SonarQube Server vs. Trend Vision One Email and Collaboration Security

Scenarios where SonarQube is well suited:

1. Large codebase: The tool's static analysis capabilities can help teams quickly identify and fix bugs, vulnerabilities, and code smells in large codebases.
2. Compliance and security: The tool can check the code against industry standards or regulations, such as OWASP and CWE, and identify any issues that need to be addressed.
3. Agile development: SonarQube can be integrated with CI/CD pipelines allowing teams to continuously monitor and improve code quality throughout the development process.
4. Teams using multiple languages: Teams that use multiple programming languages can benefit from using SonarQube, as the tool supports a wide range of languages and can be integrated with a variety of development tools.

Scenarios where SonarQube may be less appropriate:

1. Small codebase: Organizations with a small codebase may not see the full benefits of using SonarQube, as the tool's static analysis capabilities may be overkill for a smaller codebase.
2. Limited resources: Organizations with limited resources may find it difficult to set up and configure SonarQube, as the tool can be complex and may require specialized expertise.
3. Limited integration: Organizations that use development tools or IDEs that are not supported by SonarQube may find it difficult to integrate the tool into their existing development workflow.
4. Limited scalability: Large organizations with millions of lines of code may find SonarQube's performance and scalability to be an issue. It may take longer for the analysis to finish and the results may not be as accurate.

Incentivized

Cloud App Security blocks all incoming bad emails and drive files without interacting with the portal or having to worry about anything coming through. It demonstrates its ability to work in scenarios where overhead is limited. It could have some improvements in the way where more options are given in the config to make bypass rules or exclusions.

• Generating code quality report
• Calculates junit coverage of the codebase very efficiently and precisely
• Highlights the bugs and vulnerabilities in our codebase
• Informs the user of the improvements which can be done to the code to make it cleaner
• SonarQube also suggests remediation and resolution of the problems it highlights

Incentivized

• Protects the organization from ransomware and business email compromise.
• Integrates well with Office 365 without compromising on performance and security.
• Easy to manage.

Incentivized

• It doesn't provide automatic pull request with fixes
• It doesn't provide insights about the libraries of the projects
• The administration management user interface could be simplified
• It doesn't provide an order to fix issues, like archives with more and frequent commits have top priority

Incentivized

• Their web-support is not very clear, even though phone support is fine
• Remote endpoints that don't have a strong or constant internet connection frequently report as offline - kind of annoying
• Their settings don't seem to be mapped out very clearly, so there is a lot of hunting to find the right one to change

Incentivized

Only a 9 if the product become completely unaffordable. Covid-19 has adversely affected Higher Ed budgets, if that should happen I would lobby hard to find cuts elsewhere...TrendMicro CAS is a necessary tool for any business to have!

Incentivized

It can improve in some user experience and usability parts, like the code view and the way we assign issues it's a bit hidden and not highlighted

Incentivized

It is very easy to implement the policies and get around in the platform. It is easy to release from system quarantine if something inadvertently gets added. The Dashboard has a lot of really good info around the types of detections over last 24 hrs, 7 Days, or 30 Days. It would be nice if when doing log searches, one could search all of the "types" at one time. Types include things like Quarantine, Ransomware, Virtual Analyzer, etc.

Incentivized

Has always been available for us in 2+ years...100% uptime thus far

Incentivized

On the desktop/laptop it works flawlessly, just need a mobile friendly site or an app to support a workaholic like me

Incentivized

We we easily able to integrate the SonarQube steps into our TFS process via the Microsoft Marektplace, we didn't have the need to call SonarQube support. We've used their online documentation and community forum if we ran into any issues.

Incentivized

Trend Micro Cloud App Security’s support has been highly competent and thorough when we have needed their assistance. Their support has been quickly dispatched, both through telephone and Email, while answer our questions and providing the “inside baseball” answers we have wanted when discussing the why and how of certain issues. When it came to implementation, their support sat through us as we deployed agents and took us on an adventure few implementations have.

Incentivized

SonarQube identifies significant more thing compared to the built-in suggestions in IntelliJ IDEA. The suggestions how to correct issues are also a lot better with SonarQube. IntelliJ IDEA provides great refactoring support to make it easy to refactor the code to solve issues. We use these tools together and they really complement each other.

Incentivized

It is cheaper than most other business antivirus/malware that I have used before, and has a smaller footprint on endpoints. It also seems to have fewer false positives. It is very easy to install compared to others, and has a solid web-based control panel for administering users accounts. It is very easy to monitor our remote users and apply policies or scans even when they are off-line.

Incentivized

• Positive ROI from the standpoint of flagging several issues that would have otherwise likely been unaddressed and caused more time to be spent closer to launch
• Slightly positive ROI from time-saving perspective (it's an automated check which is nice, but depending on the issues it finds, can take developers time to investigate and resolve)

• CAS gives us peace of mind knowing the file systems we rely on in the cloud are protected the same way they would be if they were sitting in our office. This leads to a reduced risk of downtime that could otherwise limit us from being able to properly support our customers.

Incentivized