- Research
22 bugs Claude couldn't find in 5,000 lines of C++
We ran a commercial static analyzer on a real production C++ codebase that Claude had been editing for months. It surfaced 22 bugs that compile cleanly, pass review, and that no LLM caught on its own. Here is what we learned.
HyperAnalyzer Team · - Architecture
MCP is the missing API for static analysis
Every static analyzer ever built was designed for humans running it in CI. The Model Context Protocol changes the contract: now the LLM is the user, and the API surface has to be redesigned around that.
HyperAnalyzer Team · - Strategy
Why a 30-rule analyzer beats a 1,200-check legacy tool
PVS-Studio ships 1,234 diagnostics. Coverity has more. We deliberately ship a fraction of that and we think it is the better product. Here is the math behind the decision.
HyperAnalyzer Team · - Deep dive
Anatomy of HA001: how DllMain deadlocks the loader lock
HA001 is the rule we wrote first, because every LLM-generated DLL we looked at had at least one variant of this bug. Here is what the rule actually checks, and why DllMain is so much more dangerous than its docs admit.
HyperAnalyzer Team ·