15 a month - 2
Qodana
Free planWebAPIExtensionLinux7.9From $5 a month - 3
GitHub CodeQL
Free planWebExtensionLinuxmacOS7.5From $30 a month - 4
Understand
APIExtensionLinuxmacOS7.2From $100 a month - 5
Infer
Free planWebLinuxmacOSSelf-hosted6.7Free plan - 6
CBMC
Free planLinuxmacOSWindows6.5Free plan