/ Product Profile
    Black Duck

    Coverity Static

    Static application security testing (SAST) tool for identifying code vulnerabilities and defects.

    / Next Step
    Considering Coverity Static?

    Ask about pricing, alternatives, or if Coverity Static is right for you.

    Core capabilities

    Identifies security vulnerabilities code quality defects and hardcoded secrets
    Infrastructure-as-code platform support and compliance reporting
    Multi-language support with 22 programming languages and 250+ frameworks
    Path-sensitive analysis engine for C/C++ with pointer arithmetic tracking

    Common use cases

    01

    Functional safety compliance for automotive and aerospace

    02

    Multi-language codebase analysis across dependencies

    03

    Security vulnerability identification in regulated codebases

    Things to consider

    Every product has trade-offs, and which of them matter depends on your environment, your team and your timeline.

    Ask Picari about Black Duck Coverity Static

    Black Duck Coverity Static pricing and integrations

    For Black Duck Coverity Static integration and pricing details, ask Picari. Start a briefing with your question, such as whether it connects to your SIEM, identity provider and ticketing stack, or how it is priced at your seat count and data volume.

    Unverified profile

    This profile hasn't been verified by Black Duck yet. Information may be incomplete.

    Are you from Black Duck? Verify this profile

    Profile last updated on 7 September 2026 by Picari.