SonarCloud Reviews

Name: SonarCloud
Brand: Sonar
Rating: 4 (11 reviews)

Vendor: Sonar

4.1 out of 5

11 reviews
100% willing to recommend

What is SonarCloud?

SonarCloud is a cloud-based alternative to the SonarQube platform. It is a fully managed SaaS solution, improving human-developed and AI-assisted code at scale SonarCloud integrates seamlessly with popular version control and CI/CD platforms such as GitHub, Bitbucket, and Azure DevOps. It provides static code analysis to identify and help remediate issues such as bugs and security vulnerabilities. SonarCloud enables developers to receive immediate feedback on their code within their development environment, facilitating the maintenance of high-quality code standards, and promoting a culture of continuous improvement in software development projects. It helps produce software that is secure, reliable, and maintainable. SonarCloud is free for open-source projects and is offered as a paid subscription for private projects, priced per line of code.

Get the SonarCloud Buyer's Guide and find out what your peers are saying about SonarCloud, SonarQube, Veracode and more!

SonarCloud is the #10 ranked solution in AST tools. PeerSpot users give SonarCloud an average rating of 8.2 out of 10. Based on the analysis of the 11 most recent SonarCloud reviews, the overall sentiment is positive, with a sentiment score of 6.3. (Among the highest in the category). SonarCloud is most commonly compared to SonarQube: SonarCloud vs SonarQube. SonarCloud is popular among the large enterprise segment, accounting for 58% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 19% of all views.

Helped 813,418 peers since 2012

Featured reviews

Diego Moreo

Software Quality Coordinator at a retailer with 10,001+ employees

We have SonarCloud integrated into our pipeline. It is used as a tool for checking code quality, clean code, bugs, and security issues. It acts as a quality gate for production, helping decide if our code can be applied SonarCloud aids us in checking major issues in legacy systems and helps…

Read full review

SenthuranPooranananthan

Senior Director of DevOps at Asset Works

The most valuable features of SonarCloud are the ability to discover vulnerabilities, security weak points, security hotspots, and all the feedback that comes into the feature branch. You can deploy the code with the security, you can eliminate the problem at the developer level rather than identifying the problem in the productions. Having SonarCloud on the cloud there is no maintenance because they patch everything. It's easy to maintain, but it may be a problem with very large organizations because of some of the false-positive and you may need to be very cautious on very large enterprises. The solution is best suited for startups and mid-size companies. It is supporting the mono and multi report and overall they're always improving. Initially, they did not support the mono report, now they started supporting the mono report approach, when is a benefit.

Read full review

Huzaifa Asif

Cloud Engineer | Solution Architect at Respond.io

There's room for improvement in the configuration process, particularly during the initial setup phase. Setting up features like mono reports can be challenging, and the existing documentation could use improvement in providing clearer instructions. I found myself needing to engage with support multiple times to navigate through certain aspects. Additionally, it would be beneficial if it could streamline the integration process for new features. Enhancing documentation on how to integrate these features seamlessly would go a long way in improving user experience. The introduction of an auto-commit functionality would be a valuable addition. Some other tools offer this feature, allowing for the automatic creation of pull requests to address identified issues. This functionality significantly reduces the manual effort required.

Read full review

SonarCloud mindshare

As of October 2024, the mindshare of SonarCloud in the Static Application Security Testing (SAST) category stands at 6.8%, up from 6.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Key learnings from peers

Last updated Oct 10, 2024

Valuable Features

SonarCloud offers valuable features like vulnerability detection, continuous code analysis, and reduced false positives. Users appreciate its easy integration with GitLab for code review and commit tracking. It enhances code quality by identifying code smells, duplication, and security hotspots. The SaaS model eliminates maintenance needs. Recent updates support mono reports and microservices, improving service-specific insights. Some face integration challenges with CI/CD due to insufficient documentation, highlighting customization and configuration needs.

"The SaaS solution for checking code without execution and dealing with security issues is valuable."
"SonarCloud is overall a good tool for identifying code smells, bugs, and code duplication, but we've found that using Android Lint is more effective for our needs."
"Recently, they introduced support for mono reports and microservices, which is a noteworthy development as it provides a more detailed view of each service."

Room for Improvement

Developers find SonarCloud too limited, lacking robust container testing and producing false positives. They seek improved customization, user interface, and documentation for better configuration. Reports require more details for operational use, and integration within a CI/CD pipeline is needed. Users suggest adding third-party alerts and auto-commit functionality to enhance workflow and minimize manual tasks. Reporting features should allow data consolidation without external tools like Power BI.

"Reporting features are missing in SonarCloud."
"The documentation needs improvement on optimizing build time for seamless CI/CD integration with our Android apps."
"There's room for improvement in the configuration process, particularly during the initial setup phase."

ROI

Pricing

SonarCloud's pricing strategy generally appeals to enterprise users, with costs based on lines of code analyzed. Users highlight varied experiences: while some find it cost-effective at approximately 4,000 USD per million lines annually, others feel it's expensive, especially for large codebases. There are free and community versions available, offering options based on needs. Comparatively, SonarCloud tends to be cheaper than some competitors, yet additional features could increase its value proposition.

"Previously, the pricing was 17,000 euros for five million lines analyzed. However, they now charge $15,000 per one million lines, significantly increasing the cost."
"The current pricing is quite cheap."
"While not extremely cheap, it aligns well with market standards and offers good value."

Popular Use Cases

Organizations use SonarCloud for static code analysis across multiple repositories, integrating with CI/CD pipelines such as Bitbucket and GitHub to enhance application security. It identifies vulnerabilities and optimizes code by detecting duplication and quality issues. SonarCloud offers feedback at the pull request level, enabling developers to address code problems efficiently. It is employed to maintain clean code standards, acting as a quality gate before code deployment. Development teams benefit from its robust security scanning capabilities.

Service and Support

SonarCloud customer service is mixed. Some users find it responsive and proactive, while others note delays and room for improvement in technical support. Many have not utilized the support extensively. Community support exists, but technical guidance is sometimes lacking. Enhanced documentation and a robust open-source community could boost satisfaction. Ratings vary, with users rating their experiences between six and ten out of ten, emphasizing effective communication and faster response as key areas for development.

Deployment

Users generally find SonarCloud's initial setup relatively easy and straightforward. Some implementations can be quick, while others experience challenges, particularly with inexperienced engineers, taking up to two months. Incorporating an auto-commit function could enhance ease by reducing manual effort. Although some setups were done in approximately 10 minutes, installation difficulties were noted by some who feel improvements are possible. Overall, the feedback reflects a mix of ease and challenges.

Scalability

SonarCloud demonstrates high scalability, effectively supporting large user groups and adapting to different organizational needs. Companies utilize it to handle significant numbers of developers and projects, with some planning to upgrade to more extensive packages. While generally well-received for scalability, the focus lies on the total services and usage expansion, not just increasing functional capacity. Users consider scalability a strong feature, often rating it high, with some noting line limits affecting billing.

Stability

SonarCloud is consistently stable, with users rating its stability highly. Occasional issues like a short downtime last month and integration challenges were mentioned. Stability ratings range from eight to ten. Users experience difficulties due to complicated integration and documentation, suggesting improvement areas such as better onboarding and community support. Some faced challenges with the CI/CD pipeline on GitLab, noting the need for documentation enhancement to optimize build time, suggesting BigRise as an alternative.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our SonarCloud Buyer's Guide for additional reliable information.