Static Application Security Testing (SAST) Software

Coverity

RATING:

3.60

About Coverity

Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts. Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Int...

Coverity Pricing

Contact the Synopsys Software Integrity Group (SIG) Sales team at https://www.synopsys.com/software-integrity/contact-sales.html for more detailed pricing information.

Free trial:

Not Available

Free version:

Not Available

Slide 1 of 2

Coverity Reviews

Overall Rating

3.60

Ratings Breakdown

Secondary Ratings

Ease-of-use

3.5

Customer Support

3.5

Value for money

Functionality

Most Helpful Reviews for Coverity

5 Reviews

Write a Review

Anonymous

1,001-5,000 employees

Used daily for less than 12 months

Review Source: Capterra

OVERALL RATING:

EASE OF USE

VALUE FOR MONEY

CUSTOMER SUPPORT

FUNCTIONALITY

Reviewed September 2022

Optimize your code with great tool

Overall experience is very awesome. It is helping our team to manage the source code along with the desired quality of code.

PROS

1. It does more than just verifying and inspecting the source code. 2. Easily detects an issue in source and provides a way to make your code optimized in terms of logic and line of code. 3. It has very promising feature which provides a faster way to debug and analyze the code. 4. The tool is pretty good and it is easy to setup with proper guidelines.

CONS

1. Some plugins are getting crashed suddenly which needs to be taken care. 2. Need some more marketing efforts as most of the developers are not known about this tool. 3. Some enhancements in UI will improve user experience. 4. It becomes very slow while dealing with large projects.

Reason for choosing Coverity

better code analysis as compared to other tools. more features as compared to other tools present in market,

Sidd

Information Technology and Services, 1,001-5,000 employees

Used daily for more than 2 years

Review Source: Capterra

OVERALL RATING:

EASE OF USE

VALUE FOR MONEY

CUSTOMER SUPPORT

FUNCTIONALITY

Reviewed February 2022

Synopsys Coverity Feedback

We were able to rememdiate quite a handful of security issues in the application.

PROS

We used Coverity as a SAST for our .NET, JAVA and JS. Coverity does have a higher detection rate hence we relied heavily on this tool for identifying the vulnerabilities. We had also integrated this Coverity to our CI/CD Pipeline, this helped us easily manage the deployment as well. It provides a mechanism to audit the findings and mark false positives in an effecient way.

CONS

Time it takes to scan huge code lines is significantly slower when compared to other tools. Coverity does have a very high number of false positives which at a points gets on the nerves of developers as well as security engineers. There were few vulnerabilities which were not identified by the tool.

Anonymous

10,000+ employees

Used weekly for less than 6 months

Review Source: Capterra

OVERALL RATING:

EASE OF USE

VALUE FOR MONEY

FUNCTIONALITY

Reviewed January 2019

Speed up code review by capturing bugs at an early stage.

PROS

Helps automating code review and improve code quality with no effort. A very responsive user interface, easy to setup and customize, with lots of features and options making it very flexible and adaptable to your needs. I appreciated the fine detection of bugs which have been undetected by competitors' tool.

CONS

Documentation and customer support could be improved.

Vendor Response

We¿re so glad you were able to set up Coverity quickly and get meaningful reports. We have been working hard on making changes to our customer support team to provide better service, including adding a new senior support team to provide more technical support when needed. We¿d love to have a conversation to see if these changes are helping and to gather your ideas on how we can continue to improve your customer experience. You can contact Andrew John, our Senior Director of Global Customer Support directly at andrewj@synopsys.com. We hope to hear from you!

Replied February 2019

Umesh

Used free trial

Review Source: Capterra

OVERALL RATING:

EASE OF USE

VALUE FOR MONEY

CUSTOMER SUPPORT

FUNCTIONALITY

Reviewed August 2017

Very good tool for detecting issues through static code analysis especially embedded development

Static code analysis for identifying issues

PROS

Very good for embedded development and very effective in detecting hard-to-find bugs. Very low false positive rate. It supports wide variety of platforms and with number of different compilers.

CONS

Analysis Result dashboard can be more user friendly. Easy integration with bug tracking tool can add value.

Shitalkumar

Used monthly for less than 6 months

Review Source: Capterra

OVERALL RATING:

EASE OF USE

VALUE FOR MONEY

CUSTOMER SUPPORT

FUNCTIONALITY

Reviewed August 2017

Good tool for static analysis

PROS

Ease of use, Effective in embedded development, supports cross platform development and compilers. Useful for finding the corner cases and minute bugs

CONS

interface and screens can be made simpler and more user interactive in few cases. possibility of customized functions needed