Coverity Reviews

Name: Coverity
Brand: Synopsys
Rating: 4 (40 reviews)

3.9 out of 5

40 reviews
88% willing to recommend

344 followers

What is Coverity?

Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts.

Get the Coverity Buyer's Guide and find out what your peers are saying about Coverity, SonarQube, Veracode and more!

Coverity is the #4 ranked solution in AST tools. PeerSpot users give Coverity an average rating of 7.8 out of 10. Coverity is most commonly compared to SonarQube: Coverity vs SonarQube. Coverity is popular among the large enterprise segment, accounting for 77% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a manufacturing company, accounting for 31% of all views.

Helped 801,394 peers since 2012

Featured reviews

Md. Shahriar Hussain

Cyber Security Chartered Engineer at Banglalink

The solution can be easily setup but requires heavy integration due to the multiple types of port and programming languages involved. Comparing the resource requirements of the solution I would say it can be installed effortlessly. I would rate the initial setup an eight out of ten. A professional needs some pre-acquired knowledge to manage Coverity's deployment process, but the local solution partners provide support well enough for trouble-free deployment. The overall deployment process of Coverity took around two and a half hours in our organization. The deployment duration depends upon the operating system and resources including high-end RAM and CPU processors.

Read full review

Arun Dahiphale

Technical Architect at Elastic Care Inc

The scan of the repository has been most effective in identifying critical vulnerabilities. The product provided visibility over security-related issues like hard coding and values getting exposed in a log. It helped us resolve difficult issues. With CI/CD integration, we could scan the incremental commits done by different developers. We were able to report them, and the developers were able to fix them. The product identifies the issues and has an informative dashboard that gives us strains of incremental issues and resolutions. It also keeps track of whether the reported issues were fixed and what the resolution was. Sometimes, we find duplicate issues. Those were very well managed from the dashboard. Our primary requirement was for compliance, and it was good. The reports were significant and looked very professional.

Read full review

Sasmit Patil

Lead Information Security at GEP Worldwide at ReBIT

The use case is basically the code-scanning activity we perform. It helps us identify security vulnerabilities in the development phase. It aids in mitigating security risks in the initial phase of software development, so the potential risks become minimal. Those are the main use cases for this…

Read full review

Coverity mindshare

As of September 2024, the mindshare of Coverity in the Static Application Security Testing (SAST) category stands at 7.9%, up from 7.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Key learnings from peers

Last updated Sep 3, 2024

Valuable Features

"It help us identify the latest security vulnerabilities."
"What I find most effective about Coverity is its low rate of false positives. I've seen other platforms with many false positives, but with Coverity, most vulnerabilities it identifies are genuine. This allows me to focus on real issues."
"Considering the analysis part and the benchmarking process involving the product that my company carried out, the solution is good for finding bugs and violations"

Room for Improvement

"Zero-day vulnerability identification can be an add-on feature that Coverity can provide."
"The solution needs to improve its false positives."
"Coverity is not a user-friendly product."

Pricing

"The solution's pricing is comparable to other products."
"Depending on the usage types, one has to opt for different types of licenses from Coverity, especially to be able to use areas like report viewing or report generation."
"I would rate Coverity's pricing as a nine out of ten. It's already very expensive, and it's a problem for us to get more licenses due to the price. The pricing model has some good aspects - for example, a personal license gives access to all languages without code limitations, which is better than some competitors. However, it's still a lot of money for us to spend."

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Coverity Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Manufacturing Company

31%

Computer Software Company

15%

Financial Services Firm

Government

Healthcare Company

Energy/Utilities Company

University

Retailer

Educational Organization

Aerospace/Defense Firm

Wholesaler/Distributor

Media Company

Construction Company

Engineering Company

Transportation Company

Non Profit

Real Estate/Law Firm

Comms Service Provider

Insurance Company

Outsourcing Company

Legal Firm

Hospitality Company

Recreational Facilities/Services Company

Consumer Goods Company

Logistics Company

Pharma/Biotech Company

Performing Arts

Compare Coverity with alternative products

Learn more about Coverity

Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports more than 20 languages and 200 frameworks and templates.

Coverity was previously known as Synopsys Static Analysis.