New Onboard is here — AI-guided, self-hosted onboarding for your codebase. Learn more
Features Code Navigation Static Analysis Graphs Compliance Metrics Custom API How it works Compliance FAQs Pricing Docs Start free trial
Understand by SciTools

Every change starts with “what calls this?” “what breaks?” “who owns this?” “is it compliant?”

Understand brings code exploration, graphs, metrics, standards checking, and AI-powered summaries together in one tool. Navigate unfamiliar code, see how components relate, measure code quality, and automate analysis across your workflow.

Runs entirely on your machine · No build required · 20,000+ developers

Understand is trusted by over 20,000 developers

Amazon NASA NVIDIA Toyota US Air Force Raytheon Technologies Samsung Aurora Flight Sciences Honeywell Amazon NASA NVIDIA Toyota US Air Force Raytheon Technologies Samsung Aurora Flight Sciences Honeywell Amazon NASA NVIDIA Toyota US Air Force Raytheon Technologies Samsung Aurora Flight Sciences Honeywell
30+ Years
of code analysis experience
20,000+ developers
use Understand to make sense of complex code
TÜV SÜD certified seal
Certified
TÜV SÜD certified to ISO 26262, IEC 61508 & EN 50128
Understand and AI

Asking is easy. Trusting the answer isn’t.

Understand ships with a fully offline AI assistant. The difference isn’t the model — it’s what the model can see. Every answer is built on Understand’s parsed model of your codebase: the real call graph, every cross-reference, the dependency structure, the metrics, the standards violations.

“What actually calls this function?”

Inferred

Reads whatever source fits in its context window and infers the rest. Calls through macros, typedefs and function pointers go missing, and so does anything in a language it didn’t parse.

From the parsed model

The real call tree, walkable in either direction, across language boundaries — every caller with a file and a line you can click.

“If I change this struct, what breaks?”

Inferred

Matches on the name. No way to separate a read from a write, and no way to tell you what it never saw.

From the parsed model

Every reference in both directions, with reads separated from writes and each one located to a file and line. It works on code that doesn’t compile.

“Where are we out of compliance?”

Inferred

An opinion about your code, phrased confidently. A chat log is not evidence, and no auditor will take it as such.

From CodeCheck

3,000+ MISRA and AUTOSAR rules run per commit, deviations recorded, reported by a TÜV SÜD certified toolchain.

“Where does our source end up?”

Uploaded

On whatever infrastructure runs the model, under whatever terms it was signed up under.

Local

The model ships inside Understand and runs on your machine. Air-gapped installs included. Point it at your own local model if you’d rather.

It was never Understand or AI. Understand is where the AI gets its facts.

How Understand Works

See your codebase as a connected system

Understand parses your entire codebase and builds a connected model of its structure and relationships. Instead of searching through files manually, you can see how functions, types, modules, dependencies, and architecture fit together — even across languages.

Your codebase

Any size. Any language.

Understand

Parsed code model

Functions·Types·Variables
Calls·References·Dependencies
Architecture·Metrics·Standards

Once Understand has modeled the code, the questions that used to take hours become much easier to answer.

The questions

Five questions that stall a change. Five answers, in seconds.

Each one is a thing engineers already do by hand — reading, tracing, guessing. Understand does them from the model.

  1. 01

    “What actually calls this function?”

    Not what greps to a matching string — what genuinely reaches it, through macros, typedefs, function pointers, and across language boundaries. Invert the tree and you get everything downstream instead.

    You get: a live call tree you can walk in either direction, exportable as an image or a report.

    kalman_step mat_mul imu_read mat_inv blas fma lu
  2. 02

    “If I change this struct, what breaks?”

    Hyper-Xref indexes every reference in both directions and separates reads from writes. Click the field, get the blast radius — including the module written in Ada that touches it through a binding.

    You get: reads, writes, declarations, and definitions, each with a file and a line, on code that doesn't even compile.

    State.theta14 refs · 4 files
    • writeflight_control.c:44
    • readautopilot.c:118
    • readtelemetry.c:77
    • declstate.h:12
    • readsim/replay.ada:902
  3. 03

    “How is this system even put together?”

    Dependency and architecture graphs drawn from the source, not from a diagram someone last updated three reorgs ago. Cycles and layer violations are flagged, and the same rules can fail your build.

