Coverity
Static application security testing tool that detects defects and security vulnerabilities in compiled source code.
by Black DuckOfficial site ↗
- Pricing
- custom
- License
- proprietary
- Open source
- No
Editorial review
Coverity has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.
Sign in to save this tool to a private list.
Facts & attributes
Every value carries its evidence state. “—” means unknown — never a silent default (P-02).
Identity · Taxonomy
- Tags(open-source;cloud-native)
- sast, static-analysis, appsec, compliance, embeddedVerification pending
Platform · Deployment
- Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance)
- self-hosted, SaaSVerification pending
Pricing · Licensing
- License model(proprietary;open-source;source-available;dual-license)
- proprietaryVerified
- Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom)
- customVerified
Features · Product · Fit
- Core capabilities(authoring;automation;analytics)
- Static application security testing (SAST), Code quality defect detection across 22 programming languages, AI-assisted triage and remediation, Policy-driven compliance enforcement, Safety-critical qualification with Coverity Qualification KitVerification pending
Api · Integrations · Ecosystem
- API available(true/false)
- trueVerification pending
Security · Privacy · Compliance
- Regulatory compliance(HIPAA;PCI DSS;FedRAMP;GDPR support)
- OWASP Top 10, OWASP Mobile Top 10, SANS/CWE Top 25, PCI DSS, DISA STIG, EU CRA, MISRA C/C++, AUTOSAR C++ 14, ISO 26262, CERT C/C++/JavaVerification pending
- Security certifications(SOC 2 Type II;ISO 27001)
- TÜV SÜD certified (IEC 61508-3, up to ASIL D per ISO 26262 and Level A per DO-178C)Verification pending
Audience · Use · Case
- Best for(Neutral editorial summary)
- Enterprises scanning large-scale C/C++ and polyglot codebases for security and functional-safety complianceVerification pending
- Company-size fit(individual;SMB;mid-market;enterprise)
- mid-market, enterpriseVerification pending
- Primary use cases(build;monitor;automate)
- application security testing, code quality analysis, functional-safety compliance for embedded and safety-critical softwareVerification pending
- Skill level(beginner;intermediate;advanced;specialist)
- advancedVerification pending
Vendor · Maintainer
- Headquarters country(US)
- United StatesVerification pending
- Vendor type(commercial;foundation;community;government;consortium;individual)
- commercialVerification pending
User reviews
Review policyNo published reviews yet.
Write a review
Sign in to write a review. One review per person per tool; your review enters moderation before publication.