Try our new research platform with insights from 80,000+ expert users

Coverity Static vs Tenable.io Web Application Scanning comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coverity Static
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
43
Ranking in other categories
Static Application Security Testing (SAST) (8th)
Tenable.io Web Application ...
Average Rating
7.8
Reviews Sentiment
5.8
Number of Reviews
18
Ranking in other categories
Application Security Tools (20th)
 

Mindshare comparison

Coverity Static and Tenable.io Web Application Scanning aren’t in the same category and serve different purposes. Coverity Static is designed for Static Application Security Testing (SAST) and holds a mindshare of 3.8%, down 8.0% compared to last year.
Tenable.io Web Application Scanning, on the other hand, focuses on Application Security Tools, holds 1.4% mindshare, up 1.2% since last year.
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
Coverity Static3.8%
SonarQube17.7%
Checkmarx One10.4%
Other68.1%
Static Application Security Testing (SAST)
Application Security Tools Mindshare Distribution
ProductMindshare (%)
Tenable.io Web Application Scanning1.4%
SonarQube16.3%
Checkmarx One9.9%
Other72.4%
Application Security Tools
 

Featured Reviews

KT
Software Engineering Manager at Visteon Corporation
Using tools for compliance is beneficial but cost concerns persist
We have been using Coverity for quite a long period. It has been fine for our needs. I would rate Coverity between eight to nine, though the cost is high. I would rate their support from Coverity as six. That is the main complaint, but we still appreciate having it.
HL
Security Analyst at TOPNET
Web audits have identified vulnerabilities and now provide clear visibility into compliance gaps
We have experience with Tenable.io Web Application Scanning, and we use it as well; we have approximately ten licenses for web application scanning. We use it to find vulnerabilities, but Tenable.io Web Application Scanning does not include remediation; we remediate with other products. We use the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Coverity is easy to use and easy to integrate with CI."
"The most valuable feature of Coverity is that it shows examples of what is actually wrong with the code."
"It is a scalable solution."
"Ease of development teams to adopt."
"The most valuable feature of Coverity is the wrapper; we use the wrapper to build the C++ component, then we use the other code analysis to analyze the code to the build object, and then send back the result to the SonarQube server."
"Considering the analysis part and the benchmarking process involving the product that my company carried out, the solution is good for finding bugs and violations"
"The features I find most valuable is that our entire company can publish the analysis results into our central space."
"I encountered a bug with Coverity, and I opened a ticket. Support provided me with a workaround. So it's working at the moment, or at least it seems to be."
"Now that the license is centralized, it's a significant feature to manipulate assets based on their functions."
"Tenable.io Web Application Scanning provides a detailed report, identifying functions that are complex and need to be more maintainable and readable."
"All the features are valuable to us as they offer cutting-edge scanning methods and address the latest issues with a contemporary approach. Tenable.io Web Application Scanning is highly stable. I rate it a nine out ten. Since the solution works on the Cloud, it's highly scalable. I rate the scalability a nine out of ten. The setup of the solution is straightforward. The Return on Investment is substantial. I recommend the solution to all."
"I think Tenable.io Web Application Scanning is the best option on the market at the moment."
"It has good unified web application scanning and exposure management."
"I would recommend Tenable.io Web Application Scanning to others."
"Tenable.io Web Application Scanning is very easy to use, provides very reliable results, and is easily managed by someone who lacks prior knowledge, information, or experience."
"Our primary use case for the solution is automated scanning; it doesn't require scripting knowledge or any of those suites or other tools, so it is fully automated, and we provide the credentials and URL and the tool does all scanning and will show the result per the requirement."
 

Cons

"Its price can be improved. Price is always an issue with Synopsys."
"Coverity could improve the ease of use. Sometimes things become difficult and you need to follow the guides from the website but the guides could be better."
"Coverity is not stable."
"The solution's user interface and quality gate could be improved."
"Coverity is too costly, which is why we are trying other tools."
"When I put my code into Coverity for scanning, the code information of the product is in the system. The solution could be improved by providing a SBOM, a software bill of material."
"There is an extra step in my organization that involves uploading to servers, which adds overhead."
"Ideally, it would have a user-based license that does not have a restriction in the number of lines of code."
"The reporting in Tenable.io Web Application Scanning is not as good as the reporting in Tenable SC."
"It isn't easy to manage vulnerabilities in Tenable."
"Tenable.io Web Application Scanning could improve by offering faster fuzzing."
"It isn't easy to manage vulnerabilities in Tenable."
"Tenable.io Web Application Scanning could improve by offering faster fuzzing."
"The report customization needs to be better."
"The dashboard could be more user-friendly."
"They have a general dashboard for web application scanning, but the dashboards and reporting can be improved. They probably have some features in their roadmap."
 

Pricing and Cost Advice

"The licensing fees are based on the number of lines of code."
"It is expensive."
"The pricing is on the expensive side, and we are paying for a couple of items."
"This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced. Licensing is done on an annual basis."
"Offers varying prices for different companies"
"Coverity is very expensive."
"I would rate Coverity's pricing as a nine out of ten. It's already very expensive, and it's a problem for us to get more licenses due to the price. The pricing model has some good aspects - for example, a personal license gives access to all languages without code limitations, which is better than some competitors. However, it's still a lot of money for us to spend."
"Coverity is quite expensive."
"Tenable.io Web Application Scanning is expensive for small businesses."
"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."
"It follows the same licensing scheme as Tenable.io and Tenable. sc."
"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."
"I rate the product's pricing a four out of ten."
"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."
"The pricing is okay."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
885,286 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
31%
Computer Software Company
10%
Financial Services Firm
7%
Comms Service Provider
4%
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
9%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise6
Large Enterprise31
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise7
 

Questions from the Community

How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What needs improvement with Coverity?
The price is a concern, and there are a lot of false positives coming through. Support with Coverity is adequate, but they take a longer time to respond. The core support is not straightforward, an...
What needs improvement with Tenable.io Web Application Scanning?
If there were a solution, I would like to see automation and an integrated remediation solution for vulnerability or patch management.
What advice do you have for others considering Tenable.io Web Application Scanning?
I do not understand what API approach means; I do not understand this term. I think Tenable.io Web Application Scanning is the best option on the market at the moment. My review rating for this pro...
What is your experience regarding pricing and costs for Tenable.io Web Application Scanning?
I think the price is expensive. We do not have an idea of how much we have to pay approximately, but comparing to other products, Tenable.io Web Application Scanning is expensive.
 

Also Known As

Synopsys Static Analysis
No data available
 

Overview

 

Sample Customers

SAP, Mega International, Thales Alenia Space
IMDEX
Find out what your peers are saying about Coverity Static vs. Tenable.io Web Application Scanning and other solutions. Updated: September 2022.
885,286 professionals have used our research since 2012.