CAST Highlight vs Coverity comparison

The compared CAST and Black Duck solutions aren't in the same category. CAST is ranked #9 in SCA , with an average rating of 8.2, and holds a 1.0% mindshare in the category. Black Duck is ranked #4 in SAST , with an average rating of 7.9, and holds a 8.4% mindshare. Additionally, 100% of CAST users are willing to recommend the solution, compared to 88% of Black Duck users who would recommend it.

CAST Highlight

Read 6 CAST Highlight reviews

476 Views
341 Comparison Views

100% willing to recommend

Coverity

Read 41 Coverity reviews

14,372 Views
9,729 Comparison Views

88% willing to recommend

CAST Highlight

Coverity

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CAST Highlight and Coverity based on real PeerSpot user reviews.

Find out in this report how the two Software Composition Analysis (SCA) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed CAST Highlight vs. Coverity Report (Updated: September 2022).

Buyer's Guide

CAST Highlight vs. Coverity

September 2022

Download the complete report

Helped 814,649 peers since 2012

Categories and Ranking

CAST Highlight

Average Rating

8.0

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Software Composition Analysis (SCA) (9th)

Coverity

Average Rating

7.8

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (4th)

Mindshare comparison

CAST Highlight and Coverity aren’t in the same category and serve different purposes. CAST Highlight is designed for Software Composition Analysis (SCA) and holds a mindshare of 1.0%, up 0.8% compared to last year.
Coverity, on the other hand, focuses on Static Application Security Testing (SAST), holds 8.4% mindshare, up 7.2% since last year.

Software Composition Analysis (SCA)

Static Application Security Testing (SAST)

Featured Reviews

Chris Van Poele

Owner at a comms service provider with 501-1,000 employees

Jul 30, 2024

Offers efficient portfolio management through enhanced application insights

I have used CAST Highlight in combination with application portfolio management, application lifecycle management, going cloud-ready, and other applications. My main occupation involves software completion analysis and working with various solutions like firewalls and storage One of the…

Read full review

Md. Shahriar Hussain

Cyber Security Chartered Engineer at Banglalink

May 3, 2024

Offers impressive reporting features with user-friendliness and high scalability

The solution can be easily setup but requires heavy integration due to the multiple types of port and programming languages involved. Comparing the resource requirements of the solution I would say it can be installed effortlessly. I would rate the initial setup an eight out of ten. A professional needs some pre-acquired knowledge to manage Coverity's deployment process, but the local solution partners provide support well enough for trouble-free deployment. The overall deployment process of Coverity took around two and a half hours in our organization. The deployment duration depends upon the operating system and resources including high-end RAM and CPU processors.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable features of the CAST Highlight are the interface and there are three notations that are very simple to understand and communicate with."

"It offers good performance."

"CAST Highlight is easy to use and has a good dashboard."

"CAST Highlight provides a clear overview of the role portfolio and allows users to assess the overall quality of the environment. Users can see where improvements are needed and follow up on trends of the application."

"The most valuable features of CAST Highlight are automation and speed."

"The way it tells you which codebase is more ready for the cloud and which codebase is less ready is very valuable. It works seamlessly with most languages."

"We were very comfortable with the initial setup."

"The reporting feature is up to the mark."

"The product has been beneficial in logging functionality, allowing me to categorize vulnerabilities based on severity. This aids in providing updated reports on subsequent scans."

"It provides reports about a lot of potential defects."

"Coverity integrates with issue-tracking systems like Jira and provides email notifications, alerts, and other features."

"The product is easy to use."

"Coverity is easy to set up and has a less lengthy process to find vulnerabilities."

"The security analysis features are the most valuable features of this solution."

More Coverity pros

Cons

"The reports that describe the issues of concern are rather abstract and the issues should be more clearly described to the user."

"The ease of configuration and customization could be improved in CAST Highlight."

"There's a bit of a learning curve at the outset."

"CAST Highlight could improve to allow us to comment and do a deep analysis by ourselves."

"Its price should be better. It is a pretty costly tool. They have two products: CAST Highlight and CAST AIP. I would expect CAST Highlight to have the Help dashboard and the Engineering dashboard. These dashboards are currently a part of CAST AIP, and if these are made available in CAST Highlight, customers won't have to use two different products all the time."

"There could be potential improvements or additional features added to CAST Highlight to make it better."

"Ideally, it would have a user-based license that does not have a restriction in the number of lines of code."

"SCM integration is very poor in Coverity."

"The solution needs to improve its false positives."

"Some features are not performing well, like duplicate detection and switch case situations."

"The setup takes very long."

"They could improve the usability. For example, how you set things up, even though it's straightforward, it could be still be easier."

