No more typing reviews! Try our Samantha, our new voice AI agent.

CAST Highlight vs Coverity Static comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CAST Highlight
Average Rating
7.8
Reviews Sentiment
7.1
Number of Reviews
7
Ranking in other categories
Software Composition Analysis (SCA) (18th)
Coverity Static
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
43
Ranking in other categories
Static Application Security Testing (SAST) (5th)
 

Mindshare comparison

CAST Highlight and Coverity Static aren’t in the same category and serve different purposes. CAST Highlight is designed for Software Composition Analysis (SCA) and holds a mindshare of 1.3%, up 0.9% compared to last year.
Coverity Static, on the other hand, focuses on Static Application Security Testing (SAST), holds 3.0% mindshare, down 8.0% since last year.
Software Composition Analysis (SCA) Mindshare Distribution
ProductMindshare (%)
CAST Highlight1.3%
Snyk10.9%
Black Duck SCA9.9%
Other77.9%
Software Composition Analysis (SCA)
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
Coverity Static3.0%
SonarQube15.3%
Checkmarx One9.7%
Other72.0%
Static Application Security Testing (SAST)
 

Featured Reviews

Jayanti Rode - PeerSpot reviewer
Technical Associate Manager at Accenture
Identifies migration blockers and boosters while facing challenges with platform-specific roadblocks
The solution provides agnostic blockers for platforms as well as for containerization. Within that containerization, it offers generic blockers. However, my project might require it to provide Windows-specific blockers or Linux-specific blockers, as I often work with only one platform at a time. If I received categorization in containerization blockers, it would save time. Understanding only the OS-specific blockers means I would avoid resolving irrelevant issues, thus saving time. Initially, I receive a response from support, however, if there is involvement from R&D or other teams, it may take longer than expected. The support team is challenging when sharing source code. As this is a static code analysis tool, it sometimes requires source code for R&D. However, CAST clients may be restricted from sharing due to business logic and nondisclosure agreements. This creates a challenge, and I may have to share pseudo code or seek client approval, risking escalation.
KT
Software Engineering Manager at Visteon Corporation
Using tools for compliance is beneficial but cost concerns persist
We have been using Coverity for quite a long period. It has been fine for our needs. I would rate Coverity between eight to nine, though the cost is high. I would rate their support from Coverity as six. That is the main complaint, but we still appreciate having it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It offers good performance."
"The most valuable features of CAST Highlight are automation and speed."
"In cloud migration, I use CAST highlight to identify blockers, which are the negative road patterns, and also the boosters, which are positive code patterns."
"CAST Highlight is easy to use and has a good dashboard."
"We've been using it for two years and found that it is really profitable to have the product in our arsenal."
"CAST Highlight provides a clear overview of the role portfolio and allows users to assess the overall quality of the environment. Users can see where improvements are needed and follow up on trends of the application."
"We are using CAST Highlight for the location because it's an indicator for us that can differentiate us from the other health insurance company, and we are using the indicator as proof of the quality of service for our application."
"The way it tells you which codebase is more ready for the cloud and which codebase is less ready is very valuable. It works seamlessly with most languages."
"The solution has helped to increase staff productivity and improved our work significantly by approximately 20 percent."
"The most valuable feature is that there were not a whole lot of false positives, at least on the codebases that I looked at."
"Considering the analysis part and the benchmarking process involving the product that my company carried out, the solution is good for finding bugs and violations"
"We were very comfortable with the initial setup."
"The most valuable feature of Coverity is the wrapper; we use the wrapper to build the C++ component, then we use the other code analysis to analyze the code to the build object, and then send back the result to the SonarQube server."
"The product has been beneficial in logging functionality, allowing me to categorize vulnerabilities based on severity. This aids in providing updated reports on subsequent scans."
"Coverity is easy to use and easy to integrate with CI."
"Coverity gives advisory and deviation features, which are some of the parts I liked."
 

