No more typing reviews! Try our Samantha, our new voice AI agent.

Coverity Static vs Tenable.io Web Application Scanning comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coverity Static
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
43
Ranking in other categories
Static Application Security Testing (SAST) (16th)
Tenable.io Web Application ...
Average Rating
7.8
Reviews Sentiment
5.8
Number of Reviews
18
Ranking in other categories
Application Security Tools (26th)
 

Mindshare comparison

Coverity Static and Tenable.io Web Application Scanning aren’t in the same category and serve different purposes. Coverity Static is designed for Static Application Security Testing (SAST) and holds a mindshare of 2.5%, down 6.6% compared to last year.
Tenable.io Web Application Scanning, on the other hand, focuses on Application Security Tools, holds 1.2% mindshare, down 1.3% since last year.
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
Coverity Static2.5%
SonarQube12.7%
Checkmarx One8.3%
Other76.5%
Static Application Security Testing (SAST)
Application Security Tools Mindshare Distribution
ProductMindshare (%)
Tenable.io Web Application Scanning1.2%
SonarQube10.8%
Checkmarx One7.3%
Other80.7%
Application Security Tools
 

Featured Reviews

Jaile Sebes - PeerSpot reviewer
Senior Software Architect at a tech vendor with 10,001+ employees
Resolving critical software issues demands faster implementation and better integration
We use Coverity primarily to find issues such as software bugs and memory leaks, especially in C++ and C# projects. It helps us identify deadlocks, synchronization issues, and product crashes Coverity has been instrumental in resolving product crashes by detecting various issues like deadlocks.…
HL
Security Analyst at TOPNET
Web audits have identified vulnerabilities and now provide clear visibility into compliance gaps
We have experience with Tenable.io Web Application Scanning, and we use it as well; we have approximately ten licenses for web application scanning. We use it to find vulnerabilities, but Tenable.io Web Application Scanning does not include remediation; we remediate with other products. We use the…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's very stable."
"The solution effectively identifies bugs in code."
"The most valuable feature of Coverity is that it shows examples of what is actually wrong with the code."
"It provides reports about a lot of potential defects."
"This product has definitely helped our organization, and based on what I have heard from the development team, they have found a lot of issues before code goes into production."
"The app analysis is the most valuable feature as I know other solutions don't have that."
"The most valuable feature is the ability to find vulnerabilities in our code."
"The reporting feature is up to the mark."
"Our customers adopt this solution because of the replication testing and the vulnerability assessment it can do. It is a multi-faceted product."
"The most valuable features of Tenable.io Web Application Scanning are the integration into specific use cases and scanning. All of the features of the solution are useful."
"Now that the license is centralized, it's a significant feature to manipulate assets based on their functions."
"The most valuable feature is the reporting, which provides a good level of detail with respect to vulnerabilities."
"Tenable.io Web Application Scanning provides a detailed report, identifying functions that are complex and need to be more maintainable and readable."
"The product provides comprehensive details and reports to help us understand everything and handle any patches in order to keep our system safe."
"The solution is stable."
"Our primary use case for the solution is automated scanning; it doesn't require scripting knowledge or any of those suites or other tools, so it is fully automated, and we provide the credentials and URL and the tool does all scanning and will show the result per the requirement."
 

Cons

"We'd like it to be faster."
"Coverity is too costly, which is why we are trying other tools."
"Coverity takes a lot of time to dereference null pointers."
"It would be great if we could customize the rules to focus on critical issues."
"Coverity is not stable but it is sufficient for our organization's requirements."
"Coverity is not stable."
"We actually specified several checkers, but we found some checkers had a higher false positive rate. I think this is a problem. Because we have to waste some time is really the issue because the issue is not an issue. I mean, the tool pauses or an issue, but the same issue is the filter now.Some check checkers cannot find some issues, but sometimes they find issues that are not relevant, right, that are not really issues. Some customisation mechanism can be added in the next release so that we can define our Checker. The Modelling feature provided by Coverity helps in finding more information for potential issues but it is not mature enough, it should be mature. The fast testing feature for security testing campaign can be added as well. So if you correctly integrate it with the training team, maybe you can help us to find more potential issues."
"Sometimes, vulnerabilities remain unidentified even after setting up the rules."
"Sometimes it lags with different cloud environments."
"It would be great if there were a dashboard that is more user-friendly."
"The platform's technical support services could be better."
"The report customization needs to be better."
"The dashboard could be more user-friendly."
"The cloud and the on-premises versions have their own controllers, and there is no way to centrally manage controllers."
"I would like for them to add intervening proxy, whereby you can alter the get/put requests."
"The market is standard for vulnerability scanning, however, the posture can be improved through Tenable's prioritization engine."
 

Pricing and Cost Advice

"Coverity is very expensive."
"Coverity’s price is on the higher side. It should be lower."
"I would rate the pricing a six out of ten, where one is low, and ten is high price."
"The pricing is on the expensive side, and we are paying for a couple of items."
"I would rate the tool's pricing a one out of ten."
"The tool was fairly priced."
"It is expensive."
"The licensing fees are based on the number of lines of code."
"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."
"It follows the same licensing scheme as Tenable.io and Tenable. sc."
"I rate the product's pricing a four out of ten."
"The pricing is okay."
"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."
"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."
"Tenable.io Web Application Scanning is expensive for small businesses."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
914,322 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
27%
Computer Software Company
9%
Financial Services Firm
7%
Outsourcing Company
5%
Financial Services Firm
13%
Manufacturing Company
9%
Construction Company
7%
Outsourcing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise6
Large Enterprise31
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise7
 

Questions from the Community

How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What needs improvement with Coverity?
The price is a concern, and there are a lot of false positives coming through. Support with Coverity is adequate, but they take a longer time to respond. The core support is not straightforward, an...
What needs improvement with Tenable.io Web Application Scanning?
If there were a solution, I would like to see automation and an integrated remediation solution for vulnerability or patch management.
What advice do you have for others considering Tenable.io Web Application Scanning?
I do not understand what API approach means; I do not understand this term. I think Tenable.io Web Application Scanning is the best option on the market at the moment. My review rating for this pro...
What is your experience regarding pricing and costs for Tenable.io Web Application Scanning?
I think the price is expensive. We do not have an idea of how much we have to pay approximately, but comparing to other products, Tenable.io Web Application Scanning is expensive.
 

Also Known As

Synopsys Static Analysis
No data available
 

Overview

 

Sample Customers

SAP, Mega International, Thales Alenia Space
IMDEX
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Static Application Security Testing (SAST). Updated: September 2026.
914,322 professionals have used our research since 2012.