Research Library

Ensuring Code Quality in
Multi-Threaded Applications White Paper

Developing multi-threaded applications?
This white paper reviews dangerous concurrency defects you need to be wary of.

Download Document

Controlling Source Code Complexity White Paper

Learn how static analysis can help control the complexity of your source code.

Download Document

Gracenote Case Study

Gracenote logo Read how Gracenote improved developer productivity by as much as 12.5% with Coverity Prevent.

PDF icon Download Document
Free Product Trial Get a free trial of Prevent™ static analysis that will detect a wide range of crash-causing defects in your code base within hours.

White Papers

Coverity’s white papers are designed to provide massive detail about the technical and business aspects of our products.

Software Readiness Management

Learn how software analytics can bring greater efficiency and predictability to your software testing processes.
Download Document

Improving Software Quality to Drive Business Agility

IDC conducted a survey in 2Q08 to explore current practices in, costs of, and attitudes toward software quality. Read this paper to find out how organizations like yours are reacting to today’s significant development challenges and discover what’s working and what isn’t as teams strive to improve software functionality and meet customers’ demands. The paper provides key recommendations for delivering more secure, successful, and better managed software.
Download Document

Scan Open Source Report

This research report provides data regarding 2 years of analysis of more than 250 open source projects from the Scan site, created by Coverity with the support of the U.S. Department of Homeland Security. The site provides Coverity Prevent™ to qualified open source developers. This report explores the overall improvement in the quality and security of open source software and examines the relationship between defect densities, complexity metrics and other code related variables.
Download Document

Boolean Satisfiability: The Next Generation of Static Analysis

This white paper explains how the first use of Boolean Satisfiability (SAT) in static analysis helps developers find critical defects in their code with the lowest false positive rate in the industry.
Download Document

Ensuring Code Quality in Multi-Threaded Applications

Are you developing multi-threaded applications? This technical white paper reviews dangerous concurrency defects such as Race Conditions and Deadlocks you need to be wary of.
Download Document

Controlling Source Code Complexity

Learn how static analysis can help control the complexity of your source code.
Download Document

Product Information

In only two years, Coverity has managed to become the leader in static source code analysis. We think it’s because our products work as advertised. This is how they are advertised:

Coverity Prevent™ Static Analysis

Coverity Prevent is the leading automated approach to identifying and resolving the most critical defects in C, C++, C# and Java source code.
PDF icon Download Document

Coverity Extend™ Static Analysis

This product is an optional add-on to Coverity Prevent™ — yet nearly all of our customers have it. Learn how Coverity has made it possible to use static source code analysis to find custom or domain-specific defects in C and C++ code.
PDF icon Download Document

Coverity Software Readiness Manager for Java

Software Readiness Manager provides objective, actionable data about code quality and risk allowing managers to assess readiness criteria, prioritize resources, and improve software quality.
PDF icon Download Document

Coverity Thread Analyzer for Java

Coverity Thread Analyzer for Java automatically detects runtime race conditions and deadlocks, before they cause data corruption or failures in the field.
PDF icon Download Document

ROI Datasheet

Ironically, the ROI of static analysis is rarely articulated beyond the platitude “find more bugs sooner.” Truly understanding the impact of static analysis takes into account buying, deployment, adoption, and maintenance. This document articulates the ROI value proposition of Coverity’s product line.
Download Document

Case Studies

Today, Coverity has more than 300 customers. We deliver a powerful ROI and the lowest total cost of ownership of any static analysis solution available. Following are some examples.

Gracenote

Read how Gracenote improved developer productivity by as much as 12.5% with Coverity Prevent.
PDF icon Download Document

Dash

Learn how Dash resolved and closed 100% defects reported by Prevent™ in under seven months, ensuring the company met its release goals.
PDF icon Download Document

ip.access

ip.access utilizes Coverity Prevent to accelerate application development cycles by 10-15% while improving the security and quality of 3rd party code.
PDF icon Download Document

ACCESS

Coverity Prevent reduced time required for ACCESS developers to identify software defects to 1/5.
PDF icon Download Document

AudioCodes

With a 9% false positive rate, AudioCodes trusts Coverity to help the company accelerate the delivery of its industry-leading telecommunications software without sacrificing quality.
PDF icon Download Document

ARRIS

ARRIS deploys Coverity to ensure market commitment to highest availability systems.
PDF icon Download Document

Teradata

Coverity scales to meet Teradata's challenge.
PDF icon Download Document

Palm, Inc.

