Black Duck Coverity vs OSS-Fuzz
| Black Duck Coverity | OSS-Fuzz | |
|---|---|---|
| Free plan | Yes | |
| Paid from | Free | |
| Platforms | Linux, macOS, self-hosted, Web, Windows | Web |
| Free plan | No | Yes |
| Analysis targets | source code | |
| Pull request scans | Yes | |
| IDE support | Yes | |
| CI/CD integration | Yes | |
| Custom security rules | Yes | |
| Automated fixes | Yes | |
| CI/CD support | Yes | Yes |
| Analysis target | source | |
| Deployment | self-hosted | |
| Fix guidance | Yes | |
| Input generation methods | mutation | |
| Target types | source-code fuzz targets; untrusted user or network inputs; complex input formats | |
| Coverage guidance | Yes | |
| Crash triage | Yes | |
| Execution mode | cloud | |
| Supported languages | C/C++, Rust, Go, Python, Java/JVM, JavaScript, Lua |
Listed together in Best Fuzz Testing Software