How does CodeSonar work?

Depends on how detailed you want to be. CodeSonar functions by watching a customer’s build and determining what code might run when a program executes. We then check that code against over 300 possible rules looking for coding errors or confirming code conforms to standards like MISRA or CERT. The power of SAST is that there is no need to run the program to do this: all analysis happens at the level of the source code. Our sales deck actually has pictures and more details on how this works.