About Ocular and the CPG

Ocular is a set of command line tools that provide a static analysis framework for application security. It runs on Linux, macOS, and Windows operating systems and can be used to generate Code Property Graphs (CPG) for applications written in:

  • C

  • C++

  • C#

  • Go

  • Java

  • LLVM

  • Scala

Ocular uses the Ocular Query Language (OQL), which is a concise and expressive language you can use to write queries. You can then use these queries to explore your code base and find vulnerabilities that are present.

To get started, please download a free, 14-day trial of Ocular.

The Code Property Graph (CPG)

The Code Property Graph (CPG) is a multi-layered representation of your application's code and is heavily leveraged by Ocular.