SonarQube Server

SonarQube Server

94 Reviews and Ratings

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
SonarQube Server	Score9.6 out of 10	N/A	SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines to ensure the software you produce is secure, reliable, and maintainable.	$0 per year per installation

Pricing

SonarQube Server

Community: Free
Developer EDITION: starting at $720
per year per installation
Enterprise EDITION: Contact sales for pricing
per year per installation
Data Center EDITION: Contact sales for pricing
per year per installation

Pricing Offerings
SonarQube Server
Free Trial
Yes
Free/Freemium Version
Yes
Premium Consulting/Integration Services
No

No setup fee

—

Community Pulse
Key User Insights
	SonarQube Server
Considered Both Products	Sonar Verified User Chose SonarQube Server Some are still under consideration. Pricing is a big component. Some FOSS products have been considered is at par (at least for our needs) or catching up. Although the amazing support in the community weighs hard on the value. So, if it went away...so would some arguments … Incentivized Helpful? Ariel Cabeza Tech Lead in Information Technology at Andreani Grupo Logístico (Package/Freight Delivery, 5001-10,000 employees) Chose SonarQube Server SonarQube is more focused on code quality, whereas Veracode does a better job of finding security vulnerabilities. We lean towards SonarQube because we are looking for quality. Incentivized Helpful? Verified User Chose SonarQube Server Jenkins and GitLab are not exact alternatives for SonarQube, however, they do provide functionality for running and executing build pipelines for various languages and generating reports. However, they are not extensible, have no integration with IDEs and not suitable for … Incentivized Helpful? Aman Makwana DevOps Engineer in Engineering at Yudiz Solutions Pvt Ltd (Information Technology & Services, 201-500 employees) Chose SonarQube Server No alternatives as SonarQube is best fitted in our Use Cases Incentivized Helpful? Verified User Chose SonarQube Server SonarQube deployment worked well with our pipeline and had the right integrations with our IDE as well as it worked well with analyzing .NET frameworks when compared to GitHub and GitLab which has some of the functionality and can do some checks, but SonarQube made more sense … Incentivized Helpful? Prashant Chaudhari Head of Engineering & Founding team member in Engineering at Jombay (Information Technology & Services, 51-200 employees) Chose SonarQube Server SonarQube is much better than Brakeman Scanner in a lot of regards Incentivized Helpful? Verified User Chose SonarQube Server SonarQube is a SAST, SOOS focuses on SCA and DAST - both of which we felt were out of scope for our immediate needs. Plus, through plugins SonarQube is able to accomplish some SCA. Incentivized Helpful? Verified User Chose SonarQube Server SonarQube identifies significant more thing compared to the built-in suggestions in IntelliJ IDEA. The suggestions how to correct issues are also a lot better with SonarQube. IntelliJ IDEA provides great refactoring support to make it easy to refactor the code to solve issues. … Incentivized Helpful? Verified User Chose SonarQube Server Getting SonarQube instead of the other tools we tested was an easy choice. Snyk was way too much limited to only Docker images and dependency analysis at that time. And Checkmarx was very hard to adapt to our needs : configuring custom quality gates was way too much of a … Incentivized Helpful? Verified User Chose SonarQube Server SonarQube is much improved version as compared to SonarLint and Findbugs or any other software we found in similar category. It's open source and can be easily integrated with code pipeline. Incentivized Helpful? Verified User Chose SonarQube Server We decided to use SonarQube for the following reasons: Multi-language support: SonarQube supported all the languages used in our codebase while some of the other tools did not. Customizable quality profiles: SonarQube allowed teams to create custom quality profiles that aligned … Incentivized Helpful? Verified User Chose SonarQube Server I have used GitHub more that fortify so I am more familiar with GitHub for checking for vulnerabilities. I have noticed GitHub is good for checking different packages within your project but as far as checking code Quality and coverage Sonar is the better one in my opinion. … Incentivized Helpful? Verified User Chose SonarQube Server Visual Studio has some nice code analysis tools, most which can be activated at development time. But they have some shortcomings and using an external tool allows catching issues that were not seen during development. Using this dual approach makes for a more robust application … Incentivized Helpful? shaurya jain digital tech developer associate in Research & Development at Accenture (Information Technology & Services, 10,001+ employees) Chose SonarQube Server I have used other tools like SoapUI and Postman, but their working and use case are totally different from the SonarQube, so basically cannot compare SonarQube with them. We use SonarQube in our project to basically calculate the code quality report mostly. In that report, we … Incentivized Helpful? Daniel Anjos Product Design/Development Engineer in Engineering at Transferwise (Financial Services, 1001-5000 employees) Chose SonarQube Server I personally evaluated klocwork in a previous company and it worked well for Static Code Analysis for C++ applications but the Java support was not as good as SonarQube. Also the overall tooling and integrations provided by SonarQube is stellar and very other competitors can … Incentivized Helpful? Prathamesh Sawant Senior Software Engineer in Information Technology at Boku Inc (Information Technology & Services, 201-500 employees) Chose SonarQube Server Codacy: Pros Code quality tests Code quality trending Incentivized Helpful? Kirti Thakkar Devops Manager in Information Technology at JLL (Real Estate, 10,001+ employees) Chose SonarQube Server Setting up with Azure devops is easier. Scans results and depth of tweaking/whitelisting code snippets is easier with SonarQube. Incentivized Helpful? Debobrata Bose Solution Architect in Information Technology at Danske IT and Support Services India Pvt Ltd (Financial Services, 10,001+ employees) Chose SonarQube Server SonarQube is an open-source. It's a scalable product. The costs for this application, for the kind of job it does, are pretty descent. Pipeline scan is more secured in SonarQube. Its a very good tool and its support multiple languages. Its main core competency is of static code … Incentivized Helpful? Arush Soel DevOps Engineer in Information Technology at Bebo Technologies Pvt Ltd (Computer Software, 501-1000 employees) Chose SonarQube Server SonarQube contains all of their features. Findbugs has very limited capabilities. It is just a static code analyser and does not check for a continous code quality and also not possible to integrate its plugin azure devops .net pipelines and more importantly SonarQube ui is … Incentivized Helpful? Verified User Chose SonarQube Server Sonar Qube doesn't do as good of a job of finding security vulnerabilities as dedicated SAST software, but it does more for code quality that the developers want to see. A comparison of Sonar Qube to something like Veracode or Fortify isn't apples to apples since they're not … Incentivized Helpful? Verified User Chose SonarQube Server We found SonarQube right at the beginning of our research process and found that it met most of our needs. SonarQube fit very nicely into our TFS continuous integration process. We seamlessly integrated the SonarQube steps into our TFS process via the Microsoft Marketplace. … Incentivized Helpful? Verified User Chose SonarQube Server Gitlab, if you have the right license, ships with a static analysis tool. It integrates better with Gitlab, but didn't seem to have the same quality output that Sonarqube did. Sonarqube's community version is plenty suitable for day to day analysis operations. Incentivized Helpful?
	Would buy again
	No answers on this topic
	Delivers good value for the price
	No answers on this topic
	Happy with the feature set
	No answers on this topic
	Lived up to sales and marketing promises
	No answers on this topic
	Implementation went as expected
No answers on this topic

User Ratings
	SonarQube Server
Likelihood to Recommend	8.9 (35 ratings)
Usability	9.1 (2 ratings)
Support Rating	9.0 (1 ratings)