Checkov vs Coverity
CheckovInfrastructure as Code
FreePublished price
CoverityStatic Application Security Testing
Checkov Infrastructure as Code Policy-as-code for everyone | Coverity Static Application Security Testing Find and fix defects in your open source project for free | |
|---|---|---|
| Overview | ||
| Category | Infrastructure as Code | Static Application Security Testing |
| What it is | Open source static analysis tool for IaC from Bridgecrew scanning Terraform, CloudFormation, and Kubernetes for misconfigurations. | Enterprise static analysis tool by Synopsys that identifies critical defects and security vulnerabilities in code. |
| Pricing | ||
| Published price | Free A no-cost or open-source edition is available, but no current citable paid price was located; paid or managed offerings require vendor confirmation. | Coverity Scan is available at no charge for registered open-source developers, but commercial Coverity pricing is not public. The official FAQ directs non-open-source or company u… |
| Pricing model | Not available | Free |
| Free options | Free plan · No free trial | Free plan · No free trial |
| Deal on Cubbie | None right now | None right now |
| Company | ||
| Founded | 2019 | 2002 |
| Team size | 201-500 employees | 1001-5000 employees |
| Headquarters | San Francisco, CA | Mountain View, CA |