Cons

"The reports that describe the issues of concern are rather abstract and the issues should be more clearly described to the user."
"There could be potential improvements or additional features added to CAST Highlight to make it better."
"It is a pretty costly tool. A lot of customers are resistant to using it."
"Technical support could be better."
"There's a bit of a learning curve at the outset."
"Its price should be better. It is a pretty costly tool. They have two products: CAST Highlight and CAST AIP. I would expect CAST Highlight to have the Help dashboard and the Engineering dashboard. These dashboards are currently a part of CAST AIP, and if these are made available in CAST Highlight, customers won't have to use two different products all the time."
"CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive."
"CAST Highlight could improve to allow us to comment and do a deep analysis by ourselves."
"Coverity is not stable."
"We use GitHub and Gitflow, and Coverity does not fit with Gitflow. I have to create a screen for our branches, and it's a pain for developers. It has been difficult to integrate Coverity with our system."
"Reporting engine needs to be more robust."
"Coverity is not stable but it is sufficient for our organization's requirements."
"The solution needs to improve its false positives."
"Coverity's implementation cycle is very slow when integrating changes, especially for problems related to event handling and memory leaks."
"Sometimes it's a bit hard to figure out how to use the product’s UI."
"They could improve the usability. For example, how you set things up, even though it's straightforward, it could still be easier."
 

Pricing and Cost Advice

"CAST Highlight is an expensive solution."
"CAST Highlight is an expensive solution. However, CAST Highlight is less expensive than the CAST AIP, but it remains too expensive and the professional services from CAST are also too expensive. The high price is part of the problem with the CAST solutions."
"Basic support is included with the standard licensing feed but it can be upgraded for an additional cost."
"It is a pretty costly tool. A lot of customers are resistant to using it."
"Offers varying prices for different companies"
"The pricing is very reasonable compared to other platforms. It is based on a three year license."
"I would rate the tool's pricing a one out of ten."
"This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced. Licensing is done on an annual basis."
"Coverity is very expensive."
"The tool's price is somewhere in the middle. It's neither cheap nor expensive. I would rate the pricing a five out of ten."
"The solution is affordable."
"It is expensive."
report
Use our free recommendation engine to learn which Software Composition Analysis (SCA) solutions are best for your needs.
893,438 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Computer Software Company
9%
Government
8%
Outsourcing Company
7%
Manufacturing Company
30%
Computer Software Company
10%
Financial Services Firm
7%
Comms Service Provider
4%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise1
Large Enterprise5
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise6
Large Enterprise31
 

Questions from the Community

What is your experience regarding pricing and costs for CAST Highlight?
The pricing of CAST Highlight was not considered expensive or cheap, and no specific comment was made about the setup cost.
What needs improvement with CAST Highlight?
The solution provides agnostic blockers for platforms as well as for containerization. Within that containerization, it offers generic blockers. However, my project might require it to provide Wind...
What is your primary use case for CAST Highlight?
For CAST, I use it in cloud migration roadmap and in open source safety issues. These are my two main use cases.
How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What needs improvement with Coverity?
The price is a concern, and there are a lot of false positives coming through. Support with Coverity is adequate, but they take a longer time to respond. The core support is not straightforward, an...
 

Comparisons

 

Also Known As

No data available
Synopsys Static Analysis
 

Overview

 

Sample Customers

Wells Fargo, Bank of NY Mellon, Northern Trust, Microsoft, Amazon, IBM, BMW, AT&T, US Army, US Air Force, US Navy, John Hancock, Marsh & McLennan, Ernst & Young, PwC, Volkswagen, Boston Consulting Group, London Stock Exchange, Telefonica, Saur France, Total Energies France, SNCF
SAP, Mega International, Thales Alenia Space
Find out what your peers are saying about CAST Highlight vs. Coverity Static and other solutions. Updated: September 2022.
893,438 professionals have used our research since 2012.