Coverity

Coverity is a static application security testing (SAST) tool that analyses source code without executing it to find quality defects and security vulnerabilities, across 22 programming languages and more than 250 frameworks, with a particular focus on C and C++. It checks standards such as OWASP Top 10, CWE Top 25, CERT, MISRA and AUTOSAR, and is certified for safety use under ISO 26262 and DO-178C.

Coverity is published by Black Duck (formerly the Synopsys Software Integrity Group). It integrates with IDEs, code review and CI/CD, and is available on premises, including air-gapped deployments, or as SaaS through the Polaris platform. It is a commercial product.