Coverity Static Analysis

Added to bookmarks
Bookmarks list

Bookmark has been removed
Bookmarks list

You can't add any more bookmarks

By registering as a member, you can increase the number of bookmarks you can save and organize them with labels.
Free membership registration

last updated：Jul 20, 2022

Official site

Static analysis (SAST) solutions by industry leaders. Quickly identify and fix security and quality issues during coding.

Coverity combines speed, ease of use, accuracy, compliance with industry standards, and scalability to support the development of high-quality and secure applications. Coverity can identify critical quality defects and security vulnerabilities early in the development process during coding, minimizing the effort and cost of fixing them. With accurate and specific remediation advice, along with context-sensitive e-learning, developers without security expertise can quickly understand how to address high-priority issues. Coverity seamlessly integrates automated security testing into CI/CD pipelines, supporting existing development tools and workflows. Additionally, Coverity can be deployed as a cloud-based Polaris Software Integrity Platform, providing a scalable application security platform not only on-premises but also in a SaaS model, depending on the development location and style. Coverity supports 22 languages and over 70 frameworks and templates.

Inquire About This Product

basic information

Coverity features a lightweight static analysis engine called Rapid Scan, which can quickly scan web and mobile applications, microservices, and Infrastructure-as-Code (IaC) configurations. When you run a scan with Coverity, Rapid Scan automatically operates every time without any special configuration. Additionally, you can run Rapid Scan with the same scan time as before as part of a complete CI build. Rapid Scan can also be used as a standalone scanning engine through Code Sight, the command line interface, or an automated build pipeline. In this standalone use case, you can obtain practical early analysis results immediately for most projects. There is no setup required; it can be easily utilized by simply pointing to any directory or Git repository. It supports a wide range of platforms and file formats, making it easy to scan IaC configuration files.