Coverity Reviews & Product Details

Excellent when it comes to long lines of code which is able to find fault in new software that is being created, it is fast and efficient when finding an error or security failure. Review collected by and hosted on G2.com.

More suggestions on how to solve the security bug and sometimes fail to want to upload a project. Review collected by and hosted on G2.com.

The ability of separate bugs by types and different folders where the source code is located. Review collected by and hosted on G2.com.

There are a lot of duplicated information, and fake bugs that depending of the compiler it seems to be an error or not. Review collected by and hosted on G2.com.

The reports are easy to read and understand, helping you find and fix bugs quickly. Review collected by and hosted on G2.com.

It can take a bit of work to set up suitably for a given project. Review collected by and hosted on G2.com.

Security issues

Static dynamic code analysis Review collected by and hosted on G2.com.

False positives are not detected properly with code analysis Review collected by and hosted on G2.com.

The good technical service it offers, in less than 24h Review collected by and hosted on G2.com.

The user experience is a bit confusing if you're new Review collected by and hosted on G2.com.

It scrutinizes code with somewhat blind logic and address weak point of the code. It is good at identifying vulnerable points and helps toward future proof coding. Automatic backround run also make its integration into code flow seamless. Code analysis and suggestion is quite amazing and accurate so help the fix or improvement a lot. Review collected by and hosted on G2.com.

By nature, it runs blind test to many degree so usage based limits are not well honored. It's like double edge of sword so it is its own strong point but at the same time somewhat stubburn point also. Review or coordinated work support is one of lacking capability. It just has tracking capability currently. Review collected by and hosted on G2.com.

Specific feedback broken down to the line of code where the opportunity for improvement has been found. Can easily track which issues have been addressed and what the resolution was, or that code is as expected or otherwise won't be updated and it will quit flagging that issue. Review collected by and hosted on G2.com.

Adds overhead to the build, slowing them down a bit. I also understand that it is fairly expensive although I don't manage the budget so I just try to make good use of the results. Review collected by and hosted on G2.com.

Coverity was able to find code defects that other products were unable to find.

It was incorporated in our build easily and support was great. Review collected by and hosted on G2.com.

We hit a few defects when looking at our million+ lines of code project. Some were

not code defects but flagged as defects. Others we would like to pass certian

constructs without warning, but were unable. Review collected by and hosted on G2.com.

The 2017 version of Coverity scans the latest of version of C++ and Javascript (ES6) better than the other SAST tools. Review collected by and hosted on G2.com.

Coverity's licensing is based on the number of developers who work on a component that is scanned, rather than the number of developers who actually use the tool. Review collected by and hosted on G2.com.

Very good for embedded development and very effective in detecting hard-to-find bugs. Very low false positive rate. Review collected by and hosted on G2.com.

Analysis Result dashboard can be more user friendly. Review collected by and hosted on G2.com.