CPAchecker

CPAchecker is a configurable software-verification tool for engineers and researchers analyzing C or SV-LIB programs on infrastructure they control. It is best for formal-analysis work that needs both defect traces and inspectable proof output. The main trade-off is that its free, open-source distribution still requires a current Java runtime and a suitable self-hosted operating system.

Overview

CPAchecker applies configurable program-analysis concepts, so users can adapt verification setups to a task rather than accept one fixed checking strategy. Its documented scope includes hybrid verification, invariant-based formalisms, predicate analysis for SV-LIB programs, and validation of termination witnesses in YAML formats 2.1 and 1.0. Counterexamples show how a failure can be reached, while proof artifacts give reviewers material for examining a successful result. That makes it more useful than a bare pass/fail checker when findings must be investigated or justified.

Version 4.2.2 was released in December 2025. Unix and Windows ZIP archives provide direct installation, Debian and Ubuntu users can use the SoSy-Lab APT repository, and the Docker image sosylab/cpachecker:4.2.2 offers a repeatable container route. Development takes place on GitLab, with a read-only GitHub mirror.

Key features

Configurable hybrid verification

Hybrid analysis and invariant reasoning give technically experienced users room to shape analyses around their verification goals. This flexibility suits research workflows and engineering teams with established verification practices, but it also means CPAchecker is a tool to configure rather than a turnkey scanner for occasional users.

Evidence for findings

Counterexamples can make a reported defect concrete by showing a route to failure. Proof artifacts support review of a result judged correct. Together they help teams audit conclusions, reproduce discussions, and distinguish an actionable trace from an unexplained status.

Program and witness support

The listed input languages are C and SV-LIB. Predicate analysis is documented for SV-LIB programs, and termination-witness validation covers YAML 2.1 and 1.0. Choose it when those languages and artifact formats match your work; it is not a general-purpose analyzer for every programming language.

Documentation and support

Installation instructions, getting-started guidance, tutorials, and a counterexample report are linked from the documentation. Installation questions, bug reports, and suggestions go to the CPAchecker users mailing list, with an issue tracker for project issues. Those resources help a team establish a workflow, although support is community-oriented rather than a commercial service desk.

Pricing

There is no paid tier, trial period, seat charge, or usage quota stated for the project. The zero price and Apache 2.0 licensing make it practical for individual researchers, teaching, and teams able to operate their own verification environment. The trade-off is that you supply the infrastructure and technical administration; there is no hosted plan or commercial support tier in this offer.

Platforms

CPAchecker supports Linux, macOS, Windows, and self-hosted deployment. Unix and Windows ZIP archives cover local installation, while Debian and Ubuntu users have an APT option. Docker support can standardize deployment across machines. Java 21 or later is required from CPAchecker 4.2 onward. The project expects most configurations to require Ubuntu 24.04, Debian 13, or newer after the next release because of common SMT-solver system requirements, so teams maintaining older distributions should plan upgrades.

An older 1.6.1 version runs through a web interface, but some features are unavailable in that restricted environment. Treat it as a limited way to explore the project, not an equivalent replacement for the current self-hosted release.

Who it's for

CPAchecker is aimed at verification engineers, software researchers, and developers responsible for C or SV-LIB code who need configurable analyses and evidence they can inspect. It is also a sensible fit for organizations that require self-hosting or want to integrate a containerized verifier into their own infrastructure. Teams seeking a browser-first service, broad language coverage, or managed operations should look elsewhere.

Pros and cons

• Pro: Hybrid verification, invariants, counterexamples, and proof artifacts support both discovery and review of results.
• Pro: Free Apache 2.0 software avoids license fees and permits self-hosted use.
• Pro: ZIP archives, an APT repository, and a versioned Docker image provide several deployment paths.
• Con: C and SV-LIB input support limits its relevance for teams working primarily in other languages.
• Con: Java 21+ and increasingly current Linux distributions raise maintenance requirements.
• Con: The online interface is based on an older release and omits some features.

Alternatives

For a wider survey of related products, see C and C++ Static Analysis Tools and Formal Verification Tools.

• CBMC is another free command-line tool for Linux, macOS, and Windows; choose it when bounded checking with its BSD 4-clause license better matches your workflow.
• Infer is free static analysis with downloadable, source-build, Docker, and web deployment options; pick it when supported-language static analysis matters more than CPAchecker's verification artifacts.
• MATLAB Grader is free with a MATLAB license under maintenance and supports LMS integration with a qualifying academic license; choose it for MATLAB-centered assessment.
• Qodana offers a free Community plan and free trial across local, web, API, and self-hosted environments; consider it when you want a broader platform model rather than a dedicated verifier.
• Semgrep Code has a free edition with repository, contributor, and AI-credit limits; choose it when code and supply-chain scanning fit better than formal verification.
• Clang Static Analyzer is fully open source and analyzes C, C++, and Objective-C; it is a natural choice for Clang-oriented static analysis.
• Flawfinder is free GPL-2.0+ software for Linux, macOS, Windows, and self-hosting; choose it for a lightweight alternative.
• Parasoft SOAtest uses tailored pricing and offers a free trial; consider it when a commercial testing platform and broader deployment options are priorities.

Verdict

Choose CPAchecker if you need configurable, self-hosted verification of C or SV-LIB programs and value counterexamples plus proof artifacts without licensing cost. Look elsewhere if you need managed delivery, broad language coverage, or a current full-featured web experience without maintaining Java and operating-system prerequisites.