Try our new research platform with insights from 80,000+ expert users

Coverity Static vs SentinelOne Singularity Cloud Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coverity Static
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
43
Ranking in other categories
Static Application Security Testing (SAST) (5th)
SentinelOne Singularity Clo...
Average Rating
8.8
Reviews Sentiment
7.7
Number of Reviews
116
Ranking in other categories
Vulnerability Management (5th), Cloud and Data Center Security (2nd), Container Security (3rd), Cloud Workload Protection Platforms (CWPP) (4th), Cloud Security Posture Management (CSPM) (3rd), Cloud-Native Application Protection Platforms (CNAPP) (3rd), Compliance Management (2nd)
 

Mindshare comparison

Coverity Static and SentinelOne Singularity Cloud Security aren’t in the same category and serve different purposes. Coverity Static is designed for Static Application Security Testing (SAST) and holds a mindshare of 6.0%, down 7.3% compared to last year.
SentinelOne Singularity Cloud Security, on the other hand, focuses on Cloud-Native Application Protection Platforms (CNAPP), holds 4.6% mindshare, up 2.1% since last year.
Static Application Security Testing (SAST) Market Share Distribution
ProductMarket Share (%)
Coverity Static6.0%
SonarQube Server (formerly SonarQube)19.7%
Checkmarx One10.0%
Other64.3%
Static Application Security Testing (SAST)
Cloud-Native Application Protection Platforms (CNAPP) Market Share Distribution
ProductMarket Share (%)
SentinelOne Singularity Cloud Security4.6%
Wiz23.4%
Prisma Cloud by Palo Alto Networks14.5%
Other57.5%
Cloud-Native Application Protection Platforms (CNAPP)
 

Featured Reviews

Jaile Sebes - PeerSpot reviewer
Resolving critical software issues demands faster implementation and better integration
We use Coverity primarily to find issues such as software bugs and memory leaks, especially in C++ and C# projects. It helps us identify deadlocks, synchronization issues, and product crashes Coverity has been instrumental in resolving product crashes by detecting various issues like deadlocks.…
Ritesh P. - PeerSpot reviewer
It's more scalable and flexible than our previous solution because we don't need to install any agents
The reporting works well, but sometimes the severity classifications are inaccurate. Sometimes, it flags an issue as high-impact, but it should be a lower severity. For example, it might highlight an exposed AWS encryption key, a critical compliance issue, but it isn't tagged as a high-risk problem. That only happens about 10 percent of the time. It shows a true positive 80-90 percent of the time.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution has improved our code quality and security very well."
"Considering the analysis part and the benchmarking process involving the product that my company carried out, the solution is good for finding bugs and violations"
"The product has deeper scanning capabilities."
"Coverity is easy to use and easy to integrate with CI."
"I like Coverity's capability to scan codes once we push it. We don't need more time to review our colleagues' codes. Its UI is pretty straightforward."
"It has the lowest false positives."
"It provides reports about a lot of potential defects."
"It help us identify the latest security vulnerabilities."
"The most valuable aspect of Singularity Cloud Security is its unified dashboard."
"The most valuable feature is the ability to gain deep visibility into the workloads inside containers."
"As a frequently audited company, we value SentinelOne Singularity Cloud Security's compliance monitoring features. They give us a report with a compliance score for how well we meet certain regulatory standards, like HIPAA. We can show our compliance as a percentage. It's also a way to show that we are serious about security."
"It is advantageous in terms of time-saving and cost reduction."
"I would definitely recommend SentinelOne Singularity Cloud Security for infrastructure security."
"Singularity Cloud Workload Security provides us with better security detection and more visibility. It is another resource that we can use to detect vulnerabilities in our company's systems. For example, it can help us detect new file processes that we are not familiar with, which could be used by attackers to exploit our systems. Singularity Cloud Workload Security can also help us diagnose and analyze data to determine whether it is malicious or not. Singularity Cloud Workload Security is like another pair of eyes that can help us protect our systems from cyberattacks."
"We use the infrastructure as code scanning, which is good."
"The user-friendly dashboard offers both convenience and security by providing quick access to solutions and keeping us informed of potential threats."
 

