No more typing reviews! Try our Samantha, our new voice AI agent.

Coverity Static vs Synopsys API Security Testing [EOL] comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coverity Static
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
43
Ranking in other categories
Static Application Security Testing (SAST) (16th)
Synopsys API Security Testi...
Average Rating
7.0
Number of Reviews
1
Ranking in other categories
No ranking in other categories
 

Featured Reviews

Jaile Sebes - PeerSpot reviewer
Senior Software Architect at a tech vendor with 10,001+ employees
Resolving critical software issues demands faster implementation and better integration
We use Coverity primarily to find issues such as software bugs and memory leaks, especially in C++ and C# projects. It helps us identify deadlocks, synchronization issues, and product crashes Coverity has been instrumental in resolving product crashes by detecting various issues like deadlocks.…
UmarQureshi - PeerSpot reviewer
Security Lead at a retailer with 10,001+ employees
Useful threat vectors, beneficial results, but implementation needed support
We are using Synopsys API Security Testing for scanning APIs for risks and vulnerabilities and to understand our posture before deployment within our business The most valuable features of Synopsys API Security Testing are the metrics, results, and threat vectors that it shares. I have been…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The ability to scan code gives us details of existing and potential vulnerabilities. What really matters for us is to ensure that we are able to catch vulnerabilities ahead of time."
"It's pretty stable. I rate the stability of Coverity nine out of ten."
"The tool as it is can be used for code quality improvement."
"Coverity integrates with issue-tracking systems like Jira and provides email notifications, alerts, and other features."
"It provides reports about a lot of potential defects."
"Considering the analysis part and the benchmarking process involving the product that my company carried out, the solution is good for finding bugs and violations"
"We were very comfortable with the initial setup."
"The interface of Coverity is quite good, and it is also easy to use."
"The most valuable features of Synopsys API Security Testing are the metrics, results, and threat vectors that it shares."
"The technical support from Synopsys API Security Testing is amazing."
 

Cons

"This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced."
"Coverity takes a lot of time to dereference null pointers."
"Reporting engine needs to be more robust. Custom reporting is a must have."
"SCM integration is very poor in Coverity."
"We use GitHub and Gitflow, and Coverity does not fit with Gitflow. I have to create a screen for our branches, and it's a pain for developers. It has been difficult to integrate Coverity with our system."
"It is an expensive solution. Their sales team is very arrogant."
"I would like to see integration with popular IDEs, such as Eclipse."
"Coverity's implementation cycle is very slow when integrating changes, especially for problems related to event handling and memory leaks."
"We haven't covered all the areas yet in our business. It's still being scaled up within the organization. We've probably covered 10 percent of the business. I don't think we've seen a proper ROI yet."
"The solution required us to use our team and we spoke to Synopsys API Security Testing's support to do the implementation. We use two people from our team for the implementation. and one person for maintenance."
 

Pricing and Cost Advice

"The solution's pricing is comparable to other products."
"I would rate the pricing a six out of ten, where one is low, and ten is high price."
"Depending on the usage types, one has to opt for different types of licenses from Coverity, especially to be able to use areas like report viewing or report generation."
"The licensing fees are based on the number of lines of code."
"The tool was fairly priced."
"The price is competitive with other solutions."
"I would rate Coverity's pricing as a nine out of ten. It's already very expensive, and it's a problem for us to get more licenses due to the price. The pricing model has some good aspects - for example, a personal license gives access to all languages without code limitations, which is better than some competitors. However, it's still a lot of money for us to spend."
"The tool's price is somewhere in the middle. It's neither cheap nor expensive. I would rate the pricing a five out of ten."
Information not available
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
920,769 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
25%
Computer Software Company
9%
Financial Services Firm
7%
Comms Service Provider
6%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise6
Large Enterprise31
No data available
 

Questions from the Community

How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What needs improvement with Coverity?
The price is a concern, and there are a lot of false positives coming through. Support with Coverity is adequate, but they take a longer time to respond. The core support is not straightforward, an...
Ask a question
Earn 20 points
 

Also Known As

Synopsys Static Analysis
No data available
 

Overview

 

Sample Customers

SAP, Mega International, Thales Alenia Space
Information Not Available
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Static Application Security Testing (SAST). Updated: October 2026.
920,769 professionals have used our research since 2012.