# Black Duck Coverity: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 4 judge labels across 1 category by 4 of 14 models. Page: https://www.gane.ai/index/it/vendors/black-duck-coverity

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Static application security testing](https://www.gane.ai/index/it/developer/static-application-security-testing/index.md) | 0% | 72 | 75% | 4 |

## What the models said for it

- "Mostly C/C++ or complex systems code: include Coverity." (GPT-6 Luna, SAST)

## And against it

- "Avoid for mid-market: ... high-end ones like Coverity (better for C/C++ in large enterprises)" (Grok 4.20, SAST)
- "Mindshare has been declining (from 6.3% to 2.6% year-over-year); limited appeal outside safety-critical domains." (DeepSeek V4 Flash, SAST)
- "Premium tools (older versions of Fortify, Checkmarx, Coverity) aren't inherently bad but cause failure when" (Qwen 3.7 Flash, SAST)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 1 | 1 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 1 | 1 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 1 | 1 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 1 | 0 | 0 | 1 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named Black Duck Coverity, from 30 of the 32 answers that named it (only the models that return a source list).

### Domains cited

- checkmarx.com: 23
- appsecsanta.com: 17
- safeguard.sh: 16
- dev.to: 12
- securityboulevard.com: 10
- aikido.dev: 9
- cybersectools.com: 9
- fluidattacks.com: 9
- offensive360.com: 8
- corgea.com: 7

### Pages cited

- https://checkmarx.com/learn/sast/open-source-vs-premium-sast-tools: 19
- https://appsecsanta.com/sast-tools/enterprise-sast-tools: 13
- https://appsecsanta.com/sast-tools: 10
- https://safeguard.sh/resources/blog/best-sast-tools-for-enterprise-applications: 10
- https://cybersectools.com/resources/shortlists/best-sast-tools: 9
- https://fluidattacks.com/blog/top-10-sast-tools: 9
- https://securityboulevard.com/2025/06/best-sast-tools-top-10-solutions-compared: 9
- https://dev.to/rahulxsingh/i-reviewed-32-sast-tools-the-ones-worth-using-283e: 8

## In its own words

What Black Duck Coverity's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: our market-leading SAST solution (https://blackduck.com/)
- For: developers and security teams (https://blackduck.com/)

## What it publishes

Every page blackduck.com exposes, read 2026-09-29: 2296 addresses. By kind, pages and the last 90 days:

- blog: 843 pages, 11 in the last 90 days, latest 2026-09-23
- case study: 32 pages, 2 in the last 90 days, latest 2026-09-25
- webinar or virtual event: 3 pages, 2 in the last 90 days, latest 2026-09-22
- report or ebook: 204 pages, 2 in the last 90 days, latest 2026-08-07
- comparison: 12 pages, 0 in the last 90 days, latest 2026-03-03
- template or tool: 4 pages, 0 in the last 90 days, latest 2020-04-21
- glossary or explainer: 69 pages, 0 in the last 90 days, latest 2026-05-08
- podcast or video: 6 pages, 0 in the last 90 days, latest 2024-02-21
- Recent: 2026-09-25 case study: Securing ai generated code static analysis https://www.blackduck.com/resources/case-studies/securing-ai-generated-code-static-analysis.html
- Recent: 2026-09-23 blog: Top 10 free hacking tools for penetration testers https://www.blackduck.com/blog/top-10-free-hacking-tools-for-penetration-testers.html
- Recent: 2026-09-23 blog: Polaris september 2026 update https://www.blackduck.com/blog/polaris-september-2026-update.html
- Recent: 2026-09-22 webinar or virtual event: Are you ready cra reporting https://www.blackduck.com/resources/webinars/are-you-ready-cra-reporting.html
- Recent: 2026-09-22 webinar or virtual event: Thankyou https://www.blackduck.com/resources/webinars/are-you-ready-cra-reporting/thankyou.html
- Recent: 2026-09-21 blog: Hidden costs ai security programs https://www.blackduck.com/blog/hidden-costs-ai-security-programs.html

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.