Cons

"They could improve the usability. For example, how you set things up, even though it's straightforward, it could be still be easier."
"Some features are not performing well, like duplicate detection and switch case situations."
"Zero-day vulnerability identification can be an add-on feature that Coverity can provide."
"The solution is a bit complex to use in comparison to other products that have many plugins."
"I had tried integrating the tool with Azure DevOps, but the report I got stated that my team faced many challenges."
"The solution's user interface and quality gate could be improved."
"When I put my code into Coverity for scanning, the code information of the product is in the system. The solution could be improved by providing a SBOM, a software bill of material."
"The solution could use more rules."
"The Kubernetes scanning on the Oracle Cloud needs to be improved. It's on the roadmap. AWS has this capability, but it's unavailable for Oracle Cloud."
"The application module focuses on the different codes and libraries that can be run on the machines. It is very important for Singularity EDR to detect what type of codes and what type of libraries can run in the machine. If they can implement a white list or a black list of codes or libraries that can be used in the machine, it would be very helpful. They can focus more on the application module."
"The could improve their mean time to detect."
"We wanted it to provide us with something like Claroty Hub in AWS for lateral movement. For example, if an EC2 instance or a virtual machine is compromised in a public subnet based on a particular vulnerability, such as Log4j, we want it to not be able to reach some of our databases. This kind of feature is not supported in SentinelOne Singularity Cloud Security."
"We are getting reports only in a predefined form. I would like to have customized reports so that I can see how many issues are open or closed today or in two weeks."
"Their search feature could be better."
"SentinelOne currently lacks a break glass account feature, which is critical for implementing Single Sign-On."
"The area of improvement is the cost, which is high compared to other traditional endpoint protections."
 

Pricing and Cost Advice

"The licensing fees are based on the number of lines of code."
"I rate Coverity's price a ten on a scale of one to ten, where one is cheap and ten is expensive."
"Coverity is quite expensive."
"This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced. Licensing is done on an annual basis."
"The tool was fairly priced."
"The tool's price is somewhere in the middle. It's neither cheap nor expensive. I would rate the pricing a five out of ten."
"Coverity’s price is on the higher side. It should be lower."
"Depending on the usage types, one has to opt for different types of licenses from Coverity, especially to be able to use areas like report viewing or report generation."
"The pricing is somewhat high compared to other market tools."
"Their pricing appears to be based simply on the number of accounts we have, which is common for cloud-based products."
"Its pricing is constant. It has been constant over the previous year, so I am happy with it. However, price distribution can be better explained. That is the only area I am worried about. Otherwise, the pricing is very reasonable."
"It's a fair price for what you get. We are happy with the price as it stands."
"It was reasonable pricing for me."
"It's not cheap, but it is worth the price."
"The licensing is easy to understand and implement, with some flexibility to accommodate dynamic environments."
"SentinelOne is relatively cheap. If ten is the most expensive, I would rate it a seven."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
871,408 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
32%
Computer Software Company
13%
Financial Services Firm
7%
Government
4%
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
10%
Government
5%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise6
Large Enterprise31
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise20
Large Enterprise55
 

Questions from the Community

How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What do you like most about Coverity?
The solution has improved our code quality and security very well.
What do you like most about PingSafe?
The dashboard gives me an overview of all the things happening in the product, making it one of the tool's best features.
What is your experience regarding pricing and costs for PingSafe?
I think the pricing of SentinelOne Singularity Cloud Security is a bit high.
What needs improvement with PingSafe?
One area that could be improved in SentinelOne Singularity Cloud Security is their policies; the way they have configured the policies could be enhanced. There could be a better way to configure cu...
 

Also Known As

Synopsys Static Analysis
PingSafe
 

Overview

 

Sample Customers

SAP, Mega International, Thales Alenia Space
Information Not Available
Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Static Application Security Testing (SAST). Updated: September 2025.
871,408 professionals have used our research since 2012.