Try our new research platform with insights from 80,000+ expert users

Coverity Static vs GitLab comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coverity Static
Ranking in Static Application Security Testing (SAST)
4th
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
43
Ranking in other categories
No ranking in other categories
GitLab
Ranking in Static Application Security Testing (SAST)
7th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
86
Ranking in other categories
Application Security Tools (11th), Build Automation (1st), Release Automation (2nd), Rapid Application Development Software (11th), Software Composition Analysis (SCA) (5th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (1st)
 

Mindshare comparison

As of September 2025, in the Static Application Security Testing (SAST) category, the mindshare of Coverity Static is 6.3%, down from 7.1% compared to the previous year. The mindshare of GitLab is 2.4%, down from 2.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Market Share Distribution
ProductMarket Share (%)
Coverity6.3%
GitLab2.4%
Other91.3%
Static Application Security Testing (SAST)
 

Featured Reviews

Jaile Sebes - PeerSpot reviewer
Resolving critical software issues demands faster implementation and better integration
We use Coverity primarily to find issues such as software bugs and memory leaks, especially in C++ and C# projects. It helps us identify deadlocks, synchronization issues, and product crashes Coverity has been instrumental in resolving product crashes by detecting various issues like deadlocks.…
Rohit Kesharwani - PeerSpot reviewer
Improved agility and time to market with CI/CD enhancements
The CI/CD pipelines in GitLab are highly valuable. Another important feature is the single source of repository, allowing efficient repository management and source code management. GitLab provides manageability by allowing us to manage source code effectively through separate repositories. Additionally, GitLab enables the creation of individual CI/CD pipelines for each repository, making software more agile. By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution has improved our code quality and security very well."
"It provides reports about a lot of potential defects."
"The most valuable feature of Coverity is its software security feature called the Checker. If you share some vulnerability or weakness then the software can find any potential security bug or defect. The code integration tool enables some secure coding standards and implements some Checkers for Live Duo. So we can enable secure coding and Azure in this tool. So in our software, we can make sure our software combines some industry supervised data."
"The most valuable feature is the integration with Jenkins."
"The ability to scan code gives us details of existing and potential vulnerabilities. What really matters for us is to ensure that we are able to catch vulnerabilities ahead of time."
"The product has deeper scanning capabilities."
"Considering the analysis part and the benchmarking process involving the product that my company carried out, the solution is good for finding bugs and violations"
"Coverity is quite stable and we haven’t had any issues or any downtime."
"The CI/CD pipeline with Helm has significantly improved deployment speed and efficiency."
"The solution has an established roadmap that lays out its plans for upgrades over the next two to three years."
"It streamlines our DevOps processes with automated CI/CD pipelines."
"The merging feature makes it easy later on for the deployment."
"This is a scalable solution. We had around 200 users working with it."
"Everything is easy to configure and easy to work with."
"When a developer checks in code, it is automatically built and deployed, and automated test cases are also run. We have extensive integration with GitLab, which helps us with source code management. We run the static code analysis using SonarQube."
"CI/CD is very good. The version control system is also good. These are the two features that we use."
 

Cons

"The setup takes very long."
"There is an extra step in my organization that involves uploading to servers, which adds overhead."
"The solution needs to improve its false positives."
"Sometimes, vulnerabilities remain unidentified even after setting up the rules."
"Reporting engine needs to be more robust."
"The solution's user interface and quality gate could be improved."
"Coverity takes a lot of time to dereference null pointers."
"We use GitHub and Gitflow, and Coverity does not fit with Gitflow. I have to create a screen for our branches, and it's a pain for developers. It has been difficult to integrate Coverity with our system."
"Even if I say I want some improvement, they will say it is already planned in the first quarter, second quarter, or third quarter. That said, most everything is quite improved already, and they're improving even further still."
"I would like to see better integration with project management tools such as Jira."
"Perhaps the integration could be better."
"GitLab could add a plugin to integrate with Kubernetes stuff."
"The only thing our company is really waiting on in terms of features is the development of metrics."
"GitLab can improve the integration with third-party applications. It could be made easier. Additionally, having API control from my application could be helpful."
"I used Spring Cloud config and to connect that to GitLab was so hard."
"GitLab can improve its user interface to make conflict resolution more user-friendly."
 

Pricing and Cost Advice

"Coverity’s price is on the higher side. It should be lower."
"Offers varying prices for different companies"
"I would rate the tool's pricing a one out of ten."
"The licensing fees are based on the number of lines of code."
"The solution's pricing is comparable to other products."
"The pricing is on the expensive side, and we are paying for a couple of items."
"I would rate the pricing a six out of ten, where one is low, and ten is high price."
"The tool was fairly priced."
"This is an open-source solution."
"The initial setup cost is excellent and you can add the premium features later."
"The solution's pricing is acceptable."
"We are currently using the open-source version."
"GitLab's pricing is good compared to others on the market."
"The solution's standard license is paid annually. They have changed the pricing model and it used to be better. There is a free version available."
"There are different licensing options available, including a free limited-user license."
"GitLab is comparatively expensive, but it provides value because it's feature-rich."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
867,497 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
32%
Computer Software Company
14%
Financial Services Firm
6%
Government
4%
Financial Services Firm
14%
Computer Software Company
13%
Government
11%
Manufacturing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise6
Large Enterprise31
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise9
Large Enterprise42
 

Questions from the Community

How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What do you like most about Coverity?
The solution has improved our code quality and security very well.
What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
What is your experience regarding pricing and costs for GitLab?
The pricing and cost are on par with other tools and are neither too expensive nor cheap.
What needs improvement with GitLab?
Regarding improvements, making task management is something that GitLab can potentially make easier, similar to what DevOps or Jira does.
 

Also Known As

Synopsys Static Analysis
Fuzzit
 

Overview

 

Sample Customers

SAP, Mega International, Thales Alenia Space
1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Find out what your peers are saying about Coverity Static vs. GitLab and other solutions. Updated: September 2025.
867,497 professionals have used our research since 2012.