Skip to content
whatismyalternative

Coverity Scan

Static analysis for open source projects.

Visit Coverity Scan

Coverity Scan is a static analysis service for open source projects that examines every line of code and potential execution path to identify defects, with an explanation of each defect's root cause. It supports Java, C/C++, C#, JavaScript, Ruby, and Python projects. The service was initiated in 2006 with the U.S. Department of Homeland Security as a research project focused on open source software quality and security, and is now managed by Black Duck.

Projects register and submit builds through the service, which provides defect reports and triage tools. An API endpoint supports automated build uploads, including larger builds, and weekly build limits vary by project size in lines of code. Supported tool versions are updated periodically, with only the latest two releases supported at a time.

Coverity Scan is offered as a free service for open source projects. Projects sign up and register to use it, and build limits are set according to the project's lines of code.

12 alternatives to Coverity Scan

Ranked by how well each tool replaces Coverity Scan: shared features, audience, price and popularity.

  1. Coveralls

    Test Coverage History & Statistics

    Covers 1 of 8 key features.

    Free plan
    63 out of 100 match$10/mo

  2. Cppcheck

    A tool for static C/C++ code analysis

    Covers 2 of 8 key features and is open source.

    Free planOpen source
    63 out of 100 matchContact sales

  3. Clang Static Analyzer

    A source code analysis tool that finds bugs in C, C++, and Objective-C programs.

    Covers 2 of 8 key features and is open source.

    Open source
    61 out of 100 match—

  4. PVS-Studio

    A static analyzer for C, C++, C#, Java, Go, JavaScript and TypeScript code. Works on, and,

    Covers 3 of 8 key features.

    Free plan
    61 out of 100 matchFree

  5. Meterian

    Open source vulnerability scanner and software composition analysis for secure software

    Covers 3 of 8 key features.

    Free plan
    60 out of 100 matchContact sales

  6. SymfonyInsight

    PHP project quality, done right.

    Covers 2 of 8 key features.

    60 out of 100 matchContact sales

  7. Checkstyle

    Automate Java coding standards with Checkstyle.

    Covers 3 of 8 key features and is open source.

    Free planOpen source
    60 out of 100 matchContact sales

  8. Codacy

    Code quality and security for AI-assisted engineering.

    Covers 0 of 8 key features.

    Free plan
    59 out of 100 match$18/mo

  9. Sonar

    Guide. Verify. Solve

    Covers 1 of 8 key features.

    Free plan
    59 out of 100 match$20/mo

  10. Black Duck

    Polaris One Platform. Complete Application Security.

    Covers 3 of 8 key features.

    58 out of 100 match—

  11. JSHint

    A static code analysis tool for JavaScript

    Covers 1 of 8 key features and is open source.

    Open source
    57 out of 100 match—

  12. HackerOne Code (PullRequest)

    Code security platform combining AI analysis with expert human review of pull requests.

    Covers 3 of 8 key features.

    57 out of 100 match$129/mo