Try our new research platform with insights from 80,000+ expert users

CodeSonar vs Synopsys Defensics comparison

The compared CodeSecure and Black Duck solutions aren't in the same category. CodeSecure is ranked #20 in AS , with an average rating of 7.8, and holds a 1.2% mindshare in the category. Black Duck is ranked #5 in FTT , and holds a 19.8% mindshare. Additionally, 87% of CodeSecure users are willing to recommend the solution, compared to 100% of Black Duck users who would recommend it.
CodeSonar
Read 7 CodeSonar reviews
  • 2,002 Views
  • 1,280 Comparison Views
87% willing to recommend
Synopsys Defensics
Read 4 Synopsys Defensics reviews
  • 159 Views
  • 97 Comparison Views
100% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive Summary
We performed a comparison between CodeSonar and Synopsys Defensics based on real PeerSpot user reviews.

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Tools.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Application Security Tools Report (Updated: November 2024).
Buyer's Guide
Application Security Tools
November 2024
Download the complete report
Helped 816,562 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Scalability Issues

Sentiment score
8.0
CodeSonar is praised for scalability, performing well across projects, and organizations report no issues scaling its usage.
No sentiment score available
 

Valuable Features

Sentiment score
7.8
CodeSonar effectively detects memory leaks, runtime errors, and security threats, ensuring code stability with its user-friendly interface.
No sentiment score available
 

Room For Improvement

Sentiment score
4.5
CodeSonar needs improved architecture scanning, language support, security features, flexible licensing, and easier setup to compete with Polyspace.
No sentiment score available
 

Stability Issues

Sentiment score
8.1
CodeSonar is highly stable and dependable, consistently receiving high ratings for its reliability and crash-free performance.
No sentiment score available
 

Customer Service

Sentiment score
5.4
CodeSonar's support team is praised for responsiveness, expertise, and excellent service, often rated four to five stars.
No sentiment score available
 

Setup Cost

Sentiment score
8.5
CodeSonar is expensive but valued for reliability and ease of use, with costs over $100,000 annually for large projects.
No sentiment score available
 

Categories and Ranking

CodeSonar
Average Rating
8.2
Reviews Sentiment
7.0
Number of Reviews
7
Ranking in other categories
Application Security Tools (20th), Static Code Analysis (5th)
Synopsys Defensics
Average Rating
8.6
Number of Reviews
4
Ranking in other categories
Fuzz Testing Tools (5th)
 

Mindshare comparison

CodeSonar and Synopsys Defensics aren’t in the same category and serve different purposes. CodeSonar is designed for Application Security Tools and holds a mindshare of 1.2%, up 0.8% compared to last year.
Synopsys Defensics, on the other hand, focuses on Fuzz Testing Tools, holds 19.8% mindshare, up 12.6% since last year.
Application Security Tools
Fuzz Testing Tools
 

Featured Reviews

Mathieu ALBRESPY - PeerSpot reviewer
Nice interface, quick to deploy, and easy to expand
This is the first time I've used this kind of software. It was the only one we could apply to analyze with MISRA rules. At my new company, I tried to use Klocwork. I tried to use it, just once so I cannot compare it exactly with CodeSonar. I also have a plugin for my Visual Studio and I try to make it work. It's not easy, however, I don't think that we have this kind of functionality with CodeSonar. It can do some incremental analysis. However, since this feature is also available on CodeSonar, it would be a good idea to have a plugin on Visual Studio just to have a quick analysis.
Read full review
it_user586716 - PeerSpot reviewer
Technical support provided protocol-specific documentation to prove that some positives were not false.
A security assurance engineer was able to perform due diligence across all network-facing protocols. My prior organization designed, developed and deployed a Network Attached Storage (NAS) appliance. A key part of the company wide security assurance program for all products, is to perform penetration testing against all network facing IP ports. For the web, SSL and RESTful APIs, there are very good COTS and open source tools to perform Dynamic Application Security Testing (DAST) testing. Unfortunately for NAS protocols like SMB, NFS, CIFS, and iSCSI, I researched and found that Codenomicon Defensics was the only viable source to satisfy our DAST requirements. Through the use of Selenium for automated web testing, it was easily found out that Codenomicon Defensics could be integrated into our Continuous Integration / Continuous Deployment (CI / CD) Agile processes, specific to automated testing. Also, like many of the other application security testing products, Defensics incorporates automatic update support and works on Windows, MacOS and Linux desktops.
Read full review
report
See which vendors are best for you
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
See recommendations
816,562 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
25%
Computer Software Company
14%
University
9%
Financial Services Firm
6%
Computer Software Company
21%
Manufacturing Company
18%
Financial Services Firm
9%
Healthcare Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about CodeSonar?
CodeSonar’s most valuable feature is finding security threats.
See all answers
What is your experience regarding pricing and costs for CodeSonar?
The application’s pricing is high compared to other tools. I rate its pricing a four out of ten.
See all answers
What needs improvement with CodeSonar?
Our license model allows one user per license. Currently, we have limitations for VPN profiles. We can’t share the key with other users. There could be a shared licensing model for the users. It wi...
See all answers
Ask a question
Earn 20 points
 

