We pay for Coverity for our closed source products and are quite happy with it. But you have to have a project committed to staying on top of static analysis t

We pay for Coverity for our closed source products and are quite happy with it. But you have to have a project committed to staying on top of static analysis to really get the value out of it. Our product domain means we do, and for all our static analysis tools we have a fix-or-document rule where we have to address every warning before a release. Coverity is great for us.