No more typing reviews! Try our Samantha, our new voice AI agent.

Coverity Static vs Invicti Web + API comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 6, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Coverity Static
Ranking in Static Application Security Testing (SAST)
17th
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
43
Ranking in other categories
No ranking in other categories
Invicti Web + API
Ranking in Static Application Security Testing (SAST)
11th
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
36
Ranking in other categories
Application Security Tools (16th), Vulnerability Management (30th), DevSecOps (7th)
 

Mindshare comparison

As of October 2026, in the Static Application Security Testing (SAST) category, the mindshare of Coverity Static is 2.6%, down from 6.3% compared to the previous year. The mindshare of Invicti Web + API is 2.6%, down from 3.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
Acunetix2.6%
Coverity Static2.6%
Other94.8%
Static Application Security Testing (SAST)
 

Featured Reviews

Jaile Sebes - PeerSpot reviewer
Senior Software Architect at a tech vendor with 10,001+ employees
Resolving critical software issues demands faster implementation and better integration
We use Coverity primarily to find issues such as software bugs and memory leaks, especially in C++ and C# projects. It helps us identify deadlocks, synchronization issues, and product crashes Coverity has been instrumental in resolving product crashes by detecting various issues like deadlocks.…
Rahul Kumar - PeerSpot reviewer
Senior Engineer - Penetration Tester at a government with 10,001+ employees
Identifies vulnerabilities across bulk web applications but needs better support and cleaner reports
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers. The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning. In terms of reporting, Acunetix is excellent because it can generate different types of reports, such as an executive summary report, detailed reports, and developer reports that can be shared directly with developers. Acunetix positively impacts my organization by helping identify outdated libraries and applications, including legacy applications vulnerable to old attacks based on OWASP Top 10, thus aiding in compliance checks for PCI DSS and OWASP. Acunetix provides a centralized report with compliance-related aspects and a vulnerability timeline, effectively helping reduce vulnerabilities and save time.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is the integration with Jenkins."
"The product has been beneficial in logging functionality, allowing me to categorize vulnerabilities based on severity. This aids in providing updated reports on subsequent scans."
"Coverity gives advisory and deviation features, which are some of the parts I liked."
"It's very stable."
"The most valuable feature is that there were not a whole lot of false positives, at least on the codebases that I looked at."
"It provides reports about a lot of potential defects."
"The solution has improved our code quality and security very well."
"The product is easy to use."
"Our developers can run the attacks directly from their environments, desktops."
"There is a lot of documentation on their website which makes setting it up and using it quite simple."
"The most valuable feature of Acunetix is the UI and the scan results are simple."
"It comes equipped with an internal applicator, which automatically identifies and addresses vulnerabilities within the program."
"The solution is paying for itself, as our applications are more secure."
"The product is really easy to use."
"Overall, I believe Acunetix to be one of the best products on the market."
"The most important feature is that it's a web-based graphical user interface. That is a great addition. Also, the ability to schedule scans is great."
 

Cons

"SCM integration is very poor in Coverity."
"It should be easier to specify your own validation routines and sanitation routines."
"Right now, the Coverity executable is around 1.2GB to download. If they can reduce it to approximately 600 or 700MB, that would be great. If they decrease the executable, it will be much easier to work in an environment like Docker."
"Sometimes, vulnerabilities remain unidentified even after setting up the rules."
"Coverity is not stable."
"The solution could use more rules."
"When I put my code into Coverity for scanning, the code information of the product is in the system. The solution could be improved by providing a SBOM, a software bill of material."
"The solution's user interface and quality gate could be improved."
"The solution is generally stable, however, there might be room for improvement regarding glitches or bugs."
"Acunetix needs to include agent analysis."
"The pricing is a bit on the higher side."
"Acunetix should improve by further reducing false positives and providing more customized reports, plus better integration with newer tools such as GitHub and Azure DevOps."
"There is room for improvement in the pricing."
"We have had issues during upgrades where their scans worked on some apps better with previous versions. Then, we had to work with their tech support, who were great, to get it fixed for the next version."
"One of the biggest problems I've had with Acunetix is that it's hard to replicate things manually because you don't get the raw packet."
"You can't actually change your password after you've set it unless you go back into the administration account and you change it there. Thus, if you're locked out and don't remember your password, that's a thing."
 

Pricing and Cost Advice

"Coverity is very expensive."
"Depending on the usage types, one has to opt for different types of licenses from Coverity, especially to be able to use areas like report viewing or report generation."
"This is a pretty expensive solution. The overall value of the solution could be improved if the price was reduced. Licensing is done on an annual basis."
"Offers varying prices for different companies"
"The solution is affordable."
"The tool was fairly priced."
"Coverity’s price is on the higher side. It should be lower."
"The pricing is very reasonable compared to other platforms. It is based on a three year license."
"The pricing is a little high, and moreover, it's kind of domain-based."
"Implementing Acunetix needs a medium or larger business agency, because you need some money to get Acunetix. It is costly, but if you care about your agency's security, then maybe it's a cost that might help you in the future."
"The pricing and licensing are reasonable to a point. In order to run multiple scans at a time, we are going to have to purchase a 100 count license, which is an overkill. Though, compared to what we were paying for, the cost seems reasonable."
"I would say that Acunetix is expensive because there are products on the market with similar features that are equally or better-priced."
"The cost is based on two types of licenses, ConsultLite, and ConsultPlus, as well as the number of domains that are scanned."
"The price is exceptionally high."
"It is a bit expensive. If you need to check five applications, you have to pay almost 14,000. It is an agreement for two years at 7,000 per year for only five applications. You cannot change the applications in the license. So, you are stuck with the same license for the five applications for one full year."
"The solution is expensive."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
917,433 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
26%
Computer Software Company
9%
Financial Services Firm
8%
Comms Service Provider
5%
Manufacturing Company
12%
Financial Services Firm
11%
Comms Service Provider
11%
Computer Software Company
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise6
Large Enterprise31
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise7
Large Enterprise19
 

Questions from the Community

How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What needs improvement with Coverity?
The price is a concern, and there are a lot of false positives coming through. Support with Coverity is adequate, but they take a longer time to respond. The core support is not straightforward, an...
What is your primary use case for Acunetix Vulnerability Scanner?
In a typical enterprise environment, Acunetix is mainly used for visibility, detection, and investigation across network traffic. The main use cases usually fall into a few core areas, with primary...
What advice do you have for others considering Acunetix Vulnerability Scanner?
I advise that Acunetix is the best option. Invest time in proper initial configuration and scope definitions. The tool is powerful, but its effectiveness depends heavily on how the authenticated ar...
What is your experience regarding pricing and costs for Acunetix?
Everything is perfect and good, including the pricing and all related aspects.
 

Also Known As

Synopsys Static Analysis
AcuSensor
 

Overview

 

Sample Customers

SAP, Mega International, Thales Alenia Space
Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand
Find out what your peers are saying about Coverity Static vs. Invicti Web + API and other solutions. Updated: September 2026.
917,433 professionals have used our research since 2012.