Coverity vs Tenable.io Web Application Scanning comparison

The compared Black Duck and Tenable solutions aren't in the same category. Black Duck is ranked #4 in SAST , with an average rating of 8.0, and holds a 7.5% mindshare in the category. Tenable is ranked #20 in AS , with an average rating of 7.6, and holds a 1.3% mindshare. Additionally, 88% of Black Duck users are willing to recommend the solution, compared to 93% of Tenable users who would recommend it.

Coverity

Read 42 Coverity reviews

11,969 Views
8,281 Comparison Views

88% willing to recommend

Tenable.io Web Application ...

Read 17 Tenable.io Web Application Scanning reviews

1,948 Views
1,523 Comparison Views

93% willing to recommend

Coverity

Tenable.io Web Application ...

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Coverity and Tenable.io Web Application Scanning based on real PeerSpot user reviews.

Find out in this report how the two Static Application Security Testing (SAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Coverity vs. Tenable.io Web Application Scanning Report (Updated: September 2022).

Buyer's Guide

Coverity vs. Tenable.io Web Application Scanning

September 2022

Download the complete report

Helped 849,963 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Coverity

Average Rating

7.8

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (4th)

Tenable.io Web Application ...

Average Rating

7.8

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Application Security Tools (20th)

Mindshare comparison

Coverity and Tenable.io Web Application Scanning aren’t in the same category and serve different purposes. Coverity is designed for Static Application Security Testing (SAST) and holds a mindshare of 7.5%, up 6.6% compared to last year.
Tenable.io Web Application Scanning, on the other hand, focuses on Application Security Tools, holds 1.3% mindshare, down 1.5% since last year.

Static Application Security Testing (SAST)

Application Security Tools

Featured Reviews

Md. Shahriar Hussain

Information Security Analyst at Banglalink

Offers impressive reporting features with user-friendliness and high scalability

The solution can be easily setup but requires heavy integration due to the multiple types of port and programming languages involved. Comparing the resource requirements of the solution I would say it can be installed effortlessly. I would rate the initial setup an eight out of ten. A professional needs some pre-acquired knowledge to manage Coverity's deployment process, but the local solution partners provide support well enough for trouble-free deployment. The overall deployment process of Coverity took around two and a half hours in our organization. The deployment duration depends upon the operating system and resources including high-end RAM and CPU processors.

Read full review

Harshal Deshmukh

CEO and Managing Director at Digidata Infsystems Private Limited

Simple tool to use, good dashboard capabilities and offers asset criticality ratings

It has good dashboard capabilities and gives good results with priority ratings, asset criticality ratings, and exposure scores for vulnerabilities. It also provides automated web application scanning, which customers appreciate because it doesn't disturb the web application or hamper the business. While testing the web application, sometimes it happens that the website or application goes down. But with Tenable.io Web Application Scanning, it doesn't affect the business. It has good unified web application scanning and exposure management.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of Coverity is its software security feature called the Checker. If you share some vulnerability or weakness then the software can find any potential security bug or defect. The code integration tool enables some secure coding standards and implements some Checkers for Live Duo. So we can enable secure coding and Azure in this tool. So in our software, we can make sure our software combines some industry supervised data."

"The interface of Coverity is quite good, and it is also easy to use."

"The features I find most valuable is that our entire company can publish the analysis results into our central space."

"Coverity gives advisory and deviation features, which are some of the parts I liked."

"Coverity is easy to set up and has a less lengthy process to find vulnerabilities."

"The product is easy to use."

"The tool as it is can be used for code quality improvement."

"We were very comfortable with the initial setup."

More Coverity pros

"We use the tool for our websites. We have a vulnerable subdomain. The tool helps to scan it for vulnerabilities."

"Now that the license is centralized, it's a significant feature to manipulate assets based on their functions."

"Tenable.io Web Application Scanning is very easy to use."

"The most effective feature of the product is the ability to scan the entire environment."

"It collects the vulnerabilities on the hostnames and sends them to the Tenable.io cloud. Tenable has its own cloud where Tenable.io is running, but there are many connectors to other cloud solutions. Tenable can do vulnerability scanning for other cloud managers such as Azure, Amazon, and so on."

"I would recommend Tenable.io Web Application Scanning to others."

"All the features are valuable to us as they offer cutting-edge scanning methods and address the latest issues with a contemporary approach. Tenable.io Web Application Scanning is highly stable. I rate it a nine out ten. Since the solution works on the Cloud, it's highly scalable. I rate the scalability a nine out of ten. The setup of the solution is straightforward. The Return on Investment is substantial. I recommend the solution to all."

"Our customers adopt this solution because of the replication testing and the vulnerability assessment it can do. It is a multi-faceted product."

More Tenable.io Web Application Scanning pros

Cons

"When I put my code into Coverity for scanning, the code information of the product is in the system. The solution could be improved by providing a SBOM, a software bill of material."

"The setup takes very long."

"SCM integration is very poor in Coverity."

"Reporting engine needs to be more robust."

"The product could be enhanced by providing video troubleshooting guides, making issue resolution more accessible. Troubleshooting without visual guides can be time-consuming."

"Coverity concerns its dashboards and reporting."

"The quality of the code needs improvement."

