Coverity vs Semmle QL comparison

Cancel
You must select at least 2 products to compare!
Synopsys Logo
18,401 views|11,920 comparisons
Semmle Logo
335 views|286 comparisons
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Coverity and Semmle QL based on real PeerSpot user reviews.

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Testing (AST).
To learn more, read our detailed Application Security Testing (AST) Report (Updated: March 2024).
765,234 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pricing and Cost Advice
  • "Coverity is quite expensive."
  • "The licensing fees are based on the number of lines of code."
  • "The price is competitive with other solutions."
  • "It is expensive."
  • "Coverity is very expensive."
  • "This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced. Licensing is done on an annual basis."
  • "The pricing is very reasonable compared to other platforms. It is based on a three year license."
  • "The pricing is on the expensive side, and we are paying for a couple of items."
  • More Coverity Pricing and Cost Advice →

    Information Not Available
    report
    Use our free recommendation engine to learn which Application Security Testing (AST) solutions are best for your needs.
    765,234 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing… more »
    Top Answer:The solution has improved our code quality and security very well.
    Ask a question

    Earn 20 points

    Ranking
    Views
    18,401
    Comparisons
    11,920
    Reviews
    22
    Average Words per Review
    382
    Rating
    8.0
    Views
    335
    Comparisons
    286
    Reviews
    0
    Average Words per Review
    0
    Rating
    N/A
    Comparisons
    SonarQube logo
    Compared 52% of the time.
    Klocwork logo
    Compared 9% of the time.
    Fortify on Demand logo
    Compared 6% of the time.
    Checkmarx logo
    Compared 6% of the time.
    Veracode logo
    Compared 5% of the time.
    SonarQube logo
    Compared 31% of the time.
    Polyspace Code Prover logo
    Compared 26% of the time.
    Fortify on Demand logo
    Compared 24% of the time.
    Checkmarx logo
    Compared 19% of the time.
    Also Known As
    Synopsys Static Analysis
    Learn More
    Semmle
    Video Not Available
    Overview

    Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts. 

    Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports 22 languages and over 70 frameworks and templates.

    Our mission is to help everyone involved in software engineering create secure and trustworthy code without slowing down.

    Combining the fields of databases, programming languages, data science and security we're making the world’s software truly searchable, so that even deep meaningful questions about security can be answered, helping software organizations better understand their code, engineering processes and people.

    Sample Customers
    MStar Semiconductor, Alcatel-Lucent
    NASA Jet Propulsion Laboratory (JPL), Murex, Trafigura, Dell, Dropbox, Nordea, Citi, Credit Suisse
    Top Industries
    REVIEWERS
    Manufacturing Company36%
    Computer Software Company23%
    Comms Service Provider14%
    Retailer9%
    VISITORS READING REVIEWS
    Manufacturing Company27%
    Computer Software Company16%
    Financial Services Firm7%
    Government5%
    VISITORS READING REVIEWS
    Computer Software Company16%
    Financial Services Firm16%
    Comms Service Provider12%
    Government10%
    Company Size
    REVIEWERS
    Small Business18%
    Midsize Enterprise15%
    Large Enterprise68%
    VISITORS READING REVIEWS
    Small Business13%
    Midsize Enterprise10%
    Large Enterprise76%
    VISITORS READING REVIEWS
    Small Business20%
    Midsize Enterprise8%
    Large Enterprise73%
    Buyer's Guide
    Application Security Testing (AST)
    March 2024
    Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Testing (AST). Updated: March 2024.
    765,234 professionals have used our research since 2012.

    Coverity is ranked 4th in Application Security Testing (AST) with 33 reviews while Semmle QL is ranked 38th in Application Security Tools. Coverity is rated 7.8, while Semmle QL is rated 0.0. The top reviewer of Coverity writes "Best SAST tool to check software quality issues". On the other hand, Coverity is most compared with SonarQube, Klocwork, Fortify on Demand, Checkmarx and Veracode, whereas Semmle QL is most compared with SonarQube, Polyspace Code Prover, Fortify on Demand and Checkmarx.

    We monitor all Application Security Testing (AST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.