The companies plan to integrate Coverity Static Analysis with Armorize's CodeSecure security analyzer Code quality and security analyses are being united through the integration of products from Coverity and Armorize Technologies, the companies are announcing on Tuesday.The integration will link Coverity Static Analysis, for code analysis, with Armorize CodeSecure, for security analysis. Integrations will be featured in upgrades of the two products planned for the end of this calendar year.[ InfoWorld’s Paul Krill reported in February about Microsoft promoting security exercises for software development. ] “We really believe that security needs to be addressed during the development process and not as a separate step afterward,” said Andy Chou, chief scientist and co-founder at Coverity. This way, developers can prioritize security defects in the same manner at quality defects — when writing of code is still fresh on their minds, he said. Usually, security is addressed later on in the application development lifecycle, Chou said.Coverity’s Static Analysis looks for issues such as buffer overflows and concurrency problems, Chou said. CodeSecure looks for issues such as SQL injection and cross-site scripting problems, said Caleb Sima, CEO of Armorize.The integration creates a new level of collaboration between security and development, providing assurance that development is fixing security vulnerabilities with every iteration without developers having to become security experts, the companies said. This article, “Coverity and Armorize link code quality, security analyses,” was originally published at InfoWorld.com. Follow the latest developments in business technology news and get a digest of the key stories each day in the InfoWorld Daily newsletter and on your mobile device at infoworldmobile.com. Software DevelopmentApplication Security