CAST Highlight vs Coverity comparison

The compared CAST and Black Duck solutions aren't in the same category. CAST is ranked #15 in SCA , with an average rating of 8.0, and holds a 1.0% mindshare in the category. Black Duck is ranked #4 in SAST , with an average rating of 8.0, and holds a 8.3% mindshare. Additionally, 100% of CAST users are willing to recommend the solution, compared to 88% of Black Duck users who would recommend it.

CAST Highlight

Read 6 CAST Highlight reviews

448 Views
323 Comparison Views

100% willing to recommend

Coverity

Read 42 Coverity reviews

13,201 Views
9,033 Comparison Views

88% willing to recommend

CAST Highlight

Coverity

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CAST Highlight and Coverity based on real PeerSpot user reviews.

Find out in this report how the two Software Composition Analysis (SCA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed CAST Highlight vs. Coverity Report (Updated: September 2022).

Buyer's Guide

CAST Highlight vs. Coverity

September 2022

Download the complete report

Helped 831,265 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CAST Highlight

Average Rating

8.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Software Composition Analysis (SCA) (15th)

Coverity

Average Rating

7.8

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (4th)

Mindshare comparison

CAST Highlight and Coverity aren’t in the same category and serve different purposes. CAST Highlight is designed for Software Composition Analysis (SCA) and holds a mindshare of 1.0%, up 0.9% compared to last year.
Coverity, on the other hand, focuses on Static Application Security Testing (SAST), holds 8.3% mindshare, up 7.2% since last year.

Software Composition Analysis (SCA)

Static Application Security Testing (SAST)

Featured Reviews

Chris Van Poele

Owner at a comms service provider with 501-1,000 employees

Offers efficient portfolio management through enhanced application insights

One of the advantages of using CAST Highlight is that it provides a clear overview of the entire portfolio. It allows me to see the overall quality of my environment and determine where improvements are needed. It also aids in the early detection of trends and can be useful in managing applications within the organization.

Read full review

Md. Shahriar Hussain

Information Security Analyst at Banglalink

Offers impressive reporting features with user-friendliness and high scalability

The solution can be easily setup but requires heavy integration due to the multiple types of port and programming languages involved. Comparing the resource requirements of the solution I would say it can be installed effortlessly. I would rate the initial setup an eight out of ten. A professional needs some pre-acquired knowledge to manage Coverity's deployment process, but the local solution partners provide support well enough for trouble-free deployment. The overall deployment process of Coverity took around two and a half hours in our organization. The deployment duration depends upon the operating system and resources including high-end RAM and CPU processors.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features of the CAST Highlight are the interface and there are three notations that are very simple to understand and communicate with."

"CAST Highlight provides a clear overview of the role portfolio and allows users to assess the overall quality of the environment. Users can see where improvements are needed and follow up on trends of the application."

"CAST Highlight is easy to use and has a good dashboard."

"The most valuable features of CAST Highlight are automation and speed."

"The way it tells you which codebase is more ready for the cloud and which codebase is less ready is very valuable. It works seamlessly with most languages."

"It offers good performance."

"The product is easy to use."

"Coverity is scalable."

"The most valuable feature is that there were not a whole lot of false positives, at least on the codebases that I looked at."

"In my opinion, the most effective Coverity feature for identifying critical vulnerabilities is the extra checks, which offers deep analysis."

"Coverity gives advisory and deviation features, which are some of the parts I liked."

"The most valuable feature of Coverity is that it shows examples of what is actually wrong with the code."

"The app analysis is the most valuable feature as I know other solutions don't have that."

"Coverity is easy to use and easy to integrate with CI."

More Coverity pros

Cons

"There could be potential improvements or additional features added to CAST Highlight to make it better."

"Its price should be better. It is a pretty costly tool. They have two products: CAST Highlight and CAST AIP. I would expect CAST Highlight to have the Help dashboard and the Engineering dashboard. These dashboards are currently a part of CAST AIP, and if these are made available in CAST Highlight, customers won't have to use two different products all the time."

"There's a bit of a learning curve at the outset."

"The reports that describe the issues of concern are rather abstract and the issues should be more clearly described to the user."

"The ease of configuration and customization could be improved in CAST Highlight."

"CAST Highlight could improve to allow us to comment and do a deep analysis by ourselves."

"Ideally, it would have a user-based license that does not have a restriction in the number of lines of code."

"They could improve the usability. For example, how you set things up, even though it's straightforward, it could be still be easier."

"We're currently facing a primary challenge with automation using Coverity. Each developer has a license and can perform manual checks, and we also have a nightly build that analyzes the entire software. The main issue is that the tool can't look behind submodules in our code base, so it doesn't see changes stored there."

"Some features are not performing well, like duplicate detection and switch case situations."

