Hacker ApprovedDepartments

Frama-C

Shares rank 10 of 12 static analyzers by recommenders

Free static analysis and formal verification framework for C, with plugins that prove code free of undefined behavior; people call it among the best verification tools around.

Free static analysis and formal verification framework for C, with plugins that prove code free of undefined behavior; people call it among the best verification tools around.

5 people gave an opinion

recommend it
5
criticize it
0
approval share
100%
Each figure is one person. RecommendsCriticizes

Recommended in 4 of 13 months

  1. November 2025: recommended
  2. December 2025: not recommended
  3. January 2026: not recommended
  4. February 2026: not recommended
  5. March 2026: not recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: not recommended
  9. July 2026: not recommended
  10. August 2026: not recommended
  11. September 2026: recommended
  12. October 2026: not recommended
  13. November 2026: not recommended (month in progress)

Why it doesn’t carry the badge

  • 5 people recommend itNeeds 10 or more, not met.
  • Nobody criticizes itNeeds 2 to 1 or better, met.
  • Recommended in 4 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Strong formal verification tooling for C

    “between cbmc, frama-c and coccinelle there is hardly another language with comparable tooling”

    Comment from 14 Apr 2026 in “Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them”

    “Formal verification toolchains for C (Frama-C, seL4's setup, etc.)”

    Comment from 22 Apr 2026 in “Garbage Collection Without Unsafe Code”

    “it gets some of the best formal verification tools around”

    Comment from 17 Nov 2025 in “Giving C a superpower: custom header file (safe_c.h)”
  • Plugins prove code free of undefined behavior

    “they don't compare to analyzers like Frama-C plugins, which demand further annotations/proofs if necessary to show code is free of UB”

    Comment from 17 Nov 2025 in “Giving C a superpower: custom header file (safe_c.h)”

    “or is integrated with specific programming languages like SPARK, Frama-C or this Verus”

    Comment from 17 Sep 2026 in “Developing provably correct Rust code with Verus”

Other static analyzers people recommend

The four most recommended other static analyzers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Frama-C compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
zizmor19195%6—Approved
Semgrep141058%7——
clang-tidy14478%6—Approved
PHPStan110100%7—Approved
Frama-CThis page50100%4——
See all 12 static analyzers, ranked

What people said

All 6 comments that mention it, newest first. Each links to the original comment.

“or is integrated with specific programming languages like SPARK, Frama-C or this Verus”

RecommendsComment from 17 Sep 2026 in “Developing provably correct Rust code with Verus”

“There are plenty of tools that restrict C into defined behavior subset.”

RecommendsComment from 20 May 2026 in “Everything in C is undefined behavior”

“Formal verification toolchains for C (Frama-C, seL4's setup, etc.)”

RecommendsComment from 22 Apr 2026 in “Garbage Collection Without Unsafe Code”

“between cbmc, frama-c and coccinelle there is hardly another language with comparable tooling”

RecommendsComment from 14 Apr 2026 in “Someone Bought 30 WordPress Plugins and Planted a Backdoor in All of Them”

“they don't compare to analyzers like Frama-C plugins, which demand further annotations/proofs if necessary to show code is free of UB”

RecommendsComment from 17 Nov 2025 in “Giving C a superpower: custom header file (safe_c.h)”

“it gets some of the best formal verification tools around”

RecommendsComment from 17 Nov 2025 in “Giving C a superpower: custom header file (safe_c.h)”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.