抱歉，尚不支持此语言

English
日本語
简体中文

AI-generated code | Harness the power of AI coding assistants while managing the risks.
API Security Testing | Manage software risks with a holistic API security testing program.
AppSec Consolidation | Simplify your application security program
Application Security Testing | Solutions to address security risks at all stages of the application life cycle.
DevSecOps | Solutions to help shift security left without slowing down your development teams.
Software Supply Chain Security | Solutions to identify and manage software supply chain risks end-to-end.
Manage AppSec Risk | Scale your application security program without increasing complexity or adding friction.
Cloud & Container Security | Optimize your applications for secure deployment and operation in the cloud.
Open Source License Compliance | Effective solutions for ensuring open source license compliance.
M&A Due Diligence | Identify software risks that could negatively impact the value of acquired IP.
Quality & Security Standards Compliance | Ensure your software complies with the standards critical to customers and regulators.

Static Analysis (SAST) | Analyzing code for security vulnerabilities without executing it.
Software Composition Analysis (SCA) | Analyzing software components for security and license compliance.
Dynamic Analysis (DAST) | Testing running applications for security vulnerabilities.
Interactive Analysis (IAST) | Real-time security testing during application execution.
Penetration Testing | Simulated cyberattacks to identify vulnerabilities.
Mobile Application Security Testing (MAST) | Ensuring the security of mobile applications.
Application Security Posture Management (ASPM) | Managing and improving application security posture.
Fuzz Testing | Identifying vulnerabilities by inputting random data to applications.

Automotive | Security solutions for automotive industry applications.
Financial Services | Security solutions tailored for financial services.
IoT & Embedded | Security for Internet of Things and embedded systems.
Medical Device | Security solutions for medical devices.
Public Sector | Security solutions for government and public sector organizations.

Dev and DevOps Teams | Security tools and practices for development and DevOps teams.
Security Teams | Solutions and support for dedicated security teams.
Legal Teams | Resources and compliance tools for legal teams.

|

✕

Coverity 静态分析

在大型复杂软件中查找代码质量缺陷的最值得信赖的解决方案

观看演示

获取定价

Coverity® 提供全面的静态分析，使开发人员和安全团队能够交付符合安全性、功能安全和行业标准的优质软件。

发现复杂缺陷

查找并修复跨越多个文件和库（甚至是最大的代码库）的代码质量和安全问题。

确保合规

跟踪并优先处理对您的业务至关重要的问题，这些问题广泛涵盖各种安全和行业标准，包括 OWASP Top 10、CWE Top 25、MISRA、CERT C/C++/Java 等。

自信地扫描

分析任何规模的应用程序，甚至是拥有数千名开发人员和数千万行代码的庞大应用程序。

推动符合安全和编码标准

Coverity 可以让您轻松跟踪和管理对您的业务至关重要的编码标准的合规性。内置报告让您洞悉问题类型和严重性，以帮助确定补救工作的优先级，并跟踪团队和项目之间每个标准的进展。

• MISRA
• AUTOSAR
• ISO 26262
• PCI DSS
• CERT C/C++/Java

• DISA STIG
• ISO/IEC TS 17961
• OWASP Top 10
• OWASP Mobile Top 10
• CWE Top 25

language support

广泛而深入的语言支持，以提高代码质量和安全性

Coverity 为 22 种编程语言、200 多种框架以及许多常用的基础设施即代码平台和文件格式提供全面的分析。

详细了解 Coverity 语言支持和 CWE 覆盖。

帮助开发人员构建更好的代码，而不会减慢其速度

Code Sight™ IDE 插件将 Coverity 分析扩展到开发人员桌面，使开发人员能够在编写代码时查找并修复质量和安全缺陷。

快速准确的增量分析在后台运行，以尽量减少干扰，直接在 IDE 内为开发人员提供实时结果，包括 CWE 信息、补救指南和相关安全培训。

下载介绍手册详细了解 Code Sight

Dev Sec Ops Cycle

在开发人员工作流程中实现自动化

集成：通过集成到常用的 IDE、SCM、CI 和问题跟踪系统，无需离开您喜欢的工具即可查找和修复缺陷。

自动：在代码提交时触发扫描，并提取请求以尽早发现问题，而不会影响发布。

扩展：扩展以涵盖您的全部应用程序组合以及支持它们的团队。

运用 Coverity 加强您 SDLC 的安全

Coverity 非常有效、快速且可支持。文档完整清晰，对代码准备和支持过程有很大帮助。"

DevOps 工程师

|

电信

Forrester Wave™：2023 年第三季度静态应用安全测试

Black Duck 被 Forrester Wave 评为 SAST 领导者

了解原因

2023 年 Forrester Wave 静态应用安全测试领域领导者

<p>Polaris Software Integrity Platform® brings together the market-leading SAST and SCA engines that power Coverity® and Black Duck® into an easy-to-use, cost-effective, and highly scalable SaaS solution, optimized for the needs of modern DevSecOps.</p>

正在寻找基于云的集成式AST解决方案？欢迎了解Polaris。

Polaris ®将市场领先的SAST引擎(Coverity®)、SCA引擎(Black Duck®)和DAST引擎(Continous Dynamic)整合到一个易于使用、经济高效且高可扩展的SaaS解决方案中，为满足现代DevSecOps的需求提供了优化的解决方案。

了解更多

对复杂软件的可靠分析

了解 Coverity 客户如何降低风险、确保应用灵活性，并迅速向市场提供新功能。

了解有关 Coverity 的更多信息

Datasheet

Coverity 静态分析数据手册

详细了解我们的静态分析引擎

分析报告

Forrester Wave Leader for SAST

Forrester Wave™：2023 年第三季度静态应用安全测试

了解 Black Duck 为何是 SAST 领导者

分析报告

Gartner® 魔力象限™ 应用安全测试

了解 Black Duck 为何是领导者

Case Study

FPT Software

Enhancing code quality and security with Coverity

下载案例研究

准备好更快地构建优质安全的软件了吗？