Coverity vs ShiftLeft comparison

Cancel
You must select at least 2 products to compare!
Synopsys Logo
17,993 views|11,623 comparisons
88% willing to recommend
ShiftLeft Logo
244 views|183 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Coverity and ShiftLeft based on real PeerSpot user reviews.

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Testing (AST).
To learn more, read our detailed Application Security Testing (AST) Report (Updated: March 2024).
768,578 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The interface of Coverity is quite good, and it is also easy to use.""The ability to scan code gives us details of existing and potential vulnerabilities. What really matters for us is to ensure that we are able to catch vulnerabilities ahead of time.""Coverity gives advisory and deviation features, which are some of the parts I liked.""The most valuable feature is that there were not a whole lot of false positives, at least on the codebases that I looked at.""I like Coverity's capability to scan codes once we push it. We don't need more time to review our colleagues' codes. Its UI is pretty straightforward.""The most valuable feature of Coverity is that it shows examples of what is actually wrong with the code.""We were very comfortable with the initial setup.""The product has deeper scanning capabilities."

More Coverity Pros →

"When it comes to ShiftLeft, the most valuable feature is definitely its ease of use and cost-effectiveness."

More ShiftLeft Pros →

Cons
"Some features are not performing well, like duplicate detection and switch case situations.""The product should include more customization options. The analytics is not as deep as compared to SonarQube.""Coverity could improve the ease of use. Sometimes things become difficult and you need to follow the guides from the website but the guides could be better.""Its price can be improved. Price is always an issue with Synopsys.""We use GitHub and Gitflow, and Coverity does not fit with Gitflow. I have to create a screen for our branches, and it's a pain for developers. It has been difficult to integrate Coverity with our system.""It should be easier to specify your own validation routines and sanitation routines.""I would like to see integration with popular IDEs, such as Eclipse.""The tool needs to improve its reporting."

More Coverity Cons →

"Having support from senior management is crucial in making it mandatory for teams to collaborate with the security team throughout the development process."

More ShiftLeft Cons →

Pricing and Cost Advice
  • "Coverity is quite expensive."
  • "The licensing fees are based on the number of lines of code."
  • "The price is competitive with other solutions."
  • "It is expensive."
  • "Coverity is very expensive."
  • "This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced. Licensing is done on an annual basis."
  • "The pricing is very reasonable compared to other platforms. It is based on a three year license."
  • "The pricing is on the expensive side, and we are paying for a couple of items."
  • More Coverity Pricing and Cost Advice →

    Information Not Available
    report
    Use our free recommendation engine to learn which Application Security Testing (AST) solutions are best for your needs.
    768,578 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing… more »
    Top Answer:The solution has improved our code quality and security very well.
    Top Answer:When it comes to ShiftLeft, the most valuable feature is definitely its ease of use and cost-effectiveness.
    Top Answer:When it comes to areas of improvement for ShiftLeft, I believe it could benefit from greater support from senior management. It's important to have their involvement when it comes to architectural… more »
    Top Answer:I would highly recommend ShiftLeft. It greatly simplifies the job for both security professionals and developers. By identifying and fixing bugs earlier in the development lifecycle, it significantly… more »
    Ranking
    Views
    17,993
    Comparisons
    11,623
    Reviews
    22
    Average Words per Review
    382
    Rating
    8.0
    Views
    244
    Comparisons
    183
    Reviews
    1
    Average Words per Review
    959
    Rating
    10.0
    Comparisons
    SonarQube logo
    Compared 51% of the time.
    Klocwork logo
    Compared 9% of the time.
    Fortify on Demand logo
    Compared 6% of the time.
    Checkmarx One logo
    Compared 6% of the time.
    Veracode logo
    Compared 5% of the time.
    Also Known As
    Synopsys Static Analysis
    Learn More
    Overview

    Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts. 

    Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports 22 languages and over 70 frameworks and templates.

    Shipping secure code is painful and time-consuming – slowing down development teams and AppSec teams alike. ShiftLeft is on a mission to make vulnerabilities history. Our revolutionary Code Property Graph (CPG) enables us to seamlessly insert 10x faster code analysis, prioritized OSS vulnerability findings and real-time security education in one single SaaS platform integrated directly into modern development workflows. Combining our OWASP-benchmark dominating NG-SAST, Intelligent SCA, instant secrets detection, and contextual security education, ShiftLeft CORE code security platform turns every developer into an AppSec expert.

    Sample Customers
    MStar Semiconductor, Alcatel-Lucent
    Information Not Available
    Top Industries
    REVIEWERS
    Manufacturing Company39%
    Computer Software Company22%
    Comms Service Provider13%
    Retailer9%
    VISITORS READING REVIEWS
    Manufacturing Company28%
    Computer Software Company15%
    Financial Services Firm8%
    Government4%
    VISITORS READING REVIEWS
    Financial Services Firm19%
    Computer Software Company11%
    Retailer9%
    Legal Firm9%
    Company Size
    REVIEWERS
    Small Business17%
    Midsize Enterprise14%
    Large Enterprise69%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise10%
    Large Enterprise76%
    VISITORS READING REVIEWS
    Small Business24%
    Midsize Enterprise8%
    Large Enterprise68%
    Buyer's Guide
    Application Security Testing (AST)
    March 2024
    Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Testing (AST). Updated: March 2024.
    768,578 professionals have used our research since 2012.

    Coverity is ranked 4th in Application Security Testing (AST) with 33 reviews while ShiftLeft is ranked 18th in Application Security Testing (AST) with 1 review. Coverity is rated 7.8, while ShiftLeft is rated 10.0. The top reviewer of Coverity writes "Best SAST tool to check software quality issues". On the other hand, the top reviewer of ShiftLeft writes "Effectively in identify and fix bugs early in the development lifecycle". Coverity is most compared with SonarQube, Klocwork, Fortify on Demand, Checkmarx One and Veracode, whereas ShiftLeft is most compared with SonarQube, Black Duck and Semgrep Supply Chain.

    See our list of best Application Security Testing (AST) vendors.

    We monitor all Application Security Testing (AST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.