SonarQube Alternatives

4.4(111 Ratings)

Considering alternatives to SonarQube? See what this market SonarQube users also considered in their purchasing decision. When evaluating different solutions, potential buyers compare competencies in categories such as evaluation and contracting, integration and deployment, service and support, and specific product capabilities.

Check out real reviews verified by Gartner to see how SonarQube compares to its competitors and find the best software or service for your organization.

Reviewed in Last 12 Months

How Alternatives Are Selected

1. Veracode

4.6

Veracode does a great job in finding the potential security flaws in code. Yet its limited intelligence on the overall project structure provides a lot of false positive findings. Also its support of the Python/JavaScript projects is quite limited Read all insights and reviews for Veracode

Compare with SonarQube

Add to Compare

2. Checkmarx SAST

4.6

The overall experience with CheckmarX has been truly exceptional. The vendor has been very supportive of us throughout the implementation and post-implementation phases, addressing our concerns promptly and smoothly. They also consistently share updates and newly added features, taking time to explain them clearly to our team. CheckmarX's SAST solution is reliable and suited for development and security teams looking to integrate security seamlessly into their process. More importantly, it plays a critical or crucial role in strengthening our application security by identifying vulnerabilities in the early development cycle, reducing risk, and ensuring that our product or application is secure and compliant. Read all insights and reviews for Checkmarx SAST

Where SonarQube Scored Higher

Easier to integrate and deploy

Compare with SonarQube

Add to Compare

3. Appknox

4.8

New vulnerabilities are tested which allow us to be confident in the security of our App. Plus, it's pretty convenient and their tech team has a great expertise.Read all insights and reviews for Appknox

Compare with SonarQube

Add to Compare

4. AppScan

By HCLTech (HCLSoftware)

4.7

My experience has been below expectations. find it challenging to use effectively. I believe there is potential in the platform, but it needs substantial improvement in usability automation and support to meet current enterprise needs Read all insights and reviews for AppScan

Where SonarQube Scored Higher

Easier to integrate and deploy

Compare with SonarQube

Add to Compare

5. Fluid Attacks Continuous Hacking

By Fluid Attacks

4.7

Our experience with Fluid Attacks has been largely positive. The platform has effectively helped us identify real programmatic security issues and open vulnerabilities that have improved our overall security posture. The support team has been a strong partner during infrastructure changes and product evolution The API can be slower at times (typically 5-7 seconds per response) and the MCP server output can sometimes be too extensive, requiring iteration and more precise questions to extract value, but once it is done, it becomes a fundamentally useful tool in our workflow. Overall, the benefits of the platform have clearly outweighed these limitations Read all insights and reviews for Fluid Attacks Continuous Hacking

Compare with SonarQube

Add to Compare

6. GitLab

4.4

GitLab's Application Security Testing features integrate seamlessly into our CI/CD pipelines, making it easy to identify and address vulnerabilities early in the development process. Overall, the platform is stable, reliable and intuitive. However, the security scan configuration process could be more streamlined. Read all insights and reviews for GitLab

Where SonarQube Scored Higher

Easier to integrate and deploy

Compare with SonarQube

Add to Compare

7. Contrast Runtime Security Platform

By Contrast Security

4.7

it was a very positive experience, contrast is a very effective tool that can detect and help fix vulnerabilities in code. contrast also provides details on how to remediate the vulnerabilities that they find. contrast is also very fast and lightweight, hence the stress on infrastructure is less, causing no problems to app teams, hence contrast is a very good fit for devsecops teams, also the customer support is at an exceptional level, the teams are very friendly and concerning.Read all insights and reviews for Contrast Runtime Security Platform

Compare with SonarQube

Add to Compare

8. Coverity Static Application Security Testing

4.4

As a well-known source code quality and security detector, Coverity supports individual standards and customized rules. The product supports rapid analysis of source code submissions, which helps the engineer a lot. Coverity's reputation is extremely outstanding, as customers know we pick Coverity as SAST solution, the doubts sharpens down and trust grows up. It also complements with Black Duck, to provide a detailed analysis for end-to-end security detection.Read all insights and reviews for Coverity Static Application Security Testing

Where SonarQube Scored Higher

Easier to integrate and deploy

Compare with SonarQube

Add to Compare

...

Showing Result 1-8 of 78