Black Duck Coverity Static Application Security Testing (SAST) Brochure
Coverity offers accurate and scalable static analysis, helping developers and security teams deliver secure, high-quality applications. It builds an in-depth model of each application, while also combining insights into dependencies, compilers, and support for over 20 programming languages and 200 frameworks. This approach uncovers complex issues that span multiple files and libraries.
One standout feature of Coverity is its fast incremental scans early in the Software Development Life Cycle (SDLC). Developers receive notifications about vulnerabilities and code quality issues in new or changed code as they write it. The real-time feedback, integrated into the IDE through the Code Sight plugin, prevents issues from entering the repository. Incremental scans trigger on pull requests, analysing only the modified code. As a result, frequent scans on commits or pull requests happen without slowing developer velocity.
Several factors contribute to Coverity’s accuracy.Its in-depth application model offers key insights into the application’s operation, in addition to dependencies, compilers, dataflow, and control flow paths. This knowledge, combined with its understanding of many programming languages and frameworks, allows Coverity to distinguish between false positives and real issues. We apply contextual insights to initial scan results, validating each finding and assessing its exploitability.
Coverity identifies issues and provides actionable remediation guidance. Detailed suggestions and context-specific eLearning enable developers to fix problems quickly, without needing to be security experts. Additionally, its reporting dashboards allow developers to filter issues by various criteria, prioritising and addressing critical vulnerabilities.
Beyond its core features, Coverity offers extensibility and deployment flexibility. Custom checkers support proprietary frameworks or unsupported languages. Whether deployed on-premises or in a private cloud, Coverity provides flexibility while ensuring data security.
Download the Coverity Static Application Security Testing brochure here
