Audience

Companies searching for a solution to manage and empower their dev teams

About SonarQube

SonarSource builds world-class products for Code Quality and Security. Our open-source and commercial code analyzer - SonarQube - supports 27 programming languages, empowering dev teams of all sizes to solve coding issues within their existing workflows. We embrace progress - whether it's multi-language applications, teams composed of different backgrounds or a workflow that's a mix of modern and legacy, SonarQube has you covered. SonarQube fits with your existing tools and proactively raises a hand when the quality or security of your codebase is at risk. SonarQube can analyze branches of your repo, and notify you directly in your Pull Requests! Our mission is to empower developers first and grow an open community around code quality and code security. Jenkins, Azure DevOps server and many others. Thousands of automated Static Code Analysis rules, protecting your app on multiple fronts, and guiding your team.

Popular Alternatives
Gemini Code Assist
Gemini Code Assist
(3 Ratings)
Increase software development and delivery velocity using generative AI assistance, with enterprise security and privacy protection. Gemini Code Assist completes your code as you write, and generates whole code blocks or functions on demand. Code assistance is available in many popular IDEs, such as Visual Studio Code, JetBrains IDEs (IntelliJ, PyCharm, GoLand, WebStorm, and more), Cloud Workstations, Cloud Shell Editor, and supports 20 programming languages, including Java, JavaScript, Python, C, C , Go, PHP, and SQL. Through a natural language chat interface, you can quickly chat with Gemini Code Assist to get answers to your coding questions, or receive guidance on coding best practices. Chat is available in all supported IDEs. Enterprises can customize Gemini Code Assist using their organization’s private codebases and knowledge sources so that Gemini Code Assist can offer more tailored assistance. Gemini Code Assist enables large-scale changes to entire codebases.
Learn more
Parasoft
Parasoft
(115 Ratings)
Parasoft helps organizations continuously deliver high-quality software with its AI-powered software testing platform and automated test solutions. Supporting embedded and enterprise markets, Parasoft’s proven technologies reduce the time, effort, and cost of delivering secure, reliable, and compliant software by integrating everything from deep code analysis and unit testing to UI and API testing, plus service virtualization and complete code coverage, into the delivery pipeline. A powerful unified C and C test automation solution for static analysis, unit testing and structural code coverage, Parasoft C/C test helps satisfy compliance with industry functional safety and security requirements for embedded software systems.
Learn more
GitGuardian
GitGuardian
(32 Ratings)
GitGuardian is a code security platform that provides solutions for DevOps generation. A leader in the market of secrets detection and remediation, its solutions are already used by hundreds of thousands of developers. GitGuardian helps developers, cloud operation, security, and compliance professionals secure software development and define and enforce policies consistently and globally across all systems. GitGuardian solutions monitor public and private repositories in real-time, detect secrets, sensitive files, IaC misconfigurations, and alert to allow investigation and quick remediation. Additionally, GitGuardian's Honeytoken module exposes decoy resources like AWS credentials, increasing the odds of catching intrusion in the software delivery pipeline. GitGuardian is trusted by leading companies, including 66 degrees, Snowflake, Orange, Iress, Maven Wave, DataDog, and PayFit. Used by more than 300K developers, it ranks #1 in the security category on GitHub Marketplace.
Learn more
Kiuwan Code Security
Kiuwan Code Security
(11 Ratings)
Security Solutions For Your DevOps Process. Automatically scan your code to identify and remediate vulnerabilities. Compliant with the most stringent security standards, such as OWASP and CWE, Kiuwan Code Security covers all important languages and integrates with leading DevOps tools. Effective static application security testing and source code analysis, with affordable solutions for teams of all sizes. Kiuwan includes a variety of essential functionality in a single platform that can be integrated directly into your internal development infrastructure. Fast Vulnerability Detection: Easy and instant setup. Start scanning and get results in just minutes. DevOps Approach To Code Security: Integrate Kiuwan with your Ci/CD/DevOps pipeline to automate your security process. Flexible Licensing Options: Plenty of options, one time scans or continuous scanning. Kiuwan also offers a Saas or On-Premise model.
Learn more

Integrations

See Integrations

Ratings/Reviews - 2 User Reviews

Overall 5.0 / 5
ease 5.0 / 5
features 5.0 / 5
design 5.0 / 5
support 5.0 / 5
More Reviews Write a Review

Company Information

SonarSource
United States
www.sonarqube.org

Videos and Screen Captures

SonarQube Screenshot 1
SonarQube Screenshot 1 SonarQube Screenshot 2
You Might Also Like
Enterprise AI Search, Intranet, and Wiki in one platform. Icon
Enterprise AI Search, Intranet, and Wiki in one platform.

Your company’s all-in-one solution for trusted information

Cut through the noise and end information overload with Guru, an all-in-one wiki, intranet, and knowledge base that serves as your company's single source of truth.
Learn More

Product Details

Platforms Supported
SaaS
Training
Documentation

SonarQube Frequently Asked Questions

Q: What kinds of users and organization types does SonarQube work with?
Q: What languages does SonarQube support in their product?
Q: What other applications or services does SonarQube integrate with?
Q: What type of training does SonarQube provide?

SonarQube Product Features

Application Security

Open Source Component Monitoring
Source Code Analysis
Training Resources
Vulnerability Detection
Analytics / Reporting
Third-Party Tools Integration
Vulnerability Remediation

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

SonarQube Additional Categories

SonarQube Reviews

Write a Review
  • Aman V.
    Technical Lead
    Used the software for: 2 Years
    Frequency of Use: Weekly
    User Role: User
    Company Size: 20,000 or More
    Design
    Ease
    Features
    Pricing
    Support
    Probability You Would Recommend?
    1 2 3 4 5 6 7 8 9 10

    "Industry standard code quality tool"

    Posted 2022-04-01

    Pros: Great User Interface / Dashboard.
    Different tiers of bugs - helps identify and fix only the critical issues.
    Suggestions to fix the issue.
    Jenkins integration.
    Also available as SaaS offering.
    Also shows security defects.

    Cons: The only con i can think of is expensive license which is not optimal for personal projects (unless open source). There is a free trial though.

    Overall: SonarQube is used across the industry as the go-to solution for code review. It has an impressive interface which provides all the information - issue, the code where it occurred and the optimal solution suggestion; at one place.

    Read More...
  • Daniel M.
    Security Architect
    Used the software for: Less than 6 months
    Frequency of Use: Daily
    User Role: User
    Company Size: 500 - 999
    Design
    Ease
    Features
    Pricing
    Support
    Probability You Would Recommend?
    1 2 3 4 5 6 7 8 9 10

    "Excellent Product"

    Posted 2019-04-01

    Pros: - Accurate results and no bullshit findings
    - Very fast analysis
    - Handy configuration features for analysis customization
    - Nice interface
    - Plenty integration options

    Cons: - It has its price but its worth every penny. Similar vendors are more expensive with significantly less value.

    Overall: I integrated SonarQube into my SDLC and it reliably detects and blocks security issues

    Read More...
  • Previous
  • You're on page 1
  • Next