Coverity static analysis by Synopsys helps development and security teams find and fix defects and security flaws in code as it’s being written.
Coverity is highly accurate, supports thousands of developers, and quickly analyzes large projects exceeding 100 million lines of code, helping your teams build secure, high-quality software faster.
Customer Reviews
Daniel N.
Advanced user of CoverityFinds many bugs and memo leaks, nice groups features
Cluttered UI, tough to navigate through it
I would recommend it, as apart from the slightly unintuitive UI, it is a nice tool. However, it is a bit old, so ensure you have looked on the market to check if there is anything better out there. My main advice will be to target the tools towards your needs regarding the languages you use, but it is always better to pick a flexible tool that covers many languages, so that in the future you can expand your language base, whilst staying on top of any security isssues.
Finding bugs and memo leaks in a variety of languages. Its API for Java is also an easy one to use and is well-documented. I really like that once these are assigned to you, you get reminders via email (it can be nicely integrated with Outlook), so that you don't forget. The detailed information on the issues and how they are represented graphically are also amongst its benefits.