"Reporting engine needs to be more robust."

"The product could be enhanced by providing video troubleshooting guides, making issue resolution more accessible. Troubleshooting without visual guides can be time-consuming."

More Coverity cons

Pricing and Cost Advice

"CAST Highlight is an expensive solution."

"It is a pretty costly tool. A lot of customers are resistant to using it."

"CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive. The high price is part of the problem with the CAST solutions."

"Basic support is included with the standard licensing feed but it can be upgraded for an additional cost."

"The tool's price is somewhere in the middle. It's neither cheap nor expensive. I would rate the pricing a five out of ten."

"I would rate Coverity's pricing as a nine out of ten. It's already very expensive, and it's a problem for us to get more licenses due to the price. The pricing model has some good aspects - for example, a personal license gives access to all languages without code limitations, which is better than some competitors. However, it's still a lot of money for us to spend."

"The tool was fairly priced."

"Depending on the usage types, one has to opt for different types of licenses from Coverity, especially to be able to use areas like report viewing or report generation."

"The licensing fees are based on the number of lines of code."

"It is expensive."

"The pricing is very reasonable compared to other platforms. It is based on a three year license."

"Coverity is quite expensive."

More Coverity pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.

See recommendations

814,649 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

21%

Computer Software Company

18%

Insurance Company

10%

Manufacturing Company

32%

Computer Software Company

15%

Financial Services Firm

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about CAST Highlight?

The most valuable features of CAST Highlight are automation and speed.

See all answers

What is your experience regarding pricing and costs for CAST Highlight?

CAST Highlight is an expensive solution. On a scale from one to ten, where one is cheap, and ten is expensive, I rate the solution's pricing an eight or nine out of ten.

See all answers

What needs improvement with CAST Highlight?

The ease of configuration and customization could be improved in CAST Highlight.

See all answers

How would you decide between Coverity and Sonarqube?

We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...

See all answers

What do you like most about Coverity?

The solution has improved our code quality and security very well.

See all answers

What is your experience regarding pricing and costs for Coverity?

We do it yearly.

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs CAST Highlight

Compared 69% of the time

Black Duck vs CAST Highlight

Compared 6% of the time

Veracode vs CAST Highlight

Compared 5% of the time

GitLab vs CAST Highlight

Compared 5% of the time

Checkmarx One vs CAST Highlight

Compared 4% of the time

More CAST Highlight Competitors

SonarQube Server (formerly SonarQube) vs Coverity

Compared 54% of the time

Klocwork vs Coverity

Compared 7% of the time

Fortify on Demand vs Coverity

Compared 7% of the time

Checkmarx One vs Coverity

Compared 6% of the time

Veracode vs Coverity

Compared 5% of the time

More Coverity Competitors

Product Reports

Buyer's Guide

CAST Highlight

November 2024

Download CAST Highlight product report

Buyer's Guide

Coverity

November 2024

Download Coverity product report

Also Known As

No data available

Synopsys Static Analysis

Learn More

CAST

Black Duck

Overview

CAST Highlight is a SaaS software intelligence product for performing rapid application portfolio analysis. It automatically analyzes source code of hundreds of applications in a week for Cloud Readiness, Software Composition Analysis (Open Source risks), Resiliency, and Technical Debt. Objective software insights from automated source code analysis combined with built-in qualitative surveys for business context enable more informed decision-making about application portfolios.

CAST is the software intelligence category leader. CAST technology can see inside custom applications with MRI-like precision, automatically generating intelligence about their inner workings - composition, architecture, transaction flows, cloud readiness, structural flaws, legal and security risks. It’s becoming essential for faster modernization for cloud, raising the speed and efficiency of Software Engineering, better open source risk control, and accurate technical due diligence. CAST operates globally with offices in North America, Europe, India, China. Visit www.castsoftware.com.

Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts.

Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports more than 20 languages and 200 frameworks and templates.

Sample Customers

Wells Fargo, Bank of NY Mellon, Northern Trust, Microsoft, Amazon, IBM, BMW, AT&T, US Army, US Air Force, US Navy, John Hancock, Marsh & McLennan, Ernst & Young, PwC, Volkswagen, Boston Consulting Group, London Stock Exchange, Telefonica, Saur France, Total Energies France, SNCF

SAP, Mega International, Thales Alenia Space

Buyer's Guide

CAST Highlight vs. Coverity

September 2022

Free Report: CAST Highlight vs. Coverity

Find out what your peers are saying about CAST Highlight vs. Coverity and other solutions. Updated: September 2022.

DOWNLOAD NOW

814,649 professionals have used our research since 2012.

See our CAST Highlight vs. Coverity report.

We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.