    You get: module coupling, cycles, and an architecture you can enforce in CI.

    app nav hal driver util cycle
  4. 04

    “Where are we out of compliance?”

    CodeCheck ships with 3,000+ rules — MISRA C 2004 and 2012, MISRA C++ 2008, AUTOSAR C++14 — and you can write your own in Python. The toolchain itself is TÜV SÜD certified, so the evidence counts.

    You get: a per-commit violation report auditors accept, with recorded deviations.

    MISRA C 2012 · apollo-nav
    • 10.3Implicit conversionflight_control.c:44
    • 15.6Missing compound bodyflight_control.c:47
    • 8.7Could be staticflight_control.c:41
    2,994 rules passing · 91% MISRA coverage
  5. 05

    “Which part of this should I be scared of?”

    Metrics at file, class, and function level — cyclomatic complexity, nesting, fan-in and fan-out, comment ratio — so a refactor gets scoped with numbers instead of the loudest opinion in the room.

    You get: a ranked list of the code most likely to bite, and a diff against last release.

    • autopilot/27
    • nav/24
    • legacy/19
    • hal/11
    • util/4
One model, many views

120+ ways to look at the same truth

Every one is generated from the same parsed model of your code, not drawn by hand and never out of date. An AI chat window can describe your architecture in a paragraph; it cannot draw you the call tree, because it never resolved the references a drawing is made of.

main() nav_step imu_read log_write kalman clamp fs_sync
Expand any node to walk the tree down to the leaves — or invert it to see who reaches this function.
autopilot sim_harness telemetry kalman_step mat_mul imu_read mat_inv
Callers on the left, callees on the right. The fastest way to see the blast radius of one function.
app nav hal driver util 1 cycle found
Cycles and boundary violations show up in red — and the same check runs in CI, so the build fails before the review does.
entry mode? kalman path fallback (1998) return
Every path through a function, including the one your test suite has never taken.
Sensor + read() # calibrate() IMU - bias: vec3 + read() + temp() Baro - ref: float + read() + altitude()
Class hierarchies drawn from the source itself — including the inheritance somebody added last week.
nav/cx 24 hal/cx 11 util/cx 4 legacy/cx 19 tests/cx 9 io/cx 6 autopilot/cx 27
Size is lines of code, shade is cyclomatic complexity. The hot corners are where your refactor budget goes.
CodeCheck

The compliance evidence auditors ask for

3,000+ rules ship with every install. Write your own in Python. Run the whole thing in CI and the report lands in your inbox.

TÜV SÜD certification seal TÜV SÜD certified toolchain ISO 26262 · IEC 61508 · EN 50128
91%

MISRA coverage

Checked per commit against every MISRA edition listed below, with a traceable report per release.

MISRA compliance
90%

AUTOSAR coverage

362 AUTOSAR C++14 rules, with deviations recorded where your project has signed off on them.

AUTOSAR compliance

DO-330 qualification kits

Five TQL-5 artifacts for DO-178C programs, with MISRA coverage and DER-ready traceability.

DO-330 qualification kits
The 18 standards that ship with every install MISRA · SEI CERT · MITRE CWE Top 25 · Effective C++ · The Power of Ten …

MISRA

  • MISRA C 2004
  • MISRA C 2012
  • MISRA C 2023
  • MISRA C 2025
  • MISRA C++ 2008
  • MISRA C++ 2023
  • MISRA HIS Subset

Security

  • SEI CERT C
  • SEI CERT C++
  • MITRE CWE Top 25

Safety & metrics

  • Hersteller Initiative Software (HIS) Metrics
  • The Power of Ten

Best practice

  • Bug Hunter
  • Effective C++
  • SciTools’ Recommended Checks

Language & compiler

  • Ada 95
  • Compiler Warnings
  • Default Compiler Warnings

All of it installed by default — 3,000+ rules across the set. Checks you write yourself in Python appear in the same list, alongside these.

Bug Hunter

And the bugs that compile perfectly fine

Dangling pointers, memory leaks, null dereferences, division by zero, unreachable paths — found by path analysis, not pattern matching.

How Bug Hunter works
  • Dangling pointerkalman.c:142
  • Memory leakimu_driver.c:88
  • Null dereferencelog.c:21
  • Division by zeroresolved
Start from the problem

What's the situation you're in?

