Coverity Static vs Tenable.io Web Application Scanning comparison

The compared Black Duck and Tenable solutions aren't in the same category. Black Duck is ranked #6 in SAST , with an average rating of 8.0, and holds a 4.7% mindshare in the category. Tenable is ranked #15 in AS , with an average rating of 8.5, and holds a 1.4% mindshare. Additionally, 89% of Black Duck users are willing to recommend the solution, compared to 94% of Tenable users who would recommend it.

Coverity Static

Read 43 Coverity Static reviews

10,199 Views
8,567 Comparison Views

89% willing to recommend

Tenable.io Web Application ...

Read 18 Tenable.io Web Application Scanning reviews

1,996 Views
1,597 Comparison Views

94% willing to recommend

Coverity Static

Tenable.io Web Application ...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Coverity Static and Tenable.io Web Application Scanning based on real PeerSpot user reviews.

Find out in this report how the two Static Application Security Testing (SAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Coverity Static vs. Tenable.io Web Application Scanning Report (Updated: September 2022).

Buyer's Guide

Coverity Static vs. Tenable.io Web Application Scanning

September 2022

Download the complete report

Helped 881,114 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Coverity Static

Average Rating

7.8

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (6th)

Tenable.io Web Application ...

Average Rating

7.8

Reviews Sentiment

5.8

Number of Reviews

Ranking in other categories

Application Security Tools (15th)

Mindshare comparison

Coverity Static and Tenable.io Web Application Scanning aren’t in the same category and serve different purposes. Coverity Static is designed for Static Application Security Testing (SAST) and holds a mindshare of 4.7%, down 8.0% compared to last year.
Tenable.io Web Application Scanning, on the other hand, focuses on Application Security Tools, holds 1.4% mindshare, up 1.2% since last year.

Static Application Security Testing (SAST) Market Share Distribution
Product	Market Share (%)
Coverity Static	4.7%
SonarQube	18.8%
Checkmarx One	10.4%
Other	66.1%

Static Application Security Testing (SAST)

Application Security Tools Market Share Distribution
Product	Market Share (%)
Tenable.io Web Application Scanning	1.4%
SonarQube	17.9%
Checkmarx One	10.2%
Other	70.5%

Application Security Tools

Featured Reviews

Kasiraja Thangapandian

Software Engineering Manager at Visteon Corporation

Using tools for compliance is beneficial but cost concerns persist

We have been using Coverity for quite a long period. It has been fine for our needs. I would rate Coverity between eight to nine, though the cost is high. I would rate their support from Coverity as six. That is the main complaint, but we still appreciate having it.

Read full review

Jonathan-Pereira

Cyber Security Architect at a comms service provider with 10,001+ employees

Centralized license management transforms asset manipulation based on functions and improves security posture

Now that the license is centralized, it's a significant feature to manipulate assets based on their functions. It provides a centralized view from end-to-end to its assets' identities and vulnerabilities. One of the greatest features is Kubernetes. The automated scanning capability is pretty standard in the market, and Tenable's prioritization engine helps improve the security posture.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The app analysis is the most valuable feature as I know other solutions don't have that."

"The reporting feature is up to the mark."

"One of the most valuable features is Contributing Events. That particular feature helps the developer understand the root cause of a defect. So you can locate the starting point of the defect and figure out exactly how it is being exploited."

"This solution is easy to use."

"The solution has helped to increase staff productivity and improved our work significantly by approximately 20 percent."

"Coverity is easy to set up and has a less lengthy process to find vulnerabilities."

"Provides software security, and helps to find potential security bugs or defects."

"The most valuable feature is the integration with Jenkins."

More Coverity Static pros

"It collects the vulnerabilities on the hostnames and sends them to the Tenable.io cloud. Tenable has its own cloud where Tenable.io is running, but there are many connectors to other cloud solutions. Tenable can do vulnerability scanning for other cloud managers such as Azure, Amazon, and so on."

"All the features are valuable to us as they offer cutting-edge scanning methods and address the latest issues with a contemporary approach. Tenable.io Web Application Scanning is highly stable. I rate it a nine out ten. Since the solution works on the Cloud, it's highly scalable. I rate the scalability a nine out of ten. The setup of the solution is straightforward. The Return on Investment is substantial. I recommend the solution to all."

"The initial setup is straightforward."

"We use the tool for our websites. We have a vulnerable subdomain. The tool helps to scan it for vulnerabilities."

"Tenable provides the end analysis results covering all the published vulnerabilities and information on the market."

"The solution is stable."

"Now that the license is centralized, it's a significant feature to manipulate assets based on their functions."

"The solution's instant reports feature is the most effective for detecting threats."

More Tenable.io Web Application Scanning pros

Cons

"Coverity could improve the ease of use. Sometimes things become difficult and you need to follow the guides from the website but the guides could be better."

"The reporting tool integration process is sometimes slow."

"Sometimes, vulnerabilities remain unidentified even after setting up the rules."

"We're currently facing a primary challenge with automation using Coverity. Each developer has a license and can perform manual checks, and we also have a nightly build that analyzes the entire software. The main issue is that the tool can't look behind submodules in our code base, so it doesn't see changes stored there."

