Black Duck Coverity vs ClusterFuzz
| Black Duck Coverity | ClusterFuzz | |
|---|---|---|
| Free plan | Yes | |
| Paid from | Free | |
| Platforms | Linux, macOS, self-hosted, Web, Windows | Linux, macOS, self-hosted, Web, Windows |
| Free plan | No | |
| Analysis targets | source code | |
| Pull request scans | Yes | |
| IDE support | Yes | |
| CI/CD integration | Yes | |
| Custom security rules | Yes | |
| Automated fixes | Yes | |
| CI/CD support | Yes | Yes |
| Analysis target | source | |
| Deployment | self-hosted | |
| Fix guidance | Yes | |
| Input generation methods | mutation, generation, hybrid | |
| Target types | binary formats, HTML, JavaScript, browser DOM, native programs | |
| Coverage guidance | Yes | |
| Crash triage | Yes | |
| Execution mode | hybrid | |
| Supported languages | C, C++, Rust; potentially other LLVM-based languages |
Listed together in Best Fuzz Testing Software