Mobile Security Framework (MobSF) vs. Coverity Static Analysis (SAST)

Mobile Security Framework (MobSF)

Coverity Static Analysis (SAST)

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Mobile Security Framework (MobSF)	Score 8.0 out of 10	N/A	Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. MobSF support mobile app binaries (APK, IPA & APPX) along with zipped source code and provides REST APIs for integration with CI/CD or DevSecOps pipeline. The Dynamic Analyzer helps you to perform runtime security assessment and interactive instrumented testing.	N/A
Synopsys Coverity	Score 8.5 out of 10	N/A	Synopsys offers the Coverity static application security testing (SAST) solution, to help users build software that’s more secure, higher-quality, and compliant with standards.	N/A

Pricing

Mobile Security Framework (MobSF)

Coverity Static Analysis (SAST)

Editions & Modules

No answers on this topic

Offerings

Pricing Offerings
Mobile Security Framework (MobSF)	Synopsys Coverity
Free Trial
No	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	Yes

Entry-level Setup Fee

No setup fee

Optional

Additional Details

—

Contact the Synopsys Software Integrity Group (SIG) Sales team at https://www.synopsys.com/software-integrity/contact-sales.html for more detailed pricing information.

More Pricing Information

Best Alternatives
	Mobile Security Framework (MobSF)	Coverity Static Analysis (SAST)
Small Businesses	No answers on this topic	GitLab Score 8.9 out of 10
Medium-sized Companies	Veracode Score 8.5 out of 10	GitLab Score 8.9 out of 10
Enterprises	Veracode Score 8.5 out of 10	GitLab Score 8.9 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Mobile Security Framework (MobSF)	Coverity Static Analysis (SAST)
Likelihood to Recommend	8.0 (1 ratings)	9.0 (1 ratings)

User Testimonials
	Mobile Security Framework (MobSF)	Coverity Static Analysis (SAST)
Likelihood to Recommend	Open Source MobSF is good for checking for vulnerabilities in your app. It will also give suggestions on how to address them. Another thing is can do is find code that may be incorrect. It is not, however, a substitute for a system that actually checks your code for proper use. It really is concentrated on security. Incentivized FD Francis de Castro Business User Engagement Manager Read full review	Synopsys Best suits for large scale and dynamic development environment. It may be best tool if you want to release your apps with less TAT. However if you have a CRM tool which is COTS product it can offer little help. Even then you should be familiar with what features of Coverity Static Analysis (SAST) are helpful for your development environment Incentivized Rahul Deshmukh Security Solutions Architect Read full review
Pros	Open Source Scan for vulnerabilities Scan for bad coding Give suggestions on fixes for security issues Incentivized FD Francis de Castro Business User Engagement Manager Read full review	Synopsys It can provide security scanning dashboard Help detect vulnerabilities and recommend remediation Integration of devsecops helps speed up release cycles Incentivized Rahul Deshmukh Security Solutions Architect Read full review
Cons	Open Source The UI is not that user friendly The documentation could be easier to understand An easier method of deploying MobSF would be appreciated Incentivized FD Francis de Castro Business User Engagement Manager Read full review	Synopsys Coverage of integration with other security tools can be improved Customisation of dashboard to enable customer choice of tracking Showcase devsecops progressive tasks from SLA and violation from code scanner perspective Incentivized Rahul Deshmukh Security Solutions Architect Read full review
Alternatives Considered	Open Source In my opinion, MobSF is not as comprehensive as SonarQube. Both, however, do a very good job in scanning your code for vulnerabilities. Both do roughly the same things. The reports of SonarQube are more detailed though. The advantage that MobSF has over SonarQube is the price. One is free while the other is a paid solution (with several tiers). However, we use them together to get a more comprehensive scan. Incentivized FD Francis de Castro Business User Engagement Manager Read full review	Synopsys Coverity Static Analysis (SAST) has wide coverage in terms of Owasp Top 10 vulnerabilities, various types of languages, backward integration. While other tools offer similar experience of code scanning, coverity helps in pointed recommendations for quick closure of vulnerabilities. The historical analysis of vulnerabilities is a good value add in understanding which type of code and which language is better in improving cyber security maturity. Incentivized Rahul Deshmukh Security Solutions Architect Read full review
Return on Investment	Open Source It has allowed our apps to pass a security vetting requirement of a third party to deploy our app We can see where we can improve on the development of our app The deployment can take a while, especially with teams not familiar with the software Incentivized FD Francis de Castro Business User Engagement Manager Read full review	Synopsys Helped reduce efforts of development team avoiding rework Increased security maturity Increased efficiency of the teams Incentivized Rahul Deshmukh Security Solutions Architect Read full review
ScreenShots		Synopsys Coverity Screenshots