Coverity inspects all active C and C++ products, with the goal of achieving zero defects.
PDF icon Download Document

Symbian

Learn why Coverity was chosen to ensure the quality of all lines of code for Symbian OS.
PDF icon Download Document

Wind River

Learn how Wind River boosted development productivity by 30% and cut time-to-market by 20%.
PDF icon Download Document

Veritas

Learn how Coverity found bugs in large, complex storage software VERITAS thought was virtually bug free.
PDF icon Download Document

Prerecorded Webcasts

Coverity founders, academics and customers regularly share their source code quality and security best practices via live webcasts. Now we're making them available to you 24/7:

Forrester and Coverity Present: How to Increase the Predictability of Your Software Releases with Advanced Code Measurement Techniques

(October 2008)
Forrester Senior Analyst Jeffrey Hammond and Coverity CTO Ben Chelf present the latest trends and advances in how development organizations are using advanced code measurement techniques to bring greater predictability to their application lifecycle management (ALM) initiatives, and how the collection of measurement data can improve the effectiveness of your software delivery process.
Download Document

Reducing Risk and Improving Software Quality in Continuous Integration Environments

(September 2008)
Featured speakers Anuj Goyal, Senior Product Manager, Coverity and Matt Laudato, Technical Marketing, AccuRev will present how organizations can leverage new code analysis techniques, SCM best practices, and continuous integration in order to improve the quality of delivered software without sacrificing time or features.
Download Document

Controlling Source Code Complexity

(January 2008)
Anuj Goyal, senior product manager, provides a brief overview of the requirements for effective static analysis followed by a demonstration of Prevent's features and capabilities.
Download Document

Controlling Complexity in Agile and Traditional Development

(November 2007)
Featured speaker Thomas Murphy, Gartner Research Director, and Ben Chelf, Coverity CTO review how traditional and agile development organizations are leveraging new analysis techniques to accelerate the delivery of secure, high quality applications in today's competitive software industry and the latest advances in static analysis and how these developments are having a significant impact on development teams today.
Download Document

Static vs. Dynamic Analysis Tools - Finding the Right Bug Spray

(February 2007)
Coverity CTO, Ben Chelf reviews the world of dynamic and static development tools. This 45-minute session covers the evolution of source code analysis from Lint to the latest technologies of 2007.
Download Document

How Stanford Retooled Static Analysis

(December 2006)
Dr. Dawson Engler, Stanford Computer Science Professor and Coverity co-founder, discusses his approach to: automatically finding bugs using programmer-written compiler extensions.
Download Document

Increase Software Quality Now - Arris Webinar

(October 2006)
Hear the details of Arris' source code development process improvements, tool choices and "cultural" changes that led to quality gains.
Download Document

Open Source Reports

Coverity exercises its static source code analysis technology on open source code bases almost daily. Occasionally, we summarize and publish our results.

Open Source Quality Report

(Posted March 2006)
Want to know how the LAMP stack compares in quality to a baseline of over 30 different open source packages? Under a contract with the Department of Homeland Security, we apply the latest innovation in automated defect detection to analyze and compare a large set of open source packages.
Download Document

Linux Security Report

(Posted September 2005)
Coverity’s technology can detect source code defects that could lead to security vulnerabilities. At LinuxWorld 2005 in San Francisco, CEO Seth Hallem presented the results of Coverity’s security analysis of the Linux kernel. This report describes in detail why the Linux kernel is a stable, secure piece of software.
Download Document

Linux Report

(Posted December 2004)
“So it’s now ‘officially’ all bug-free,” wrote Linus Torvalds after applying Coverity fixes to a recent release of Linux. Coverity contributes heavily to Linux quality and security. Over the past four years, Coverity has provided Linux with thousands of defects—including several security alerts. This report describes the overall quality of Linux with detailed information about the type and location of critical defects.
Download Document

MySQL Report

(Posted February 2005)
“Coverity’s detailed analysis allows us to provide more reliable and secure certified software—a real benefit for large IT organizations, high–volume Web sites, and all of our 6 million active installations worldwide,“ said Zack Urlocker, VP Marketing, MySQL. This report describes the overall quality of MySQL—including a major security vulnerability that Coverity found during development.
Download Document

BerkeleyDB Report

(Posted February 2005)
Sleepycat Software, the maker of Berkeley DB, is the first company to be Coverity Inspected™, which means the company has taken the time to eliminate all of the defects Coverity found.
Download Document

“If you want you GPS to alert drivers to real-time traffic conditions, you can't have software that crashes.”
Baron Roberts
Dash Navigation, Principal Engineer
PDF icon Read the Case Study
Coverity Prevent™ for C/C++, C# and Java groundbreaking technology enables developers to control complexity in the development process by automatically finding and helping to repair critical software defects and security vulnerabilities in Java throughout the application lifecycle.