Coverity vs HCL AppScan comparison

Black Duck and HCLSoftware are both solutions in the Static Application Security Testing (SAST) category. Black Duck is ranked #4 with an average rating of 8.0, while HCLSoftware is ranked #12 with an average rating of 7.9. Black Duck holds a 7.8% mindshare in SAST, compared to HCLSoftware ’s 2.8% mindshare. Additionally, 88% of Black Duck users are willing to recommend the solution, compared to 83% of HCLSoftware users who would recommend it.

Coverity

Read 42 Coverity reviews

12,653 Views
8,729 Comparison Views

88% willing to recommend

HCL AppScan

Read 43 HCL AppScan reviews

4,189 Views
3,208 Comparison Views

83% willing to recommend

Coverity

HCL AppScan

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

HCL AppScan and Coverity compete in the application security space. User feedback suggests HCL AppScan often holds an advantage in comprehensive reporting and flexibility, while Coverity is preferred for its deep static analysis capabilities. HCL AppScan may offer better pricing options and quicker setup, but Coverity's robust feature set validates its higher cost.

Features: HCL AppScan is noted for customizable scanning capabilities, making it versatile. It provides flexibility for various environments and comprehensive reporting. Coverity is recognized for detailed code analysis, seamless workflow integration, and a focus on accuracy, benefiting those prioritizing code quality.

Room for Improvement: Users recommend HCL AppScan improve scan speed, real-time protection, and performance enhancements. Coverity could enhance reporting features, configuration controls, and accessibility.

Ease of Deployment and Customer Service: HCL AppScan is praised for straightforward deployment and helpful customer support. Coverity, while efficient after deployment, requires a longer initial setup. Both offer adequate customer service, though Coverity customers prefer a quicker initial rollout.

Pricing and ROI: HCL AppScan provides attractive setup costs and a quicker ROI with competitive pricing. Coverity, despite its higher initial cost, offers significant long-term value through accuracy and reduced maintenance demands, appealing to organizations focused on precision.

To learn more, read our detailed Coverity vs. HCL AppScan Report (Updated: January 2025).

Buyer's Guide

Coverity vs. HCL AppScan

January 2025

Download the complete report

Helped 832,138 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Coverity

Ranking in Static Application Security Testing (SAST)

4th

Average Rating

7.8

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

No ranking in other categories

HCL AppScan

Ranking in Static Application Security Testing (SAST)

12th

Average Rating

7.8

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Application Security Tools (15th), Dynamic Application Security Testing (DAST) (1st)

Mindshare comparison

As of February 2025, in the Static Application Security Testing (SAST) category, the mindshare of Coverity is 7.8%, up from 7.1% compared to the previous year. The mindshare of HCL AppScan is 2.8%, up from 2.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Featured Reviews

Md. Shahriar Hussain

Information Security Analyst at Banglalink

Offers impressive reporting features with user-friendliness and high scalability

The solution can be easily setup but requires heavy integration due to the multiple types of port and programming languages involved. Comparing the resource requirements of the solution I would say it can be installed effortlessly. I would rate the initial setup an eight out of ten. A professional needs some pre-acquired knowledge to manage Coverity's deployment process, but the local solution partners provide support well enough for trouble-free deployment. The overall deployment process of Coverity took around two and a half hours in our organization. The deployment duration depends upon the operating system and resources including high-end RAM and CPU processors.

Read full review

Rishi Anupam

Senior Manager at Airtel

A stable and scalable scanning solution with good reporting feature

The solution is used for the vulnerabilities scan on the network side The reporting part is the most valuable feature. The penetration testing feature should be included. I have been using the solution for four years. It is a stable solution. I rate it seven out of ten. It is a scalable…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution has improved our code quality and security very well."

"Coverity is scalable."

"I encountered a bug with Coverity, and I opened a ticket. Support provided me with a workaround. So it's working at the moment, or at least it seems to be."

"Coverity is easy to use and easy to integrate with CI."

"It is a scalable solution."

"We were very comfortable with the initial setup."

"The features I find most valuable is that our entire company can publish the analysis results into our central space."

"Coverity is quite stable and we haven’t had any issues or any downtime."

More Coverity pros

"This solution saves us time due to the low number of false positives detected."

"The most valuable feature of HCL AppScan is scanning QR codes."

"Usually when we deploy the application, there is a process for ethical hacking. The main benefit is that, the ethical hacking is almost clean, every time. So it's less cost, less effort, less time to production."

"The HCL AppScan turnaround time for Burp Suite or any new feature request is pretty good, and that is why we are sticking with the HCL."

"Compared to other tools only AppScan supports special language."

"It has certainly helped us find vulnerabilities in our software, so this is priceless in the end."

"AppScan is stable."

"IBM AppScan has made our work easy, as we can do four to five scans of websites at a time, which saves time when it comes to vulnerability."

More HCL AppScan pros

Cons

"There should be additional IDE support."

"We're currently facing a primary challenge with automation using Coverity. Each developer has a license and can perform manual checks, and we also have a nightly build that analyzes the entire software. The main issue is that the tool can't look behind submodules in our code base, so it doesn't see changes stored there."

"The product lacks sufficient customization options."

"The product should include more customization options. The analytics is not as deep as compared to SonarQube."

