Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Coverity by Black Duck View product | AppScan Source by HCLSoftware View product |
|---|---|---|
| Overview | ||
| What it is | Coverity is an enterprise static code analysis. It helps with deep static code analysis through MISRA compliance. Explore features and compare SAST alternatives. | Get the facts on AppScan Source: IDE integration. Built for build automation gating. Compare it with other Application Security Testing options before you decide. |
| Product type | Enterprise Static Code Analysis (SAST) | Desktop Static Application Security Testing (SAST) Suite |
| Best for | Cross-industry, Aerospace, Automotive, FinTech, Financial Services, Software | Software Developers, AppSec Engineers, Code Reviewers, Financial Services, Aerospace & Defense, Healthcare, High Tech |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | On-Premise |
| Deployment details | Cloud; On-premises; On-premises server; Cloud SaaS platform | On-premises Installable Software; Desktop/Server; Installable Desktop & Server Application |
| Data residency | Global; US; EU; APAC | Customer-hosted code sovereignty |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Source CodeBuild SystemsEnterprise CI/CD | Source Code RepositoriesDeveloper WorkstationsBuild Servers |
| Compliance | MISRACERTOWASP Top 10ISO 26262 | PCI-DSS 4.0OWASP Top 10CWE/SANS Top 25NISTDISA STIG |
| Integrations & coverage | ||
| Integrations | GitHubGitLabJenkinsMakeMavenJiraPolaris | Visual StudioEclipseJenkinsJiraHCL AppScan Enterprise |
| Industries | Cross-industryAerospaceAutomotiveFinTechFinancial ServicesSoftware | Software DevelopersAppSec EngineersCode ReviewersFinancial ServicesAerospace & DefenseHealthcare+1 more |
| Regions | Global | Global enterprise deployments |
| Vendor | ||
| Company | Black Duck | HCLSoftware |
| Headquarters | Burlington, Massachusetts, USA | Noida, India |
| Company size | 1,001-5,000 | 10,000+ |
| Founded | 2001 | 2017 |
Overview
What it is
Coverity
Coverity is an enterprise static code analysis. It helps with deep static code analysis through MISRA compliance. Explore features and compare SAST alternatives.AppScan Source
Get the facts on AppScan Source: IDE integration. Built for build automation gating. Compare it with other Application Security Testing options before you decide.Product type
Coverity
Enterprise Static Code Analysis (SAST)AppScan Source
Desktop Static Application Security Testing (SAST) SuiteBest for
Coverity
Cross-industry, Aerospace, Automotive, FinTech, Financial Services, SoftwareAppScan Source
Software Developers, AppSec Engineers, Code Reviewers, Financial Services, Aerospace & Defense, Healthcare, High TechPricing
Pricing model
Coverity
Contact VendorAppScan Source
Contact VendorFree trial
Coverity
Free trial: yesAppScan Source
Free trial: yesDeployment
Deployment options
Coverity
SaaSCloudOn-Premise
AppScan Source
On-Premise
Deployment details
Coverity
Cloud; On-premises; On-premises server; Cloud SaaS platformAppScan Source
On-premises Installable Software; Desktop/Server; Installable Desktop & Server ApplicationData residency
Coverity
Global; US; EU; APACAppScan Source
Customer-hosted code sovereigntyKey features
What it offers
Coverity
- Patented deep static analysis
- Interprocedural dataflow tracking
- MISRA compliance
- Concurrency bug detection
- Deep static code analysis
- Concurrency defect detection
- Safety standards
AppScan Source
- Deep static code analysis (SAST)
- Inter-procedural dataflow tracing
- Custom rule authoring
- IDE integration
- Automated build CLI
- Legacy language support
- Early SDLC vulnerability identification
- Secure code review auditing
Platform & access
API access
Coverity
API access: yesAppScan Source
API access: yesSingle sign-on (SSO)
Coverity
SSO: yesAppScan Source
SSO: noRole-based access (RBAC)
Coverity
RBAC: yesAppScan Source
RBAC: yesMulti-tenant
Coverity
Multi-tenant: yesAppScan Source
Multi-tenant: yesMobile app
Coverity
Mobile app: noAppScan Source
Mobile app: noSupported platforms
Coverity
Source CodeBuild SystemsEnterprise CI/CD
AppScan Source
Source Code RepositoriesDeveloper WorkstationsBuild Servers
Compliance
Coverity
MISRACERTOWASP Top 10ISO 26262
AppScan Source
PCI-DSS 4.0OWASP Top 10CWE/SANS Top 25NISTDISA STIG
Integrations & coverage
Integrations
Coverity
GitHubGitLabJenkinsMakeMavenJiraPolaris
AppScan Source
Visual StudioEclipseJenkinsJiraHCL AppScan Enterprise
Industries
Coverity
Cross-industryAerospaceAutomotiveFinTechFinancial ServicesSoftware
AppScan Source
Software DevelopersAppSec EngineersCode ReviewersFinancial ServicesAerospace & DefenseHealthcare+1 more
Regions
Coverity
Global
AppScan Source
Global enterprise deployments
Vendor
Company
Coverity
Black DuckAppScan Source
HCLSoftwareHeadquarters
Coverity
Burlington, Massachusetts, USAAppScan Source
Noida, IndiaCompany size
Coverity
1,001-5,000AppScan Source
10,000+Founded
Coverity
2001AppScan Source
2017