Black Duck Coverity vs NodeJsScan
| Black Duck Coverity | NodeJsScan | |
|---|---|---|
| Free plan | No | Yes |
| Free trial | No | No |
| Paid from | — | Free |
| Open source | No | No |
| Platforms | Linux, macOS, self-hosted, Web, Windows | api, Linux, macOS, self-hosted, Web |
| Free plan | No | — |
| Analysis targets | source code | source code |
| Pull request scans | Yes | Yes |
| IDE support | Yes | — |
| CI/CD integration | Yes | Yes |
| Custom security rules | Yes | Yes |
| Automated fixes | Yes | — |
Both are listed in Best SAST Tools, Best Static Application Security Testing Software. On Specifiction, NodeJsScan scores higher on our published basis.