Product

IAR C-STAT

Code quality and compliance is included in IAR's platform

IAR C-STAT is a static analysis tool that analyzes your source code to find errors and vulnerabilities.

Key benefits

IAR C-STAT enhances code quality and compliance with powerful features for efficient analysis, reporting, and automation.

female developer degugging code

Coding assistance

Even if identified issues are known, C-STAT provides detailed documentation explaining potential problems like memory leaks and crashes. Each check includes descriptions and code examples showing both failing and passing cases to support better coding decisions.

c-stat code quality report

Detailed and insightful reports

C-STAT not only reports rule deviations but also assesses severity and confidence levels. Not all flagged issues indicate real problems, helping developers prioritize fixes effectively and avoid unnecessary changes to well-functioning code.

automotive speedometer

Safety compliance

C-STAT supports compliance with MISRA C, CWE, CERT C/C++, SANS Top 25, OWASP, and MISRA C++. TÜV SÜD-certified versions are available in selected IAR Embedded Workbench functional safety editions, providing industry-required verification for safety-critical applications.

developer using iar build tools from command line-1

Automation-friendly

C-STAT integrates into CI systems and automated build workflows, making static analysis a seamless, recurring process. Regular automated checks enhance code quality while maintaining development efficiency, ensuring early detection of potential issues in the pipeline.

Features

IAR C-STAT provides static analysis, automation support, and compliance checks, integrating seamlessly into development environments and CI/CD workflows.

logo circle filled

Integrated in IAR Embedded Workbench

C-STAT is built into IAR Embedded Workbench IDE and IAR Build Tools, enabling static analysis within the development environment. SARIF diagnostics enhance reporting, integration, and structured issue tracking for quality assurance.

logo circle filled

Command-line support

Use C-STAT from the command line for CMake-based projects and CI/CD automation. It integrates into automated pipelines without complex setup, enabling continuous static analysis in modern development workflows.

logo circle filled

Regression testing

Works with IAR Command Line Build Utility (iarbuild.exe) for automated regression testing. Detects deviations early, reduces debugging effort, and ensures continuous code quality verification for compliance.

logo circle filled

Comprehensive code analysis

Performs source code checks for coding rule deviations in C/C++ files and link-time checks for global and static object usage. Supports MISRA C, MISRA C++, CERT C/C++, CWE, and other standards to improve code quality and security.

Functional safety certification

Integrated into IAR Embedded Workbench and IAR Build Tools, IAR C-STAT is certified by TÜV SÜD to meet multiple functional safety standards. Each new platform release undergoes certification, ensuring consistently high-quality development processes and software.

TUV_Functional_S

 

Our supported architectures

  Arm RISC-V Renesas RL78 Renesas RH850 Renesas RX AVR AVR32 MSP430 8051 STM8 Renesas 78K Renesas V850 CR16C
C-STAT checked checked checked checked checked checked checked checked checked checked checked checked checked
FuSa certified checked checked checked un-checked un-checked un-checked un-checked un-checked un-checked un-checked un-checked un-checked un-checked

 

Supported standards

car with the lights on back and grey

Compliance with coding standards

C-STAT supports MISRA C:2023 (Arm toolchain), MISRA C:2012, MISRA C++:2008, MISRA C:2004, CERT C/C++, CWE, SANS Top 25, and OWASP for compliance and security, ensuring high code quality and adherence to industry standards.
heroic faith medical device screens in operation room

SARIF diagnostics support

C-STAT supports SARIF (SARIF (Static Analysis Results Interchange Format), enabling structured issue tracking, seamless toolchain integration, and improved reporting for compliance, security, and development workflows.

Supported devices

FAQ

Which architectures support C-STAT in IAR Embedded Workbench?

Supported versions:

  • IAR Embedded Workbench for ARM, from version 7.40
  • IAR Embedded Workbench for MSP430, from version 6.30
  • IAR Embedded Workbench for AVR32, from version 4.30
  • IAR Embedded Workbench for AVR, from version 6.60
  • IAR Embedded Workbench for RX, from version 2.80
  • IAR Embedded Workbench for V850, from version 4.20
  • IAR Embedded Workbench for CR16C, from version 3.30
  • IAR Embedded Workbench for STM8, from version 2.20
  • IAR Embedded Workbench for 8051, from version 9.30
  • IAR Embedded Workbench for RL78, from version 2.20
  • IAR Embedded Workbench for RH850, from version 1.30
Can I analyze C/C++ source files individually?

Yes! While C-STAT can analyze entire projects built with the IAR tools, it is possible to narrow down the analysis scope to a group of source files or even to a single source which, during development, saves time and keep focus.

What types of coding standards does IAR C-STAT support?

IAR C-STAT helps enforce compliance with MISRA C/C++, CERT C, and CWE, ensuring code quality and security.

How does static analysis with IAR C-STAT improve code reliability?

By detecting potential issues early in development, such as undefined behavior, buffer overflows, and security vulnerabilities, reducing debugging time and risks

Can IAR C-STAT integrate into CI/CD workflows?

Yes, it supports automation in modern DevOps pipelines with IAR Build Tools for CI/CD, enabling continuous static code analysis.

Platform wheel without header bigger canvas

IAR embedded development platform

Get access to all

Scale development operations with freedom and flexibility, accelerate innovation with code confidence and simplify compliance while strengthening security.

  • Architecture and device agnostic
  • Cloud-ready, tailored for enterprises
  • Functional safety always included
  • End-to-end embedded security

With our platform, you get access to everything.

Welcome to our new website!

We're making updates to improve your experience. You might notice a few glitches.

Thanks for your patience, and we hope you find what you're looking for, otherwise, please feel free to contact us.