Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

CoveritySemgrep Code2 of 3 products

Side-by-side comparison of Coverity, Semgrep Code
Product	Coverity by Black Duck View product	Semgrep Code by Semgrep View product
Overview
What it is	Coverity is an enterprise static code analysis. It helps with deep static code analysis through MISRA compliance. Explore features and compare SAST alternatives.	What does Semgrep Code do? It covers taint analysis, PR review comments and custom rule writing. See typical use cases, cloud deployment and how it compares to rivals.
Product type	Enterprise Static Code Analysis (SAST)	Static Application Security Testing (SAST) Engine
Best for	Cross-industry, Aerospace, Automotive, FinTech, Financial Services, Software	Technology, Financial Services, E-commerce, Healthcare, Software Development
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	SaaSCloudOn-Premise	SaaSCloud
Deployment details	Cloud; On-premises; On-premises server; Cloud SaaS platform	Cloud SaaS; CLI / Local; CI/CD Pipeline; Developer CLI; CI/CD container runner; Cloud SaaS
Data residency	Global; US; EU; APAC	Local scanning / United States (Cloud)
Key features
What it offers	Patented deep static analysis Interprocedural dataflow tracking MISRA compliance Concurrency bug detection Deep static code analysis Concurrency defect detection Safety standards	Ultra-fast semantic pattern matching Uncompiled code analysis PR review comments OWASP Top 10 rule registry Custom rule writing Taint analysis Low false positive rate Fast SAST code reviews
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	Source CodeBuild SystemsEnterprise CI/CD	Source code repositoriesGit hosting platforms
Compliance	MISRACERTOWASP Top 10ISO 26262	SOC 2 Type IIISO 27001GDPR
Integrations & coverage
Integrations	GitHubGitLabJenkinsMakeMavenJiraPolaris	GitHub ActionsGitLab CIBitbucket PipelinesJenkinsJiraVS Code
Industries	Cross-industryAerospaceAutomotiveFinTechFinancial ServicesSoftware	TechnologyFinancial ServicesE-commerceHealthcareSoftware Development
Regions	Global	Global
Vendor
Company	Black Duck	Semgrep
Headquarters	Burlington, Massachusetts, USA	San Francisco, California, USA
Company size	1,001-5,000	201-500
Founded	2001	2017

Coverity

by Black Duck

View product

Semgrep Code

by Semgrep

View product

Overview

What it is

Coverity

Coverity is an enterprise static code analysis. It helps with deep static code analysis through MISRA compliance. Explore features and compare SAST alternatives.

Semgrep Code

What does Semgrep Code do? It covers taint analysis, PR review comments and custom rule writing. See typical use cases, cloud deployment and how it compares to rivals.

Product type

Coverity

Enterprise Static Code Analysis (SAST)

Semgrep Code

Static Application Security Testing (SAST) Engine

Best for

Coverity

Cross-industry, Aerospace, Automotive, FinTech, Financial Services, Software

Semgrep Code

Technology, Financial Services, E-commerce, Healthcare, Software Development

Pricing

Pricing model

Coverity

Contact Vendor

Semgrep Code

Contact Vendor

Free trial

Coverity

Semgrep Code

Deployment

Deployment options

Coverity

SaaSCloudOn-Premise

Semgrep Code

SaaSCloud

Deployment details

Coverity

Cloud; On-premises; On-premises server; Cloud SaaS platform

Semgrep Code

Cloud SaaS; CLI / Local; CI/CD Pipeline; Developer CLI; CI/CD container runner; Cloud SaaS

Data residency

Coverity

Global; US; EU; APAC

Semgrep Code

Local scanning / United States (Cloud)

Key features

What it offers

Coverity

Patented deep static analysis
Interprocedural dataflow tracking
MISRA compliance
Concurrency bug detection
Deep static code analysis
Concurrency defect detection
Safety standards

Semgrep Code

Ultra-fast semantic pattern matching
Uncompiled code analysis
PR review comments
OWASP Top 10 rule registry
Custom rule writing
Taint analysis
Low false positive rate
Fast SAST code reviews

Platform & access

API access

Coverity

Semgrep Code

Single sign-on (SSO)

Coverity

Semgrep Code

Role-based access (RBAC)

Coverity

Semgrep Code

Multi-tenant

Coverity

Semgrep Code

Mobile app

Coverity

Semgrep Code

Supported platforms

Coverity

Source CodeBuild SystemsEnterprise CI/CD

Semgrep Code

Source code repositoriesGit hosting platforms

Compliance

Coverity

MISRACERTOWASP Top 10ISO 26262

Semgrep Code

SOC 2 Type IIISO 27001GDPR

Integrations & coverage

Integrations

Coverity

GitHubGitLabJenkinsMakeMavenJiraPolaris

Semgrep Code

GitHub ActionsGitLab CIBitbucket PipelinesJenkinsJiraVS Code

Industries

Coverity

Cross-industryAerospaceAutomotiveFinTechFinancial ServicesSoftware

Semgrep Code

TechnologyFinancial ServicesE-commerceHealthcareSoftware Development

Regions

Coverity

Global

Semgrep Code

Global

Vendor

Company

Coverity

Black Duck

Semgrep Code

Semgrep

Headquarters

Coverity

Burlington, Massachusetts, USA

Semgrep Code

San Francisco, California, USA

Company size

Coverity

1,001-5,000

Semgrep Code

201-500

Founded

Coverity

2001

Semgrep Code

2017