secure-software-engineering/phasar

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1053 stars · 159 forks observed · 2026-09-03

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PhASAR is a LLVM-based static analysis framework written in C++20 that solves user-specified data-flow problems automatically on LLVM IR. It provides IFDS/IDE, WPDS, and monotone solvers along with call-graph, points-to/alias, type-hierarchy, and taint analysis infrastructure.

Use cases

• build a taint analysis for C/C++ code
• compute call graphs and points-to information from LLVM IR
• run interprocedural data-flow analysis with IFDS/IDE
• find security vulnerabilities via static analysis
• analyze C++ type hierarchies from LLVM bitcode
• prototype custom static analyses on LLVM IR

When to choose

• you need a programmable, solver-based static analysis framework over LLVM IR
• you want ready-made call-graph, alias, and ICFG infrastructure
• you are doing security research like taint or vulnerability analysis on C/C++

When to avoid

• you need dynamic or runtime analysis rather than static analysis
• your code does not compile to LLVM IR
• you want a turnkey linter with no C++ development

Facets

framework · maturity active

linter parser compiler security developer-tools security developer-tools programming-languages compilers cpp cross-platform llvm data-flow-analysis ifds ide-solver taint-analysis points-to-analysis call-graph program-analysis linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="secure-software-engineering/phasar")