"The product should include more customization options. The analytics is not as deep as compared to SonarQube."

More Coverity cons

"They have a general dashboard for web application scanning, but the dashboards and reporting can be improved. They probably have some features in their roadmap."

"Tenable.io Web Application Scanning conducts a general scan, which wastes time. The scan needs to be specific."

"The cloud and the on-premises versions have their own controllers, and there is no way to centrally manage controllers."

"Tenable.io Web Application Scanning is not very user-friendly and you need a lot of information to get proper reports. The tool's support is not very responsive."

"The solution's dashboards could be improved and made more user-friendly."

"I would like for them to add proxy filtering, where you can transfer and alter the package. It is fully automated. Other web application testers programs are actually proxy software, and the proxy software gives you the flexibility of modifying the outgoing package, which will actually help you in exploiting any vulnerability in detail."

"The reporting has a very limited customization capability."

"Sometimes it lags with different cloud environments."

More Tenable.io Web Application Scanning cons

Pricing and Cost Advice

"The solution is affordable."

"The solution's pricing is comparable to other products."

"Coverity’s price is on the higher side. It should be lower."

"I would rate the pricing a six out of ten, where one is low, and ten is high price."

"Coverity is very expensive."

"It is expensive."

"The pricing is very reasonable compared to other platforms. It is based on a three year license."

"I would rate the tool's pricing a one out of ten."

More Coverity pricing and cost advice

"It follows the same licensing scheme as Tenable.io and Tenable. sc."

"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."

"The pricing is okay."

"Tenable.io Web Application Scanning is expensive for small businesses."

"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."

"I rate the product's pricing a four out of ten."

"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

849,963 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

33%

Computer Software Company

14%

Financial Services Firm

Government

Financial Services Firm

14%

Computer Software Company

13%

Government

11%

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

How would you decide between Coverity and Sonarqube?

We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...

See all answers

What do you like most about Coverity?

The solution has improved our code quality and security very well.

See all answers

What is your experience regarding pricing and costs for Coverity?

I do not know about the pricing.

See all answers

What do you like most about Tenable.io Web Application Scanning?

The most effective feature of the product is the ability to scan the entire environment.

See all answers

What needs improvement with Tenable.io Web Application Scanning?

Improvements could include providing coverage reports in the free version and features related to security reports. Also, enhancing technical support would be beneficial as there is room for improv...

See all answers

What advice do you have for others considering Tenable.io Web Application Scanning?

I would recommend Tenable.io Web Application Scanning as it provides us with good reports, which help improve our code base, despite the lack of financial benefits. Overall, I would rate it seven o...

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs Coverity

Compared 50% of the time

Klocwork vs Coverity

Compared 7% of the time

Fortify on Demand vs Coverity

Compared 6% of the time

Veracode vs Coverity

Compared 5% of the time

Polyspace Code Prover vs Coverity

Compared 5% of the time

More Coverity Competitors

Acunetix vs Tenable.io Web Application Scanning

Compared 25% of the time

Qualys Web Application Scanning vs Tenable.io Web Application Scanning

Compared 13% of the time

PortSwigger Burp Suite Professional vs Tenable.io Web Application Scanning

Compared 12% of the time

Fortify on Demand vs Tenable.io Web Application Scanning

Compared 10% of the time

HCL AppScan vs Tenable.io Web Application Scanning

Compared 7% of the time

More Tenable.io Web Application Scanning Competitors

Product Reports

Buyer's Guide

Coverity

April 2025

Download Coverity product report

Buyer's Guide

Application Security Tools

April 2025

Tenable.io Web Application Scanning report

Download Tenable.io Web Application Scanning product report

Also Known As

Synopsys Static Analysis

No data available

Overview

Coverity gives you the speed, ease of use, accuracy, industry standards compliance, and scalability that you need to develop high-quality, secure applications. Coverity identifies critical software quality defects and security vulnerabilities in code as it’s written, early in the development process, when it’s least costly and easiest to fix. With the Code Sight integrated development environment (IDE) plugin, developers get accurate analysis in seconds in their IDE as they code. Precise actionable remediation advice and context-specific eLearning help your developers understand how to fix their prioritized issues quickly, without having to become security experts.

Coverity seamlessly integrates automated security testing into your CI/CD pipelines and supports your existing development tools and workflows. Choose where and how to do your development: on-premises or in the cloud with the Polaris Software Integrity Platform (SaaS), a highly scalable, cloud-based application security platform. Coverity supports more than 20 languages and 200 frameworks and templates.

Black Duck

Tenable.io Web Application Scanning safely, accurately and automatically scans your web applications, providing deep visibility into vulnerabilities and valuable context to prioritize remediation.

Tenable

Sample Customers

SAP, Mega International, Thales Alenia Space

IMDEX

Buyer's Guide

Coverity vs. Tenable.io Web Application Scanning

September 2022

Free Report: Coverity vs. Tenable.io Web Application Scanning

Find out what your peers are saying about Coverity vs. Tenable.io Web Application Scanning and other solutions. Updated: September 2022.

DOWNLOAD NOW

849,963 professionals have used our research since 2012.

See our Coverity vs. Tenable.io Web Application Scanning report.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.