Try our new research platform with insights from 80,000+ expert users

Coverity Static vs GitLab comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coverity Static
Ranking in Static Application Security Testing (SAST)
4th
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
43
Ranking in other categories
No ranking in other categories
GitLab
Ranking in Static Application Security Testing (SAST)
7th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
86
Ranking in other categories
Application Security Tools (11th), Build Automation (1st), Release Automation (2nd), Rapid Application Development Software (11th), Software Composition Analysis (SCA) (5th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (1st)
 

Mindshare comparison

As of September 2025, in the Static Application Security Testing (SAST) category, the mindshare of Coverity Static is 6.3%, down from 7.1% compared to the previous year. The mindshare of GitLab is 2.4%, down from 2.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Market Share Distribution
ProductMarket Share (%)
Coverity6.3%
GitLab2.4%
Other91.3%
Static Application Security Testing (SAST)
 

Featured Reviews

Jaile Sebes - PeerSpot reviewer
Resolving critical software issues demands faster implementation and better integration
We use Coverity primarily to find issues such as software bugs and memory leaks, especially in C++ and C# projects. It helps us identify deadlocks, synchronization issues, and product crashes Coverity has been instrumental in resolving product crashes by detecting various issues like deadlocks.…
Rohit Kesharwani - PeerSpot reviewer
Improved agility and time to market with CI/CD enhancements
The CI/CD pipelines in GitLab are highly valuable. Another important feature is the single source of repository, allowing efficient repository management and source code management. GitLab provides manageability by allowing us to manage source code effectively through separate repositories. Additionally, GitLab enables the creation of individual CI/CD pipelines for each repository, making software more agile. By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The product is easy to use."
"Considering the analysis part and the benchmarking process involving the product that my company carried out, the solution is good for finding bugs and violations"
"The security analysis features are the most valuable features of this solution."
"The most valuable feature of Coverity is the wrapper. We use the wrapper to build the C++ component, then we use the other code analysis to analyze the code to the build object, and then send back the result to the SonarQube server. Additionally, it is a powerful capabilities solution."
"We were very comfortable with the initial setup."
"The reporting feature is up to the mark."
"Coverity is easy to set up and has a less lengthy process to find vulnerabilities."
"Coverity gives advisory and deviation features, which are some of the parts I liked."
"Git merging allows us to track the details of how and who has done what; this is the best feature which is useful for all companies."
"GitLab is very useful for pipelines, continuous integration, and continuous deployment. It is also stable."
"GitLab is being used as a repository for our codebase and it is a one stop DevOps tool we use in our team."
"I have found the most valuable feature is security control. I also like the branching and cloning software."
"The solution makes the CI/CD pipelines easy to execute."
"The scalability is good."
"This product is always evolving, and they listen to the customers."
"It is very flexible and easy because you can store data on cloud."
 

Cons

"Coverity could improve the ease of use. Sometimes things become difficult and you need to follow the guides from the website but the guides could be better."
"When I put my code into Coverity for scanning, the code information of the product is in the system. The solution could be improved by providing a SBOM, a software bill of material."
"The tool needs to improve its reporting."
"Zero-day vulnerability identification can be an add-on feature that Coverity can provide."
"The level of vulnerability that this solution covers could be improved compared to other open source tools."
"They could improve the usability. For example, how you set things up, even though it's straightforward, it could be still be easier."
"Its price can be improved. Price is always an issue with Synopsys."
"Reporting engine needs to be more robust."
"There is a need to improve or adopt AI into the ecosystem like a co-pilot, which Microsoft has done with GitHub."
"I would like to see AI support in GitLab."
"You need to have a good knowledge of the product in order to use it."
"The solution could improve by providing more integration into the CI/CD pipeline, an autocomplete search tool, and more supporting documentation."
"It can be free for commercial use."
"It is a little complex to set up the pipelines within the solution."
"It would be really good if they integrated more features in application security."
"The solution could be faster."
 

Pricing and Cost Advice

"The solution's pricing is comparable to other products."
"The licensing fees are based on the number of lines of code."
"Coverity’s price is on the higher side. It should be lower."
"I would rate the tool's pricing a one out of ten."
"Depending on the usage types, one has to opt for different types of licenses from Coverity, especially to be able to use areas like report viewing or report generation."
"Coverity is quite expensive."
"The tool was fairly priced."
"The pricing is on the expensive side, and we are paying for a couple of items."
"The solution is based on a subscription model and is reasonably priced."
"GitLab is a free solution to use."
"I don't mind the price because I use the free version."
"This is an open-source solution."
"This product is not very expensive but the price can be better."
"The solution is free."
"Regarding pricing, I would rate GitLab as moderately priced, maybe around a seven or eight out of ten. It could be more flexible for clients but generally offers good value."
"The price is okay."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
867,370 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
32%
Computer Software Company
14%
Financial Services Firm
6%
Government
4%
Financial Services Firm
14%
Computer Software Company
13%
Government
11%
Manufacturing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise6
Large Enterprise31
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise9
Large Enterprise42
 

Questions from the Community

How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What do you like most about Coverity?
The solution has improved our code quality and security very well.
What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
What is your experience regarding pricing and costs for GitLab?
The pricing and cost are on par with other tools and are neither too expensive nor cheap.
What needs improvement with GitLab?
Regarding improvements, making task management is something that GitLab can potentially make easier, similar to what DevOps or Jira does.
 

Also Known As

Synopsys Static Analysis
Fuzzit
 

Overview

 

Sample Customers

SAP, Mega International, Thales Alenia Space
1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Find out what your peers are saying about Coverity Static vs. GitLab and other solutions. Updated: September 2025.
867,370 professionals have used our research since 2012.