CAST Highlight vs Coverity comparison

The compared CAST and Black Duck solutions aren't in the same category. CAST is ranked #15 in SCA , with an average rating of 8.0, and holds a 1.0% mindshare in the category. Black Duck is ranked #4 in SAST , with an average rating of 8.0, and holds a 8.5% mindshare. Additionally, 100% of CAST users are willing to recommend the solution, compared to 88% of Black Duck users who would recommend it.

CAST Highlight

Read 6 CAST Highlight reviews

471 Views
329 Comparison Views

100% willing to recommend

Coverity

Read 42 Coverity reviews

13,639 Views
9,320 Comparison Views

88% willing to recommend

CAST Highlight

Coverity

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CAST Highlight and Coverity based on real PeerSpot user reviews.

Find out in this report how the two Software Composition Analysis (SCA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed CAST Highlight vs. Coverity Report (Updated: September 2022).

Buyer's Guide

CAST Highlight vs. Coverity

September 2022

Download the complete report

Helped 824,067 peers since 2012

Categories and Ranking

CAST Highlight

Average Rating

8.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Software Composition Analysis (SCA) (15th)

Coverity

Average Rating

7.8

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (4th)

Mindshare comparison

CAST Highlight and Coverity aren’t in the same category and serve different purposes. CAST Highlight is designed for Software Composition Analysis (SCA) and holds a mindshare of 1.0%, up 0.9% compared to last year.
Coverity, on the other hand, focuses on Static Application Security Testing (SAST), holds 8.5% mindshare, up 7.2% since last year.

Software Composition Analysis (SCA)

Static Application Security Testing (SAST)

Featured Reviews

Chris Van Poele

Owner at a comms service provider with 501-1,000 employees

Offers efficient portfolio management through enhanced application insights

One of the advantages of using CAST Highlight is that it provides a clear overview of the entire portfolio. It allows me to see the overall quality of my environment and determine where improvements are needed. It also aids in the early detection of trends and can be useful in managing applications within the organization.

Read full review

Md. Shahriar Hussain

Cyber Security Chartered Engineer at Banglalink

Offers impressive reporting features with user-friendliness and high scalability

The solution can be easily setup but requires heavy integration due to the multiple types of port and programming languages involved. Comparing the resource requirements of the solution I would say it can be installed effortlessly. I would rate the initial setup an eight out of ten. A professional needs some pre-acquired knowledge to manage Coverity's deployment process, but the local solution partners provide support well enough for trouble-free deployment. The overall deployment process of Coverity took around two and a half hours in our organization. The deployment duration depends upon the operating system and resources including high-end RAM and CPU processors.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"CAST Highlight provides a clear overview of the role portfolio and allows users to assess the overall quality of the environment. Users can see where improvements are needed and follow up on trends of the application."

"CAST Highlight is easy to use and has a good dashboard."

"The most valuable features of the CAST Highlight are the interface and there are three notations that are very simple to understand and communicate with."

"The way it tells you which codebase is more ready for the cloud and which codebase is less ready is very valuable. It works seamlessly with most languages."

"The most valuable features of CAST Highlight are automation and speed."

"It offers good performance."

"It help us identify the latest security vulnerabilities."

"The most valuable feature of Coverity is its software security feature called the Checker. If you share some vulnerability or weakness then the software can find any potential security bug or defect. The code integration tool enables some secure coding standards and implements some Checkers for Live Duo. So we can enable secure coding and Azure in this tool. So in our software, we can make sure our software combines some industry supervised data."

"The solution has improved our code quality and security very well."

"The interface of Coverity is quite good, and it is also easy to use."

"The solution effectively identifies bugs in code."

"Provides software security, and helps to find potential security bugs or defects."

"It has the lowest false positives."

"The most valuable feature is the integration with Jenkins."

More Coverity pros

Cons

"CAST Highlight could improve to allow us to comment and do a deep analysis by ourselves."

"The ease of configuration and customization could be improved in CAST Highlight."

"There's a bit of a learning curve at the outset."

"Its price should be better. It is a pretty costly tool. They have two products: CAST Highlight and CAST AIP. I would expect CAST Highlight to have the Help dashboard and the Engineering dashboard. These dashboards are currently a part of CAST AIP, and if these are made available in CAST Highlight, customers won't have to use two different products all the time."

"The reports that describe the issues of concern are rather abstract and the issues should be more clearly described to the user."

"There could be potential improvements or additional features added to CAST Highlight to make it better."

"Sometimes it's a bit hard to figure out how to use the product’s UI."

"They could improve the usability. For example, how you set things up, even though it's straightforward, it could be still be easier."

"The product should include more customization options. The analytics is not as deep as compared to SonarQube."

"There should be additional IDE support."

