Try our new research platform with insights from 80,000+ expert users

Coverity Static vs SentinelOne Singularity Cloud Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coverity Static
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
43
Ranking in other categories
Static Application Security Testing (SAST) (6th)
SentinelOne Singularity Clo...
Average Rating
8.6
Reviews Sentiment
7.7
Number of Reviews
116
Ranking in other categories
Vulnerability Management (4th), Cloud and Data Center Security (3rd), Container Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd), AI Software Development (1st), AI Observability (2nd)
 

Mindshare comparison

Coverity Static and SentinelOne Singularity Cloud Security aren’t in the same category and serve different purposes. Coverity Static is designed for Static Application Security Testing (SAST) and holds a mindshare of 4.7%, down 8.0% compared to last year.
SentinelOne Singularity Cloud Security, on the other hand, focuses on Cloud-Native Application Protection Platforms (CNAPP), holds 5.3% mindshare, up 2.7% since last year.
Static Application Security Testing (SAST) Market Share Distribution
ProductMarket Share (%)
Coverity Static4.7%
SonarQube18.8%
Checkmarx One10.4%
Other66.1%
Static Application Security Testing (SAST)
Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Cloud Security5.3%
Wiz20.2%
Prisma Cloud by Palo Alto Networks12.8%
Other61.7%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

KT
Software Engineering Manager at Visteon Corporation
Using tools for compliance is beneficial but cost concerns persist
We have been using Coverity for quite a long period. It has been fine for our needs. I would rate Coverity between eight to nine, though the cost is high. I would rate their support from Coverity as six. That is the main complaint, but we still appreciate having it.
SC
Information Security Engineer at DataVigilant Infotech
Enables us to prioritize and effectively address critical security issues
Evidence-based reporting helps us to prioritize and solve critical security issues. The new visualization feature demonstrates how an attacker can enter the system, highlighting the potential path that can be exploited and outlining all the steps the attacker could take. With that visibility, we can ensure the perimeter is strong and attackers cannot enter, thus reducing the risk. It has helped us prioritize issues. The visibility into how an attack could happen is valuable. For example, it highlights the system vulnerability and outlines where an attack could propagate. The visualization helps me to prioritize remediation, and if I don't know where to start, I can check to see the score that enables me to prioritize issues. I am using infrastructure-as-code scanning, and it's one of the useful features. In pre-production, it identifies embedded secrets and misconfigurations, including issues with Kubernetes or some privileged containers. This feature allows us to pass the audit and secure IaC code so that it isn't easily exploitable by attackers. We can more proactively work to identify and resolve vulnerabilities by using the dashboard and the alerting system that SentinelOne provides. It helps us with audits and compliance. We can show the compliance in percentage. We can confidently say that our company or infrastructure is very secure. It has improved our security posture by 30% to 35%. It has reduced our false positives by 30%. It has helped teams collaborate better. The security team manages SentinelOne Singularity Cloud Security, and when it flags vulnerabilities, they are forwarded to DevOps for remediation. Previously, we needed to identify and report the issues, but there would be lapses in communication. Now, there is a centralized dashboard that anyone can look at and see the open issues and work on them.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's very stable."
"The most valuable feature of Coverity is the wrapper. We use the wrapper to build the C++ component, then we use the other code analysis to analyze the code to the build object, and then send back the result to the SonarQube server. Additionally, it is a powerful capabilities solution."
"Considering the analysis part and the benchmarking process involving the product that my company carried out, the solution is good for finding bugs and violations"
"Coverity is easy to use and easy to integrate with CI."
"The interface of Coverity is quite good, and it is also easy to use."
"The app analysis is the most valuable feature as I know other solutions don't have that."
"The most valuable feature of Coverity is its interprocedural analysis, which is advantageous because it compares favorably with other tools in terms of security and code analysis."
"The tool as it is can be used for code quality improvement."
"SentinelOne Singularity Cloud Security has a dashboard that can detect the criticality of a particular problem, whether it falls under critical, medium, or low vulnerability."
"SentinelOne Singularity Cloud Security improved our risk posture significantly, helped reduce our mean time to detect and mean time to remediate, and enabled collaboration across cloud security, development, and AppSec teams, saving engineering time by approximately three to four hours."
"The monitoring tool has comprehensive monitoring features."
"For Singularity, the task capability is easy to use and it has a very intuitive dashboard, which streamlines the processes."
"We like the platform and its response time. We also like that its console is user-friendly as well as modern and sleek."
"The real-time detection and response capabilities overall are great."
"Support has been very helpful and provides regular feedback and help whenever needed. They've been very useful."
"The key strength of Singularity Cloud Security lies in its ability to pinpoint vulnerabilities in our cloud accounts and identify suspicious activity that warrants further investigation."
 

