Black Duck Coverity vs Checkmarx SAST
| Black Duck Coverity | Checkmarx SAST | |
|---|---|---|
| Platforms | Linux, macOS, self-hosted, Web, Windows | Linux, Web, Windows |
| Analysis target | source | source |
| IDE support | Yes | Yes |
| CI/CD support | Yes | Yes |
| Deployment | self-hosted | hybrid |
| Fix guidance | Yes | Yes |
| Free plan | No | |
| Analysis targets | source code | |
| Pull request scans | Yes | |
| CI/CD integration | Yes | |
| Custom security rules | Yes | |
| Automated fixes | Yes | |
| SCA included | No |
Listed together in Best Static Application Security Testing Software