Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

A static code analysis tool assists programmers in ensuring that their C and C++ code adheres to established standards, identifies security flaws, and evaluates code quality. It conducts automated assessments to uncover breaches of coding guidelines such as MISRA C, as well as to find code duplicates, unreachable code, and potential security threats. Noteworthy functionalities encompass adherence to coding standards, tracking of various metrics, analysis of defects, and certification support for the development of safety-critical software, making it an essential resource for developers aiming to enhance code integrity. This tool ultimately empowers teams to deliver more secure and reliable software solutions.

Description

Coverity Static Analysis serves as an all-encompassing solution for code scanning, assisting both developers and security teams in producing superior software that meets security, functional safety, and various industry standards. It efficiently detects intricate defects within large codebases, pinpointing and addressing quality and security concerns that may arise across multiple files and libraries. Coverity ensures adherence to numerous standards such as OWASP Top 10, CWE Top 25, MISRA, and CERT C/C++/Java, and offers comprehensive reports that help in monitoring and prioritizing issues. By utilizing the Code Sight™ IDE plugin, developers benefit from immediate feedback, including insights on CWE and instructions for remediation, directly integrated into their development settings, which helps to weave security practices seamlessly into the software development lifecycle while maintaining developer productivity. This tool not only contributes to enhanced code integrity but also fosters a culture of continuous improvement in software security practices.

API Access

Has API

API Access

Has API

Screenshots View All

No images available

Screenshots View All

Integrations

C
C++
AWS CloudFormation
ArmorCode
Black Duck
C#
CUDA
GitHub
GitLab
HTML
Kondukto
Kubernetes
Ruby on Rails
Swift
Terraform
Tromzo
TypeScript
Visual Basic
Vue.js

Integrations

C
C++
AWS CloudFormation
ArmorCode
Black Duck
C#
CUDA
GitHub
GitLab
HTML
Kondukto
Kubernetes
Ruby on Rails
Swift
Terraform
Tromzo
TypeScript
Visual Basic
Vue.js

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Qt Group

Founded

1995

Country

Finland

Website

www.qt.io/product/quality-assurance/axivion-static-code-analysis

Vendor Details

Company Name

Black Duck

Founded

2002

Country

United States

Website

www.blackduck.com/static-analysis-tools-sast/coverity.html

Product Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Product Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Alternatives

Klocwork Reviews

Klocwork

Perforce

Alternatives

Snappytick Reviews

Snappytick

Snappycode Audit
Revenera SCA Reviews

Revenera SCA

Revenera