Comparisons

SonarQube Server (formerly SonarQube) vs CodeSonar Logo
SonarQube Server (formerly SonarQube) vs CodeSonar
Compared 61% of the time
Coverity vs CodeSonar Logo
Coverity vs CodeSonar
Compared 18% of the time
Polyspace Code Prover vs CodeSonar Logo
Polyspace Code Prover vs CodeSonar
Compared 8% of the time
Klocwork vs CodeSonar Logo
Klocwork vs CodeSonar
Compared 4% of the time
Fortify Static Code Analyzer vs CodeSonar Logo
Fortify Static Code Analyzer vs CodeSonar
Compared 3% of the time
More CodeSonar Competitors
SonarQube Server (formerly SonarQube) vs Synopsys Defensics Logo
SonarQube Server (formerly SonarQube) vs Synopsys Defensics
Compared 26% of the time
Snyk vs Synopsys Defensics Logo
Snyk vs Synopsys Defensics
Compared 24% of the time
Fortify on Demand vs Synopsys Defensics Logo
Fortify on Demand vs Synopsys Defensics
Compared 10% of the time
HCL AppScan vs Synopsys Defensics Logo
HCL AppScan vs Synopsys Defensics
Compared 9% of the time
PortSwigger Burp Suite Professional vs Synopsys Defensics Logo
PortSwigger Burp Suite Professional vs Synopsys Defensics
Compared 9% of the time
More Synopsys Defensics Competitors
 

Product Reports

Buyer's Guide
Application Security Tools
November 2024
CodeSonar reportDownload CodeSonar product report
Buyer's Guide
GitLab vs. Synopsys Defensics
October 2024
Synopsys Defensics reportDownload Synopsys Defensics product report
 

Also Known As

No data available
Defensics, Codenomicon Defensics
 

Learn More

CodeSecure
Black Duck
 

Overview

GrammaTech enables organizations to develop software applications more efficiently, on-budget, and on-schedule by helping to eliminate harmful defects that can cause system failures, enable data breaches, and ultimately increase corporate liabilities in today’s connected world. GrammaTech is the developer of CodeSonar, the most powerful source and binary code analysis solution available today. Extraordinarily precise, CodeSonar finds, on average, 2 times more serious defects in software than other static analysis solutions. Designed for organizations with zero tolerance for defects and vulnerabilities in their applications, CodeSonar provides static analysis for applications where reliability and security are paramount - widely used by software developers in avionics, medical, automotive, industrial control, and other mission-critical applications. Some of GrammaTech's customers include Toyota, GE, Hyundai, Kawasaki, LG, Lockheed Martin, NASA, Northrop Grumman, Panasonic, and Samsung.

Defensics® fuzz testing is a comprehensive, powerful, and automated black box solution that enables organizations to effectively and efficiently discover and remediate security weaknesses in software. By taking a systematic and intelligent approach to negative testing, Defensics allows organizations to ensure software security without compromising on product innovation, increasing time to market, or inflating operational costs.

 

Sample Customers

Viveris, Micrel Medical Devices, Olympus, SOFTEQ, SONY
Coriant, CERT-FI, Next Generation Networks
Buyer's Guide
Application Security Tools
November 2024
Download Free Report
Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Application Security Tools. Updated: November 2024.
DOWNLOAD NOW
816,562 professionals have used our research since 2012.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.