Continuous, automated large-scale C programming code inspection and software security analysis using non-heuristics

Semantic Designs delivers a commercially available tool, CheckPointer, built for enterprise scale to scan, identify and resolve critical software vulnerabilities faster while reducing test cycles and improving code quality. Our C programming language codebase inspection automation applies built-in non-heuristic proofs to cull false positives and assess “unprovable” parts checked at run time to identify and prevent errors. We have additional tools that integrate seamlessly with CheckPointer and other development/test environments to automate code modification, translation and generation at scale. In doing this activity, we aim to help USAF Weapon System PEOs/SPOs (FA: #15314 and #14926) automate checks for software vulnerabilities primarily on C codebases with planned enhancements to support C++, C#, Java and COBOL for more precise ATO/Risk Management Framework (RMF) determination and to speed assured software capabilities to the warfighter. There may also be a use case for generating cyber warfare effects using CheckPointer. Current state CheckPointer is a TRL 9 commercial capability and part of Semantic Designs’ Design Maintenance System® (DMS®)  product portfolio trusted by over dozens of Fortune 1000 customers since 1996. We project over $1.5M in ’21 sales with $2M in commercial revenue over the period ‘19-’20.