Coverity vs Fortify Software Security Center comparison

Cancel
You must select at least 2 products to compare!
Synopsys Logo
17,611 views|11,453 comparisons
88% willing to recommend
OpenText Logo
376 views|300 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Coverity and Fortify Software Security Center based on real PeerSpot user reviews.

Find out in this report how the two Static Application Security Testing (SAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Coverity vs. Fortify Software Security Center Report (Updated: May 2024).
771,170 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"Coverity is quite stable and we haven’t had any issues or any downtime.""The most valuable feature of Coverity is its software security feature called the Checker. If you share some vulnerability or weakness then the software can find any potential security bug or defect. The code integration tool enables some secure coding standards and implements some Checkers for Live Duo. So we can enable secure coding and Azure in this tool. So in our software, we can make sure our software combines some industry supervised data.""We were very comfortable with the initial setup.""The security analysis features are the most valuable features of this solution.""I encountered a bug with Coverity, and I opened a ticket. Support provided me with a workaround. So it's working at the moment, or at least it seems to be.""It has the lowest false positives.""It's very stable.""The most valuable feature is that there were not a whole lot of false positives, at least on the codebases that I looked at."

More Coverity Pros →

"This is a stable solution at the end of the day.""The reporting is very useful because you can always view an entire list of the issues that you have.""You can easily download the tool's rule packs and update them."

More Fortify Software Security Center Pros →

Cons
"Coverity takes a lot of time to dereference null pointers.""Some features are not performing well, like duplicate detection and switch case situations.""The product lacks sufficient customization options.""SCM integration is very poor in Coverity.""We'd like it to be faster.""The setup takes very long.""Reporting engine needs to be more robust.""The level of vulnerability that this solution covers could be improved compared to other open source tools."

More Coverity Cons →

"We are having issues with false positives that need to be resolved.""Fortify Software Security Center's setup is really painful.""This solution is difficult to implement, and it should be made more comfortable for the end-users."

More Fortify Software Security Center Cons →

Pricing and Cost Advice
  • "Coverity is quite expensive."
  • "The licensing fees are based on the number of lines of code."
  • "The price is competitive with other solutions."
  • "It is expensive."
  • "Coverity is very expensive."
  • "This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced. Licensing is done on an annual basis."
  • "The pricing is very reasonable compared to other platforms. It is based on a three year license."
  • "The pricing is on the expensive side, and we are paying for a couple of items."
  • More Coverity Pricing and Cost Advice →

  • "This is a costly solution that could be cheaper."
  • "The solution is priced fair."
  • More Fortify Software Security Center Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
    771,170 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing… more »
    Top Answer:The solution has improved our code quality and security very well.
    Ranking
    Views
    17,611
    Comparisons
    11,453
    Reviews
    22
    Average Words per Review
    382
    Rating
    8.0
    Views
    376
    Comparisons
    300
    Reviews
    1
    Average Words per Review
    247
    Rating
    8.0
    Comparisons
    Also Known As
    Synopsys Static Analysis
    Micro Focus Software Security Center, Application Security Center, HPE Application Security Center, WebInspect
    Learn More
    Overview

    Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts. 

    Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports 22 languages and over 70 frameworks and templates.

    Software Security Center enables management, development, and security teams to work together to triage, track, validate, automate, and manage software security activities.
    Sample Customers
    MStar Semiconductor, Alcatel-Lucent
    Neosecure, Acxiom, Skandinavisk Data Center A/S, Parkeon
    Top Industries
    REVIEWERS
    Manufacturing Company36%
    Comms Service Provider20%
    Computer Software Company20%
    Retailer8%
    VISITORS READING REVIEWS
    Manufacturing Company28%
    Computer Software Company16%
    Financial Services Firm8%
    Government4%
    VISITORS READING REVIEWS
    Financial Services Firm17%
    Manufacturing Company15%
    Computer Software Company9%
    Government7%
    Company Size
    REVIEWERS
    Small Business16%
    Midsize Enterprise14%
    Large Enterprise70%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise10%
    Large Enterprise76%
    VISITORS READING REVIEWS
    Small Business19%
    Midsize Enterprise16%
    Large Enterprise66%
    Buyer's Guide
    Coverity vs. Fortify Software Security Center
    May 2024
    Find out what your peers are saying about Coverity vs. Fortify Software Security Center and other solutions. Updated: May 2024.
    771,170 professionals have used our research since 2012.

    Coverity is ranked 4th in Static Application Security Testing (SAST) with 33 reviews while Fortify Software Security Center is ranked 27th in Static Application Security Testing (SAST) with 3 reviews. Coverity is rated 7.8, while Fortify Software Security Center is rated 7.4. The top reviewer of Coverity writes "Best SAST tool to check software quality issues". On the other hand, the top reviewer of Fortify Software Security Center writes "A fair-priced solution that helps with application security testing ". Coverity is most compared with SonarQube, Klocwork, Fortify on Demand, Checkmarx One and Veracode, whereas Fortify Software Security Center is most compared with Fortify on Demand, Tricentis Tosca, Checkmarx One and Fortify WebInspect. See our Coverity vs. Fortify Software Security Center report.

    See our list of best Static Application Security Testing (SAST) vendors.

    We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.