Try our new research platform with insights from 80,000+ expert users

Coverity Static vs GitLab comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Sep 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coverity Static
Ranking in Static Application Security Testing (SAST)
5th
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
43
Ranking in other categories
No ranking in other categories
GitLab
Ranking in Static Application Security Testing (SAST)
7th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
87
Ranking in other categories
Application Security Tools (11th), Build Automation (1st), Release Automation (2nd), Rapid Application Development Software (11th), Software Composition Analysis (SCA) (5th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (3rd), DevSecOps (1st)
 

Mindshare comparison

As of October 2025, in the Static Application Security Testing (SAST) category, the mindshare of Coverity Static is 6.0%, down from 7.3% compared to the previous year. The mindshare of GitLab is 2.3%, down from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Market Share Distribution
ProductMarket Share (%)
Coverity Static6.0%
GitLab2.3%
Other91.7%
Static Application Security Testing (SAST)
 

Featured Reviews

Jaile Sebes - PeerSpot reviewer
Resolving critical software issues demands faster implementation and better integration
We use Coverity primarily to find issues such as software bugs and memory leaks, especially in C++ and C# projects. It helps us identify deadlocks, synchronization issues, and product crashes Coverity has been instrumental in resolving product crashes by detecting various issues like deadlocks.…
Rohit Kesharwani - PeerSpot reviewer
Improved agility and time to market with CI/CD enhancements
The CI/CD pipelines in GitLab are highly valuable. Another important feature is the single source of repository, allowing efficient repository management and source code management. GitLab provides manageability by allowing us to manage source code effectively through separate repositories. Additionally, GitLab enables the creation of individual CI/CD pipelines for each repository, making software more agile. By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I find most effective about Coverity is its low rate of false positives. I've seen other platforms with many false positives, but with Coverity, most vulnerabilities it identifies are genuine. This allows me to focus on real issues."
"The ability to scan code gives us details of existing and potential vulnerabilities. What really matters for us is to ensure that we are able to catch vulnerabilities ahead of time."
"The tool as it is can be used for code quality improvement."
"Considering the analysis part and the benchmarking process involving the product that my company carried out, the solution is good for finding bugs and violations"
"It has the lowest false positives."
"The interface of Coverity is quite good, and it is also easy to use."
"It's very stable."
"It help us identify the latest security vulnerabilities."
"It is user-friendly, easy to use, and easy to administer."
"The CI/CD pipeline with Helm has significantly improved deployment speed and efficiency."
"Git hosting has an integration with ACD which is why we liked this solution in the first place."
"GitLab's best features are maintenance, branch integration, and development infrastructure."
"The merging feature makes it easy later on for the deployment."
"The code merging capability is something that we use very frequently."
"The user interface is really good so that helps with huge teams who need to collaborate."
"The most valuable feature of GitLab is the ability to upload scripts and make changes when needed and then reupload them. Additionally, the solution is user-friendly."
 

Cons

"The quality of the code needs improvement."
"Coverity concerns its dashboards and reporting."
"The solution is a bit complex to use in comparison to other products that have many plugins."
"The product lacks sufficient customization options."
"The product could be enhanced by providing video troubleshooting guides, making issue resolution more accessible. Troubleshooting without visual guides can be time-consuming."
"Right now, the Coverity executable is around 1.2GB to download. If they can reduce it to approximately 600 or 700MB, that would be great. If they decrease the executable, it will be much easier to work in an environment like Docker."
"We're currently facing a primary challenge with automation using Coverity. Each developer has a license and can perform manual checks, and we also have a nightly build that analyzes the entire software. The main issue is that the tool can't look behind submodules in our code base, so it doesn't see changes stored there."
"The tool needs to improve its reporting."
"It has fewer options, and its UI is not so user-friendly."
"The initial setup was quite challenging because it takes some time to understand how to pull out or push the code."
"GitLab could improve the patch repository. It does not have support for Conan patch version regions. Additionally, better support for Kubernetes deployment is needed as part of the package."
"While GitLab is a great tool for developers, it lacks project planner features. Roadmaps and Gantt charts in GitLab are not as advanced as in Jira, and changing start and end dates is more laborious in GitLab."
"You need to have a good knowledge of the product in order to use it."
"The integration could be slightly better."
"GitLab could add a plugin to integrate with Kubernetes stuff."
"It should be used by a larger number of people. They should raise awareness."
 

Pricing and Cost Advice

"This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced. Licensing is done on an annual basis."
"The licensing fees are based on the number of lines of code."
"The pricing is very reasonable compared to other platforms. It is based on a three year license."
"The solution's pricing is comparable to other products."
"I would rate the pricing a six out of ten, where one is low, and ten is high price."
"The tool was fairly priced."
"The pricing is on the expensive side, and we are paying for a couple of items."
"Coverity is very expensive."
"GitLab is highly priced for smaller teams, but it's okay if considering a user base of thousands."
"The price is okay."
"There are different licensing options available, including a free limited-user license."
"Regarding pricing, I would rate GitLab as moderately priced, maybe around a seven or eight out of ten. It could be more flexible for clients but generally offers good value."
"We are currently using the open-source version."
"We are using the free version of GitLab."
"My company uses the free version of GitLab, which is GitLab Community Edition. There is a licensed version also available for GitLab."
"I'm not aware of the licensing costs because those were covered by the customer."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
869,513 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
32%
Computer Software Company
13%
Financial Services Firm
6%
Healthcare Company
4%
Financial Services Firm
14%
Computer Software Company
13%
Government
11%
Manufacturing Company
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise6
Large Enterprise31
By reviewers
Company SizeCount
Small Business35
Midsize Enterprise9
Large Enterprise42
 

Questions from the Community

How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What do you like most about Coverity?
The solution has improved our code quality and security very well.
What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
What is your experience regarding pricing and costs for GitLab?
We are currently using general GitLab, not GitLab Premium.
What needs improvement with GitLab?
GitLab needs to improve the CI/CD functionality because it is not compatible with Jenkins and other tools, as it is not that efficient. Security-wise, we have security features enabled in GitLab fo...
 

Also Known As

Synopsys Static Analysis
Fuzzit
 

Overview

 

Sample Customers

SAP, Mega International, Thales Alenia Space
1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Find out what your peers are saying about Coverity Static vs. GitLab and other solutions. Updated: September 2025.
869,513 professionals have used our research since 2012.