"The solution is a bit complex to use in comparison to other products that have many plugins."

"Its price can be improved. Price is always an issue with Synopsys."

"We use GitHub and Gitflow, and Coverity does not fit with Gitflow. I have to create a screen for our branches, and it's a pain for developers. It has been difficult to integrate Coverity with our system."

"The solution could use more rules."

More Coverity cons

Pricing and Cost Advice

"Basic support is included with the standard licensing feed but it can be upgraded for an additional cost."

"CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive. The high price is part of the problem with the CAST solutions."

"CAST Highlight is an expensive solution."

"It is a pretty costly tool. A lot of customers are resistant to using it."

"The pricing is on the expensive side, and we are paying for a couple of items."

"I would rate the tool's pricing a one out of ten."

"I rate Coverity's price a ten on a scale of one to ten, where one is cheap and ten is expensive."

"I would rate the pricing a six out of ten, where one is low, and ten is high price."

"I would rate Coverity's pricing as a nine out of ten. It's already very expensive, and it's a problem for us to get more licenses due to the price. The pricing model has some good aspects - for example, a personal license gives access to all languages without code limitations, which is better than some competitors. However, it's still a lot of money for us to spend."

"The licensing fees are based on the number of lines of code."

"Coverity is quite expensive."

"Offers varying prices for different companies"

More Coverity pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.

See recommendations

824,067 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

18%

Manufacturing Company

Insurance Company

Manufacturing Company

32%

Computer Software Company

15%

Financial Services Firm

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about CAST Highlight?

The most valuable features of CAST Highlight are automation and speed.

See all answers

What is your experience regarding pricing and costs for CAST Highlight?

The pricing of CAST Highlight was not considered expensive or cheap, and no specific comment was made about the setup cost.

See all answers

What needs improvement with CAST Highlight?

There could be potential improvements or additional features added to CAST Highlight to make it better.

See all answers

How would you decide between Coverity and Sonarqube?

We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...

See all answers

What do you like most about Coverity?

The solution has improved our code quality and security very well.

See all answers

What is your experience regarding pricing and costs for Coverity?

I do not know about the pricing.

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs CAST Highlight

Compared 70% of the time

Black Duck vs CAST Highlight

Compared 6% of the time

Veracode vs CAST Highlight

Compared 5% of the time

GitLab vs CAST Highlight

Compared 5% of the time

Checkmarx One vs CAST Highlight

Compared 4% of the time

More CAST Highlight Competitors

SonarQube Server (formerly SonarQube) vs Coverity

Compared 53% of the time

Klocwork vs Coverity

Compared 7% of the time

Fortify on Demand vs Coverity

Compared 6% of the time

Checkmarx One vs Coverity

Compared 5% of the time

Veracode vs Coverity

Compared 5% of the time

More Coverity Competitors

Product Reports

Buyer's Guide

CAST Highlight

December 2024

Download CAST Highlight product report

Buyer's Guide

Coverity

December 2024

Download Coverity product report

Also Known As

No data available

Synopsys Static Analysis

Learn More

CAST

Black Duck

Overview

CAST Highlight is a SaaS software intelligence product for performing rapid application portfolio analysis. It automatically analyzes source code of hundreds of applications in a week for Cloud Readiness, Software Composition Analysis (Open Source risks), Resiliency, and Technical Debt. Objective software insights from automated source code analysis combined with built-in qualitative surveys for business context enable more informed decision-making about application portfolios.

CAST is the software intelligence category leader. CAST technology can see inside custom applications with MRI-like precision, automatically generating intelligence about their inner workings - composition, architecture, transaction flows, cloud readiness, structural flaws, legal and security risks. It’s becoming essential for faster modernization for cloud, raising the speed and efficiency of Software Engineering, better open source risk control, and accurate technical due diligence. CAST operates globally with offices in North America, Europe, India, China. Visit www.castsoftware.com.

Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts.

Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports more than 20 languages and 200 frameworks and templates.

Sample Customers

Wells Fargo, Bank of NY Mellon, Northern Trust, Microsoft, Amazon, IBM, BMW, AT&T, US Army, US Air Force, US Navy, John Hancock, Marsh & McLennan, Ernst & Young, PwC, Volkswagen, Boston Consulting Group, London Stock Exchange, Telefonica, Saur France, Total Energies France, SNCF

SAP, Mega International, Thales Alenia Space

Buyer's Guide

CAST Highlight vs. Coverity

September 2022

Free Report: CAST Highlight vs. Coverity

Find out what your peers are saying about CAST Highlight vs. Coverity and other solutions. Updated: September 2022.

DOWNLOAD NOW

824,067 professionals have used our research since 2012.

See our CAST Highlight vs. Coverity report.

We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.