The same analysis engine, pointed at whichever of these is currently costing you the most.

The people who wrote it retired. The system still flies.

Point Understand at the repository and it builds the map that was never written down: what calls what, which modules depend on which, and where the complexity that everybody avoids actually lives. No build system required — it parses source that hasn't compiled cleanly in a decade.

  • Cross-references through macros, typedefs and function pointers
  • Call and dependency graphs generated, never hand-drawn
  • Dead languages — JOVIAL, Ada, Fortran, 1750A assembly
  • Metrics that rank what to touch last

The audit needs evidence, not a screenshot.

CodeCheck runs MISRA C 2004 and 2012, MISRA C++ 2008 and AUTOSAR C++14 against every commit, records deviations where your project has signed off on them, and exports a report traceable to file and line. The tool itself is TÜV SÜD certified, so it counts toward your qualification rather than adding to it.

  • 91% MISRA rule coverage, 90% AUTOSAR
  • TÜV SÜD certified — ISO 26262, IEC 61508, EN 50128
  • One qualification kit, one vendor
  • Custom rules in Python for your internal standard

You're analyzing code you didn't write and can't run.

Understand doesn't need the build to succeed, or at all. It parses what's there, resolves what it can, and tells you plainly what it couldn't — which is exactly the posture an independent reviewer needs. Then it documents what you verified in a form that survives cross-examination.

  • No compiler required — analyze partial or broken source
  • Bidirectional xref for tracing a disputed routine's origins
  • Revision comparison across git history or two databases
  • Exportable findings — PDF, HTML, CSV, or scripted

The architecture on the wall stopped matching the code years ago.

Define the layers you meant to build, and Understand checks the real dependency graph against them. Cycles, upward calls and boundary violations are flagged — and the same check runs headless in CI, so the build fails before the review does.

  • Cycle detection across modules and files
  • Layer rules enforced as a build step
  • Coupling metrics — fan-in, fan-out, instability
  • Diffs showing what eroded since last release

You're about to buy somebody else's codebase.

Before the deal closes, get the real picture: how the system is actually structured, how much of it is complexity nobody has priced in, and exactly which third-party code is bundled in and under what license.

  • Architecture reconstructed from source in hours
  • Complexity hotspots quantified, not estimated
  • License exposure across bundled dependencies
  • Standards posture measured against MISRA or your own
Pricing

What Understand costs

Licenses start at $100 USD per month, billed annually with a twelve-month minimum. Tell us how many seats you need, which platforms you build on, and where your team sits — we’ll come back with pricing that fits.

  • Usually answered the same business day
  • Order online or by purchase order
  • Offline and secure-lab licensing at the same cost
  • Free for qualifying open source and educational use

Rather talk it through first?

Or call +1 (435) 627-2529 or email [email protected].

Required
Optional
Before you ask

The questions procurement always sends back

If yours isn't here, ask us directly — the answer comes from an engineer, not a form.

Talk to engineering
Does it need our code to compile?

No. Understand parses source directly rather than hooking a build. Partial, broken and uncompilable code still produces a usable model — which is the whole point for IV&V, litigation and inherited vendor code.

Does Understand work offline, including the AI?

Yes, both. The analysis runs on your machine, and so does the AI: it ships with Understand rather than calling a hosted model, so there is no API key to obtain and no inference request to let out through the firewall. A fully air-gapped install is supported, with the AI working the same way it does anywhere else.

Does any source leave our network?

No. Analysis is entirely local, and so is the AI that answers questions about it. There is no cloud processing step for your code.

Can we write our own CodeCheck rules?

Yes. A CodeCheck rule is a Python script written against the same API the built-in rules use, so a check for your own internal coding standard runs, reports and fails the build exactly the way a MISRA rule does.

How does it fit into CI?

The CLI regenerates the database and runs checks headlessly. Most teams fail the build on new violations and publish the report as a build artifact.

What certification does the tool itself hold?

TÜV SÜD certification for ISO 26262, IEC 61508 and EN 50128, with the qualification kit included in the standard license.

What does the trial include?

The complete product — every language, every rule, every graph. It is not a reduced edition.

Get started

See your own codebase in Understand

A full-featured trial that installs in minutes and needs no build system. Or walk through your architecture with an engineer who has seen a few thousand of them.

No credit card required for the free trial. Available on Windows, macOS and Linux.