We performed a comparison between Checkmarx One and Coverity based on real PeerSpot user reviews.
Find out in this report how the two Application Security Testing (AST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It gives the proper code flow of vulnerabilities and the number of occurrences."
"The most valuable feature is the simple user interface."
"The value you can get out of the speedy production may be worth the price tag."
"The main benefit to using this solution is that we find vulnerabilities in our software before the development cycle is complete."
"The UI is user-friendly."
"Compared to the solutions we used previously, Checkmarx has reduced our workload by almost 75%."
"Less false positive errors as compared to any other solution."
"Our static operation security has been able to identify more security issues since implementing this solution."
"The app analysis is the most valuable feature as I know other solutions don't have that."
"The most valuable feature of Coverity is the wrapper. We use the wrapper to build the C++ component, then we use the other code analysis to analyze the code to the build object, and then send back the result to the SonarQube server. Additionally, it is a powerful capabilities solution."
"The solution effectively identifies bugs in code."
"The ability to scan code gives us details of existing and potential vulnerabilities. What really matters for us is to ensure that we are able to catch vulnerabilities ahead of time."
"It's pretty stable. I rate the stability of Coverity nine out of ten."
"The most valuable feature of Coverity is that it shows examples of what is actually wrong with the code."
"The product is easy to use."
"Coverity gives advisory and deviation features, which are some of the parts I liked."
"Some of the descriptions were found to be missing or were not as elaborate as compared to other descriptions. Although, they could be found across various standard sources but it would save a lot of time for developers, if this was fixed."
"It would be really helpful if the level of confidence was included, with respect to identified issues."
"I would like the product to include more debugging and developed tools. It needs to also add enhancements on the coding side."
"Updating and debugging of queries is not very convenient."
"When we first ran it on a big project, there wasn't enough memory on the computer. It originally ran with eight gigabytes, and now it runs with 32. The software stopped at some point, and while I don't think it said it ran out of memory, it just said "stopped" and something else. We had to go to the logs and send them to the integrator, and eventually, they found a memory issue in the logs and recommended increasing the memory. We doubled it once, and it didn't seem enough. We doubled it again, and it helped."
"We have received some feedback from our customers who are receiving a large number of false positives."
"The pricing can get a bit expensive, depending on the company's size."
"Its user interface could be improved and made more friendly."
"The setup takes very long."
"The solution is a bit complex to use in comparison to other products that have many plugins."
"When I put my code into Coverity for scanning, the code information of the product is in the system. The solution could be improved by providing a SBOM, a software bill of material."
"The solution's user interface and quality gate could be improved."
"The quality of the code needs improvement."
"Right now, the Coverity executable is around 1.2GB to download. If they can reduce it to approximately 600 or 700MB, that would be great. If they decrease the executable, it will be much easier to work in an environment like Docker."
"Some features are not performing well, like duplicate detection and switch case situations."
"Coverity is not stable."
Checkmarx One is ranked 3rd in Application Security Testing (AST) with 67 reviews while Coverity is ranked 4th in Application Security Testing (AST) with 33 reviews. Checkmarx One is rated 7.6, while Coverity is rated 7.8. The top reviewer of Checkmarx One writes "The report function is a great, configurable asset but sometimes yields false positives". On the other hand, the top reviewer of Coverity writes "Best SAST tool to check software quality issues". Checkmarx One is most compared with SonarQube, Veracode, Fortify on Demand, Snyk and Mend.io, whereas Coverity is most compared with SonarQube, Klocwork, Fortify on Demand, Veracode and Polyspace Code Prover. See our Checkmarx One vs. Coverity report.
See our list of best Application Security Testing (AST) vendors.
We monitor all Application Security Testing (AST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