"Coverity could improve the ease of use. Sometimes things become difficult and you need to follow the guides from the website but the guides could be better."

"Coverity is far from perfection, and I'm not 100 percent sure it's helping me find what I need to find in my role. We need exactly what we are looking for, i.e. security errors and vulnerabilities. It doesn't seem to be reporting while we are changing our code."

"The reporting tool integration process is sometimes slow."

"The level of vulnerability that this solution covers could be improved compared to other open source tools."

More Coverity cons

"AppScan is too complicated and should be made more user-friendly."

"They should have a better UI for dashboards."

"IBM Security AppScan Source is rather hard to use."

"The tool should improve its output. Scanning is not a challenge anymore since there are many such tools available in the market. The product needs to focus on how its output is being used by end users. It should be also more user-friendly. One of the major challenges is in the tool's integration with applications that need to be scanned. Sometimes, the scanning is not proper."

"IBM Security AppScan needs to add performance optimization for quickly scanning the target web applications."

"We would like to see a check in the specific vulnerabilities in mobile applications or rooted devices, such as jailbreaking devices."

"We have experienced challenges when trying to integrate this solution with other products. When you compare it with the other SecOps products, the quality of the output is too low. It is not a new-age product. It is very outdated."

"The penetration testing feature should be included."

More HCL AppScan cons

Pricing and Cost Advice

"The tool's price is somewhere in the middle. It's neither cheap nor expensive. I would rate the pricing a five out of ten."

"The pricing is very reasonable compared to other platforms. It is based on a three year license."

"Offers varying prices for different companies"

"This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced. Licensing is done on an annual basis."

"Coverity is very expensive."

"The solution's pricing is comparable to other products."

"I rate Coverity's price a ten on a scale of one to ten, where one is cheap and ten is expensive."

"It is expensive."

More Coverity pricing and cost advice

"The solution is cheap."

"Pricing was the main reason that we went ahead with this solution as they were the lowest in the market."

"I would rate the product's pricing a nine out of ten. The product's pricing is expensive compared to the features that they offer."

"The product is moderately priced, though it's an investment due to extensive code analysis needs."

"The solution is moderately priced."

"The price of HCL AppScan is okay, in my opinion. You just buy HCL AppScan and don't pay anything anymore, meaning it is just a one-time purchase."

"With the features, that they offer, and the support, they offer, AppScan pricing is on a higher level."

"The price is very expensive."

More HCL AppScan pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

832,138 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

32%

Computer Software Company

15%

Financial Services Firm

Government

Computer Software Company

18%

Financial Services Firm

14%

Government

11%

Manufacturing Company

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

How would you decide between Coverity and Sonarqube?

We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...

See all answers

What do you like most about Coverity?

The solution has improved our code quality and security very well.

See all answers

What is your experience regarding pricing and costs for Coverity?

I do not know about the pricing.

See all answers

What do you like most about HCL AppScan?

The most valuable feature of HCL AppScan is its integration with the SDLC, particularly during the coding phase.

See all answers

What needs improvement with HCL AppScan?

AppScan needs to improve its handling of false positives. It also requires enhancements in customer support, similar to what Veracode provides. Regularly scheduling calls with clients to discuss fe...

See all answers

What is your primary use case for HCL AppScan?

The primary use case for AppScan is for security purposes. I compare AppScan with other tools such as Veracode. We use AppScan for vulnerability detection and auto-remediation of vulnerabilities wi...

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs Coverity

Compared 52% of the time

Klocwork vs Coverity

Compared 7% of the time

Fortify on Demand vs Coverity

Compared 6% of the time

Checkmarx One vs Coverity

Compared 5% of the time

Veracode vs Coverity

Compared 5% of the time

More Coverity Competitors

Acunetix vs HCL AppScan

Compared 15% of the time

SonarQube Server (formerly SonarQube) vs HCL AppScan

Compared 12% of the time

Veracode vs HCL AppScan

Compared 11% of the time

Fortify on Demand vs HCL AppScan

Compared 8% of the time

OWASP Zap vs HCL AppScan

Compared 8% of the time

More HCL AppScan Competitors

Product Reports

Buyer's Guide

Coverity

February 2025

Download Coverity product report

Buyer's Guide

HCL AppScan

January 2025

Download HCL AppScan product report

Also Known As

Synopsys Static Analysis

IBM Security AppScan, Rational AppScan, AppScan

Overview

Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts.

Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports more than 20 languages and 200 frameworks and templates.

Black Duck

IBM Security AppScan enhances web application security and mobile application security, improves application security program management and strengthens regulatory compliance. By scanning your web and mobile applications prior to deployment, AppScan enables you to identify security vulnerabilities and generate reports and fix recommendations.

HCLSoftware

Sample Customers

SAP, Mega International, Thales Alenia Space

Essex Technology Group Inc., Cisco, West Virginia University, APIS IT

Buyer's Guide

Coverity vs. HCL AppScan

January 2025

Free Report: Coverity vs. HCL AppScan

Find out what your peers are saying about Coverity vs. HCL AppScan and other solutions. Updated: January 2025.

DOWNLOAD NOW

832,138 professionals have used our research since 2012.

See our Coverity vs. HCL AppScan report.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.