Cons

"We use GitHub and Gitflow, and Coverity does not fit with Gitflow. I have to create a screen for our branches, and it's a pain for developers. It has been difficult to integrate Coverity with our system."
"The solution could use more rules."
"The level of vulnerability that this solution covers could be improved compared to other open source tools."
"It would be great if we could customize the rules to focus on critical issues."
"We'd like it to be faster."
"It should be easier to specify your own validation routines and sanitation routines."
"When I put my code into Coverity for scanning, the code information of the product is in the system. The solution could be improved by providing a SBOM, a software bill of material."
"Its price can be improved. Price is always an issue with Synopsys."
"It does not bring much threat intel from the outside world. All it does is scan. If it can also correlate things, it will be better."
"For SentinelOne, improvements could be made in managing Internet dependency as cloud-based operations can pose challenges in environments with limited connectivity."
"SentinelOne Singularity Cloud Security can be improved by developing a comprehensive set of features that allow for automated workflows."
"One of the issues with the product stems from the fact that it clubs different resources under one ticket."
"The SentinelOne customer support needs improvement, as they are sometimes late in responding, which is critical in a production issue."
"Implementing single sign-on requires a pre-class account feature, which is currently not available."
"Singularity Cloud Security currently lacks a break-glass account function, which is a critical component for implementing Single Sign-On as it allows for regaining access in emergencies."
"The price is on the higher side. The dashboard can be more detailed."
 

Pricing and Cost Advice

"I would rate Coverity's pricing as a nine out of ten. It's already very expensive, and it's a problem for us to get more licenses due to the price. The pricing model has some good aspects - for example, a personal license gives access to all languages without code limitations, which is better than some competitors. However, it's still a lot of money for us to spend."
"Offers varying prices for different companies"
"It is expensive."
"The licensing fees are based on the number of lines of code."
"The tool was fairly priced."
"Coverity’s price is on the higher side. It should be lower."
"I rate Coverity's price a ten on a scale of one to ten, where one is cheap and ten is expensive."
"The price is competitive with other solutions."
"Singularity Cloud Workload Security's pricing is good."
"It's a fair price for what you get. We are happy with the price as it stands."
"The pricing is somewhat high compared to other market tools."
"Its pricing was a little less than other providers."
"The tool is cost-effective."
"It is a little expensive. I would rate it a four out of ten for pricing."
"SentinelOne offers excellent pricing and licensing options."
"I would rate the cost a seven out of ten with ten being the most costly."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
881,078 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
32%
Computer Software Company
12%
Financial Services Firm
7%
Healthcare Company
4%
Financial Services Firm
14%
Computer Software Company
12%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise6
Large Enterprise31
By reviewers
Company SizeCount
Small Business48
Midsize Enterprise20
Large Enterprise54
 

Questions from the Community

How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What do you like most about Coverity?
The solution has improved our code quality and security very well.
What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best features.
What is your experience regarding pricing and costs for PingSafe?
I think the pricing of SentinelOne Singularity Cloud Security is a bit high.
What needs improvement with PingSafe?
We did not try to use the threat investigations feature from SentinelOne Singularity Cloud Security.Drift detection with respect to infrastructure code is important. When somebody makes changes to ...
 

Also Known As

Synopsys Static Analysis
PingSafe
 

Overview

 

Sample Customers

SAP, Mega International, Thales Alenia Space
Information Not Available
Find out what your peers are saying about SonarSource Sàrl, Veracode, Checkmarx and others in Static Application Security Testing (SAST). Updated: January 2026.
881,078 professionals have used our research since 2012.