"We actually specified several checkers, but we found some checkers had a higher false positive rate. I think this is a problem. Because we have to waste some time is really the issue because the issue is not an issue. I mean, the tool pauses or an issue, but the same issue is the filter now.Some check checkers cannot find some issues, but sometimes they find issues that are not relevant, right, that are not really issues. Some customisation mechanism can be added in the next release so that we can define our Checker. The Modelling feature provided by Coverity helps in finding more information for potential issues but it is not mature enough, it should be mature. The fast testing feature for security testing campaign can be added as well. So if you correctly integrate it with the training team, maybe you can help us to find more potential issues."

"Right now, the Coverity executable is around 1.2GB to download. If they can reduce it to approximately 600 or 700MB, that would be great. If they decrease the executable, it will be much easier to work in an environment like Docker."

"We'd like it to be faster."

"I had tried integrating the tool with Azure DevOps, but the report I got stated that my team faced many challenges."

More Coverity cons

Pricing and Cost Advice

"CAST Highlight is an expensive solution."

"It is a pretty costly tool. A lot of customers are resistant to using it."

"CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive. The high price is part of the problem with the CAST solutions."

"Basic support is included with the standard licensing feed but it can be upgraded for an additional cost."

"I would rate the tool's pricing a one out of ten."

"Coverity’s price is on the higher side. It should be lower."

"Offers varying prices for different companies"

"The tool was fairly priced."

"I would rate Coverity's pricing as a nine out of ten. It's already very expensive, and it's a problem for us to get more licenses due to the price. The pricing model has some good aspects - for example, a personal license gives access to all languages without code limitations, which is better than some competitors. However, it's still a lot of money for us to spend."

"It is expensive."

"The solution's pricing is comparable to other products."

"The pricing is on the expensive side, and we are paying for a couple of items."

More Coverity pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.

See recommendations

831,265 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

22%

Computer Software Company

18%

Insurance Company

Manufacturing Company

32%

Computer Software Company

15%

Financial Services Firm

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about CAST Highlight?

The most valuable features of CAST Highlight are automation and speed.

See all answers

What is your experience regarding pricing and costs for CAST Highlight?

The pricing of CAST Highlight was not considered expensive or cheap, and no specific comment was made about the setup cost.

See all answers

What needs improvement with CAST Highlight?

There could be potential improvements or additional features added to CAST Highlight to make it better.

See all answers

How would you decide between Coverity and Sonarqube?

We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...

See all answers

What do you like most about Coverity?

The solution has improved our code quality and security very well.

See all answers

What is your experience regarding pricing and costs for Coverity?

I do not know about the pricing.

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs CAST Highlight

Compared 67% of the time

Black Duck vs CAST Highlight

Compared 6% of the time

Veracode vs CAST Highlight

Compared 5% of the time

GitLab vs CAST Highlight

Compared 5% of the time

Checkmarx One vs CAST Highlight

Compared 4% of the time

More CAST Highlight Competitors

SonarQube Server (formerly SonarQube) vs Coverity

Compared 53% of the time

Klocwork vs Coverity

Compared 7% of the time

Fortify on Demand vs Coverity

Compared 6% of the time

Veracode vs Coverity

Compared 5% of the time

Checkmarx One vs Coverity

Compared 5% of the time

More Coverity Competitors

Product Reports

Buyer's Guide

CAST Highlight

January 2025

Download CAST Highlight product report

Buyer's Guide

Coverity

January 2025

Download Coverity product report

Also Known As

No data available

Synopsys Static Analysis

Learn More

CAST

Black Duck

Overview

CAST Highlight is a SaaS software intelligence product for performing rapid application portfolio analysis. It automatically analyzes source code of hundreds of applications in a week for Cloud Readiness, Software Composition Analysis (Open Source risks), Resiliency, and Technical Debt. Objective software insights from automated source code analysis combined with built-in qualitative surveys for business context enable more informed decision-making about application portfolios.

CAST is the software intelligence category leader. CAST technology can see inside custom applications with MRI-like precision, automatically generating intelligence about their inner workings - composition, architecture, transaction flows, cloud readiness, structural flaws, legal and security risks. It’s becoming essential for faster modernization for cloud, raising the speed and efficiency of Software Engineering, better open source risk control, and accurate technical due diligence. CAST operates globally with offices in North America, Europe, India, China. Visit www.castsoftware.com.

Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts.

Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports more than 20 languages and 200 frameworks and templates.

Sample Customers

Wells Fargo, Bank of NY Mellon, Northern Trust, Microsoft, Amazon, IBM, BMW, AT&T, US Army, US Air Force, US Navy, John Hancock, Marsh & McLennan, Ernst & Young, PwC, Volkswagen, Boston Consulting Group, London Stock Exchange, Telefonica, Saur France, Total Energies France, SNCF

SAP, Mega International, Thales Alenia Space

Buyer's Guide

CAST Highlight vs. Coverity

September 2022

Free Report: CAST Highlight vs. Coverity

Find out what your peers are saying about CAST Highlight vs. Coverity and other solutions. Updated: September 2022.

DOWNLOAD NOW

831,265 professionals have used our research since 2012.

See our CAST Highlight vs. Coverity report.

We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.