Freedom251 › C and C++ Static Analysis Tools

Astrée

Paid LinuxWindows

What Astrée is

Astrée is static-analysis software for finding possible run-time errors in C code. It examines code reachable from a selected entry point, such as main, and can analyze handwritten or generated code without instrumentation, execution, or test cases. The included preprocessor can prepare source for analysis. A client provides a graphical interface for configuring analyses and reviewing findings, while a server runs them; batch mode supports automation. Findings identify an error type and source location, and Astrée can mark an alarm definite when it proves the error must occur in the chosen context. It detects issues such as out-of-bounds access, pointer errors, division by zero, overflows, memory leaks, data races, and deadlocks. Release 24.10 adds C++ and mixed C/C++ reporting for races and deadlocks, along with SARIF export. Other capabilities include taint analysis, unreachable-code detection, coding-rule checks, and static assertions. Astrée runs on Linux and Windows. It is paid, with pricing available on request; there is no free plan.

Who it suits

Astrée suits teams analyzing C code for run-time defects, including safety-oriented projects and large codebases. Its C++ concurrency analysis, automation options, and integrations may also suit teams with mixed-language or CI/CD workflows.

What it does well

Reports error types and source-code locations.
Analyzes code without execution or test cases.
Supports taint analysis and coding-rule checks.
Can report C++ data races and deadlocks.
Offers SARIF export and automation options.

What to know first

Paid software with pricing available on request.
No free plan is listed.
License limits concurrent clients and parallel analyses.

Limits

Astrée has no free plan. Its license file sets how many clients may access the server concurrently and how many analyses may run in parallel.

Getting started

Visit the Astrée website.
Check the listed system requirements for Windows or Linux.
Contact AbsInt for pricing and details.
Choose an analysis entry point and configure the analysis using the client.

Verdict

Astrée covers a broad range of static-analysis needs, from run-time errors to concurrency and coding rules. Buyers should confirm pricing and license capacity for their team before choosing it.

Questions

How much does Astrée cost?

Pricing is available on request. Astrée is a paid product.

Is there a free plan?

No. The listed pricing model is paid, with no free plan.

Which platforms does Astrée support?

The listed platforms are Linux and Windows. The factsheet lists x86-64 Windows 10 or newer and x86-64 RHEL 9 or compatible.

What languages can it analyze?

The factsheet lists C90, C99, C11, C18, C++98, C++11, C++14, and C++17. Release 24.10 describes C++ and mixed C/C++ analysis for data races and deadlocks.

Who develops Astrée?

AbsInt develops and distributes Astrée under license from CNRS and ENS.

Does it integrate with development workflows?

The maker describes CI/CD and DevOps integration, AUTOSAR analysis from ARXML files, and a TargetLink coupling. Release notes also mention an Astrée Jenkins plugin.

Facts from Astrée's own pages

Analysis features: Additional features include finding unreachable code and non-terminating loops, user-configurable taint analysis, and proving functional properties with static assertions. · absint.com, 30 Sept 2026
Analysis input: Astrée analyzes preprocessed C code and includes a preprocessor to handle that step if desired. · absint.com, 30 Sept 2026
Analysis setup: Users can choose an analysis entry point, such as main, and Astrée analyzes code reachable from it. · absint.com, 30 Sept 2026
Automation: The client provides a graphical interface and batch mode for automation and integration. · absint.com, 30 Sept 2026
C++ analysis: Release 24.10 says Astrée can report data races and deadlocks in C++ and mixed C/C++ analysis mode. · absint.com, 30 Sept 2026
Client and server: Astrée has a client for setting up analyses and reviewing results, and a server where analyses run. · absint.com, 30 Sept 2026
Code support: Astrée can analyze handwritten or automatically generated code without requiring the program to be instrumented, executed, or stimulated by test cases. · absint.com, 30 Sept 2026
Configuration: Users can supply wrapper code and separate Astrée Annotation Language information to describe the execution environment or control analysis precision. · absint.com, 30 Sept 2026
Coverage and precision: The maker says Astrée considers all possible data and function pointer targets and thread interleavings, provides 100% control and data coverage, and can be tuned to eliminate false alarms. · absint.com, 30 Sept 2026
Defects detected: It detects issues including out-of-bounds array accesses, pointer errors, division by zero, arithmetic overflows, memory leaks, data races, inconsistent locking, and deadlocks. · absint.com, 30 Sept 2026
Developer and distributor: The release notes state that Astrée is developed and distributed by AbsInt under license from CNRS and ENS. · absint.com, 30 Sept 2026
Founded: 1998 · absint.com, 28 Sept 2026
Headquarters: Saarbrücken, Germany · absint.com, 28 Sept 2026
Integration: Release 24.10 notes that the Astrée Jenkins plugin was updated. · absint.com, 30 Sept 2026
Integrations: The maker describes CI/CD and DevOps integration, automatic AUTOSAR integration analysis from ARXML files, and a TargetLink coupling; release notes also mention an Astrée Jenkins plugin. · absint.com, 30 Sept 2026
Language standards: The product factsheet lists support for C90, C99, C11, C18, C++98, C++11, C++14, and C++17. · absint.com, 30 Sept 2026
License: Astrée is developed and distributed by AbsInt under license from CNRS/ENS. · absint.com, 30 Sept 2026
License limits: The Astrée workflow page says the license file determines how many clients may access the server concurrently and how many analyses may run in parallel. · absint.com, 30 Sept 2026
Purpose: Astrée is a sound static analyzer designed to prove the absence of runtime errors and data races in C/C++ programs. · absint.com, 30 Sept 2026
Results: Astrée reports possible run-time errors with their type and source-code location, and can classify an alarm as a definite run-time error when it proves it must occur in a given context. · absint.com, 30 Sept 2026
Safety qualification: A Qualification Support Kit is available for automatic tool qualification, and the maker says Astrée can support verification objectives under standards including DO-178C and ISO 26262. · absint.com, 30 Sept 2026
SARIF export: Release 24.10 added export of analysis findings in SARIF format. · absint.com, 30 Sept 2026
Scale: The maker reports that projects with more than 10 million lines of code have been analyzed successfully. · absint.com, 30 Sept 2026
Security: The maker says connections between Astrée servers and clients are TLS-encrypted and external user authentication via OAuth 2.0/OIDC is supported. · absint.com, 30 Sept 2026

Where Astrée stands on Freedom251

C and C++ Static Analysis Tools#17 of 25