About Coverity
Coverity is a static analysis software from Synopsys designed for application security testing. It combines static application security testing (SAST), dynamic application security testing (DAST), and interactive application security testing (IAST) to provide comprehensive vulnerability detection. Coverity's capabilities include AI-generated code analysis, API security testing, and support across various industries and technologies. This allows organizations to build a reliable application security toolkit that addresses a wide range of security requirements. The software offers insights into security vulnerabilities throughout the development lifecycle, enabling teams to prioritize remediation efforts effectively. Key capabilities: static analysis dynamic scanning interactive analysis AI-powered insights API security testing Best for: development and security teams that need to identify and remediate application vulnerabilities effectively.
Coverity Details
Coverity's In-App Market Place
Does Coverity have an in-app market place?
Yes
How many Mini-Apps in the marketplace?
1
Mini Apps
N/A
Pricing Options
Accepted Payment Currencies
USD ($), EUR (€), GBP (£), JPY (¥), CAD (C$), AUD (A$), CHF (Fr.), CNY (¥), INR (₹), SGD (S$), HKD (HK$), SEK (kr), NZD (NZ$), KRW (₩), RUB (₽), NOK (kr), BRL (R$), ZAR (R), MXN ($)
Pros & Cons
- Efficient Code Optimization: Coverity excels at detecting issues in the code, helping developers make their code more optimized, leading to faster runtime and better performance.
- High Detection Rate: It is known for its accuracy in identifying security vulnerabilities such as buffer overflows and memory leaks. The tool’s static analysis is very reliable for security purposes.
- Strong Integration Capabilities: Coverity integrates seamlessly with Continuous Integration/Continuous Delivery (CI/CD) pipelines, allowing real-time feedback on vulnerabilities during the software development lifecycle.
- Multi-Language Support: Coverity supports a wide range of programming languages, which makes it versatile across different development environments and useful for teams working on diverse platforms.
- Good Customer Support: Many users report that the quality of product support is exceptional, with responsive assistance that saves time and effort during development.
- False Positives: A recurring issue is the number of false positives it generates, which can lead to frustration for developers and wasted time analyzing these incorrect reports.
- Slower Scan Times for Large Codebases: While Coverity is efficient for smaller projects, some users find that it takes too long to scan large volumes of code, which hampers productivity.
- Buggy Plugins: Some users have encountered problems with plugins crashing unexpectedly, which impacts the overall experience of using the tool.
- Complexity in Reporting: The reporting functionality can be slower compared to other tools, and users have noted that improvements in this area are necessary for better analysis and management of results.
- Interface Could Be Improved: Some users believe that the dashboard and user interface are not as intuitive as they could be, suggesting enhancements would make it more user-friendly.
Coverity's Support Options
Contact
+1 650-584-5000Documentation
https://sig-product-docs.synopsys.com/Community Forums
https://www.synopsys.com/community.html