Average Ratings 0 Ratings
Average Ratings 2 Ratings
Description
Coverity Static Analysis serves as an all-encompassing solution for code scanning, assisting both developers and security teams in producing superior software that meets security, functional safety, and various industry standards. It efficiently detects intricate defects within large codebases, pinpointing and addressing quality and security concerns that may arise across multiple files and libraries. Coverity ensures adherence to numerous standards such as OWASP Top 10, CWE Top 25, MISRA, and CERT C/C++/Java, and offers comprehensive reports that help in monitoring and prioritizing issues. By utilizing the Code Sight™ IDE plugin, developers benefit from immediate feedback, including insights on CWE and instructions for remediation, directly integrated into their development settings, which helps to weave security practices seamlessly into the software development lifecycle while maintaining developer productivity. This tool not only contributes to enhanced code integrity but also fosters a culture of continuous improvement in software security practices.
Description
CppDepend serves as a robust code analysis solution specifically designed for C and C++ programming languages, aimed at aiding developers in the upkeep of intricate code repositories. It boasts an extensive array of functionalities that promote code quality, including static code analysis, which plays a critical role in uncovering potential coding problems like memory leaks, suboptimal algorithms, and breaches of coding conventions.
One of CppDepend's significant features is its adherence to established coding standards such as Misra, CWE, CERT, and Autosar. These guidelines are essential across various sectors, especially in the creation of dependable and secure software for automotive, embedded, and other high-reliability environments. By conforming to these standards, CppDepend contributes to the assurance that the code meets industry-specific safety and reliability benchmarks.
Additionally, the tool's seamless integration with widely-used development environments, along with its compatibility with continuous integration processes, positions it as an indispensable resource in agile development practices. This versatility enables teams to enhance their productivity while ensuring adherence to high-quality coding standards throughout the software development lifecycle.
API Access
Has API
No
API Access
Has API
No
Integrations
C
Yes
C++
Yes
.NET
Yes
Android
Yes
Apple iOS
Yes
Elasticsearch
Yes
GitHub
Yes
Go
Yes
HTML
Yes
Helm
Yes
Integrations
C
Yes
C++
Yes
.NET
No
Android
No
Apple iOS
No
Elasticsearch
No
GitHub
No
Go
No
HTML
No
Helm
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Black Duck
Founded
2002
Country
United States
Website
www.blackduck.com/static-analysis-tools-sast/coverity.html
Vendor Details
Company Name
CoderGears
Founded
2009
Country
United States
Website
www.cppdepend.com
Product Features
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Static Code Analysis
Analytics / Reporting
No
Code Standardization / Validation
No
Multiple Programming Language Support
No
Provides Recommendations
No
Standard Security/Industry Libraries
No
Vulnerability Management
No
Product Features
Static Code Analysis
Analytics / Reporting
No
Code Standardization / Validation
No
Multiple Programming Language Support
No
Provides Recommendations
No
Standard Security/Industry Libraries
No
Vulnerability Management
No