Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Coverity Static Analysis serves as an all-encompassing solution for code scanning, assisting both developers and security teams in producing superior software that meets security, functional safety, and various industry standards. It efficiently detects intricate defects within large codebases, pinpointing and addressing quality and security concerns that may arise across multiple files and libraries. Coverity ensures adherence to numerous standards such as OWASP Top 10, CWE Top 25, MISRA, and CERT C/C++/Java, and offers comprehensive reports that help in monitoring and prioritizing issues. By utilizing the Code Sight™ IDE plugin, developers benefit from immediate feedback, including insights on CWE and instructions for remediation, directly integrated into their development settings, which helps to weave security practices seamlessly into the software development lifecycle while maintaining developer productivity. This tool not only contributes to enhanced code integrity but also fosters a culture of continuous improvement in software security practices.
Description
The Code Registry is an innovative platform that harnesses AI for code intelligence and analysis, providing companies and non-technical users with complete insight into their software codebase, regardless of their coding experience. By linking your code repository—such as GitHub, GitLab, Bitbucket, or Azure DevOps—or by uploading a compressed archive, the platform establishes a secure "IP Vault" and conducts an extensive automated evaluation of the entire codebase. This analysis generates various reports and dashboards that include a code-complexity score to assess the intricacy and maintainability of the code, an open-source component evaluation that identifies dependencies, licensing issues, and outdated or vulnerable libraries, as well as a security assessment that pinpoints potential vulnerabilities, insecure configurations, or risky dependencies. Additionally, it provides a “cost-to-replicate” valuation, which estimates the resources and effort required to recreate or substitute the software entirely. Ultimately, the platform equips users with the necessary tools to enhance their understanding of code quality and security, thereby fostering more informed decision-making in software development.
API Access
Has API
No
API Access
Has API
No
Integrations
GitHub
Yes
GitLab
Yes
Apple iOS
Yes
Black Duck
Yes
C++
Yes
Dropbox
No
Git
No
Google Drive
No
Kotlin
Yes
Logilica
Yes
Integrations
GitHub
Yes
GitLab
Yes
Apple iOS
No
Black Duck
No
C++
No
Dropbox
Yes
Git
Yes
Google Drive
Yes
Kotlin
No
Logilica
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
$2 per month
Free Trial
No
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Black Duck
Founded
2002
Country
United States
Website
www.blackduck.com/static-analysis-tools-sast/coverity.html
Vendor Details
Company Name
The Code Registry
Founded
2023
Country
United States
Website
thecoderegistry.com
Product Features
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Static Code Analysis
Analytics / Reporting
No
Code Standardization / Validation
No
Multiple Programming Language Support
No
Provides Recommendations
No
Standard Security/Industry Libraries
No
Vulnerability Management
No
Product Features
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Static Code Analysis
Analytics / Reporting
No
Code Standardization / Validation
No
Multiple Programming Language Support
No
Provides Recommendations
No
Standard Security/Industry Libraries
No
Vulnerability Management
No
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No