"We actually specified several checkers, but we found some checkers had a higher false positive rate. I think this is a problem. Because we have to waste some time is really the issue because the issue is not an issue. I mean, the tool pauses or an issue, but the same issue is the filter now.Some check checkers cannot find some issues, but sometimes they find issues that are not relevant, right, that are not really issues. Some customisation mechanism can be added in the next release so that we can define our Checker. The Modelling feature provided by Coverity helps in finding more information for potential issues but it is not mature enough, it should be mature. The fast testing feature for security testing campaign can be added as well. So if you correctly integrate it with the training team, maybe you can help us to find more potential issues."

"There should be additional IDE support."

"Some features are not performing well, like duplicate detection and switch case situations."

"The tool needs to improve its reporting."

More Coverity Static cons

"The market is standard for vulnerability scanning, however, the posture can be improved through Tenable's prioritization engine."

"Tenable.io Web Application Scanning conducts a general scan, which wastes time. The scan needs to be specific."

"The solution's dashboards could be improved and made more user-friendly."

"I would like for them to add proxy filtering, where you can transfer and alter the package. It is fully automated. Other web application testers programs are actually proxy software, and the proxy software gives you the flexibility of modifying the outgoing package, which will actually help you in exploiting any vulnerability in detail."

"We have encountered some problems with the technical support from Tenable; I would rate it a five out of ten. It is not efficacious, especially the first-level support."

"The reporting has a very limited customization capability."

"The report customization needs to be better."

"It isn't easy to manage vulnerabilities in Tenable."

More Tenable.io Web Application Scanning cons

Pricing and Cost Advice

"I would rate the pricing a six out of ten, where one is low, and ten is high price."

"The pricing is very reasonable compared to other platforms. It is based on a three year license."

"The tool's price is somewhere in the middle. It's neither cheap nor expensive. I would rate the pricing a five out of ten."

"This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced. Licensing is done on an annual basis."

"Coverity’s price is on the higher side. It should be lower."

"The tool was fairly priced."

"Offers varying prices for different companies"

"I rate Coverity's price a ten on a scale of one to ten, where one is cheap and ten is expensive."

More Coverity Static pricing and cost advice

"I rate the product's pricing a four out of ten."

"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."

"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."

"Tenable.io Web Application Scanning is expensive for small businesses."

"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."

"The pricing is okay."

"It follows the same licensing scheme as Tenable.io and Tenable. sc."

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

881,114 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

32%

Computer Software Company

12%

Financial Services Firm

Healthcare Company

Financial Services Firm

13%

Computer Software Company

10%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	8
Midsize Enterprise	6
Large Enterprise	31

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	5
Large Enterprise	7

Questions from the Community

How would you decide between Coverity and Sonarqube?

We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...

See all answers

What do you like most about Coverity?

The solution has improved our code quality and security very well.

See all answers

What is your experience regarding pricing and costs for Coverity?

I do not know about the pricing.

See all answers

What do you like most about Tenable.io Web Application Scanning?

The most effective feature of the product is the ability to scan the entire environment.

See all answers

What needs improvement with Tenable.io Web Application Scanning?

If there were a solution, I would like to see automation and an integrated remediation solution for vulnerability or patch management.

See all answers

What advice do you have for others considering Tenable.io Web Application Scanning?

I do not understand what API approach means; I do not understand this term. I think Tenable.io Web Application Scanning is the best option on the market at the moment. My review rating for this pro...

See all answers

Comparisons

SonarQube vs Coverity Static

Compared 32% of the time

Klocwork vs Coverity Static

Compared 8% of the time

CodeSonar vs Coverity Static

Compared 6% of the time

Veracode vs Coverity Static

Compared 6% of the time

Polyspace Code Prover vs Coverity Static

Compared 6% of the time

More Coverity Static Competitors

Acunetix vs Tenable.io Web Application Scanning

Compared 14% of the time

CrowdStrike Falcon Cloud Security vs Tenable.io Web Application Scanning

Compared 8% of the time

Qualys Web Application Scanning vs Tenable.io Web Application Scanning

Compared 8% of the time

PortSwigger Burp Suite Professional vs Tenable.io Web Application Scanning

Compared 7% of the time

SonarQube vs Tenable.io Web Application Scanning

Compared 7% of the time

More Tenable.io Web Application Scanning Competitors

Product Reports

Buyer's Guide

Coverity Static

January 2026

Download Coverity Static product report

Buyer's Guide

Application Security Tools

January 2026

Tenable.io Web Application Scanning report

Download Tenable.io Web Application Scanning product report

Also Known As

Synopsys Static Analysis

No data available

Overview

Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts.

Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports more than 20 languages and 200 frameworks and templates.

Black Duck

Tenable.io Web Application Scanning safely, accurately and automatically scans your web applications, providing deep visibility into vulnerabilities and valuable context to prioritize remediation.

Tenable

Sample Customers

SAP, Mega International, Thales Alenia Space

IMDEX

Buyer's Guide

Coverity Static vs. Tenable.io Web Application Scanning

September 2022

Free Report: Coverity Static vs. Tenable.io Web Application Scanning

Find out what your peers are saying about Coverity Static vs. Tenable.io Web Application Scanning and other solutions. Updated: September 2022.

DOWNLOAD NOW

881,114 professionals have used our research since 2012.

See our Coverity Static vs. Tenable.io Web Application Scanning report.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.