Try our new research platform with insights from 80,000+ expert users

GitGuardian Platform vs SonarQube Cloud (formerly SonarCloud) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.1
GitGuardian enhances secrets detection efficiency, reduces manual review, integrates seamlessly into workflows, and protects corporate networks efficiently.
Sentiment score
5.0
SonarQube Cloud enhances code quality and efficiency, seamlessly integrating into CI/CD pipelines, recognized for cost and time savings.
It is easily integrable with the CI/CD pipeline and supports multiple projects with its extensive plugin options.
The product is designed for bigger clients, while smaller companies are often put aside.
 

Customer Service

Sentiment score
8.2
The GitGuardian Platform offers exceptional customer support with quick, knowledgeable service, impressing users with their flexibility and communication.
Sentiment score
7.8
SonarQube Cloud support is responsive but needs proactive assistance and better documentation for improved integration and open-source engagement.
Integrating it into different solutions is straightforward.
The customer service and support for SonarQube Cloud are responsive and helpful.
 

Scalability Issues

Sentiment score
7.8
GitGuardian Platform is scalable, integrates seamlessly with workflows, and effectively manages large deployments and growing teams.
Sentiment score
6.0
SonarQube Cloud is scalable for various user bases with minor billing limitations, offering an easy, management-friendly interface.
There are limitations, and it seems to have fewer capabilities than Veracode.
SonarQube Cloud is a scalable product, and I rate its scalability at seven out of ten.
 

Stability Issues

Sentiment score
8.5
GitGuardian Platform is highly stable and reliable, with minimal downtime and consistent, efficient performance praised by users.
Sentiment score
7.7
SonarQube Cloud is reliable but needs better user experience, documentation, and integration with GitLab's CI/CD pipeline.
It is a quite stable solution.
From my team's feedback, it is almost an eight out of ten.
 

Room For Improvement

Enhancements needed for GitGuardian Platform include improved customization, integration, UI, access controls, secret scanning, and Single Sign-On.
SonarQube Cloud faces challenges in testing, UI, integration, and vulnerability detection, prompting developers to consider alternatives.
I need a solution that can bring together three key areas: vulnerabilities, static scanning, and misarchitecture.
I would like to see SonarQube Cloud provide more detailed solutions for fixing code issues, especially solutions related to CVEs.
SonarQube Cloud could improve its vulnerability detection compared to Veracode.
 

Setup Cost

GitGuardian offers reasonable pricing, scalable for enterprises, with reliable features and a generous free tier for small teams.
SonarQube Cloud pricing varies by code lines, costing $4,000 per million, with mixed reviews on affordability and alternatives.
From my experience, SonarQube Cloud (formerly SonarCloud) is very expensive for small companies.
SonarQube Cloud is roughly equivalent in cost to Veracode, maybe a little cheaper.
 

Valuable Features

GitGuardian Platform offers extensive secret detection, easy integration, and proactive security with low false-positive rates and user-friendly interface.
SonarQube Cloud provides robust code analysis, security features, and seamless integration, ideal for startups needing minimal maintenance.
It is integrated easily with the CI/CD pipeline, saving time and cost.
I use SonarQube Cloud (formerly SonarCloud) to check the quality of developer code and identify vulnerabilities.
I find SonarQube Cloud very easy to use and simple to integrate initially.
 

Categories and Ranking

GitGuardian Platform
Ranking in Static Application Security Testing (SAST)
5th
Average Rating
9.0
Reviews Sentiment
7.4
Number of Reviews
24
Ranking in other categories
Application Security Tools (7th), Data Loss Prevention (DLP) (6th), Software Supply Chain Security (4th), DevSecOps (4th)
SonarQube Cloud (formerly S...
Ranking in Static Application Security Testing (SAST)
8th
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
14
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of April 2025, in the Static Application Security Testing (SAST) category, the mindshare of GitGuardian Platform is 0.4%, up from 0.2% compared to the previous year. The mindshare of SonarQube Cloud (formerly SonarCloud) is 6.6%, down from 6.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST)
 

Featured Reviews

Joan Ging - PeerSpot reviewer
It dramatically improved our ability to detect secrets, saved us time, and reduced our mean time to remediation
While they do offer some basic reporting, more comprehensive reporting would be beneficial in the long run. This would allow me to demonstrate the value of the product over time to continue to effectively budget for this subscription, especially as they add features that may come at an additional cost. I appreciate the improvements made to reporting over the past year, but continued development in this area will be appreciated. We have encountered occasional difficulties with the Single Sign-On process. There is room for improvement in its current implementation. It works, but was not quite as smooth as the rest of the GitGuardian experience.
Archana Verma - PeerSpot reviewer
Provides valuable insights on code vulnerabilities and integrates seamlessly with CI/CD pipelines
I find SonarQube Cloud to be very user-friendly with an easy-to-use interface. It provides detailed code smell reports and insights on hotspots, which can later represent security vulnerabilities. It gives precise reports compared to Coverity and has a slightly lower number of false positives. It is integrated easily with the CI/CD pipeline, saving time and cost. It provides information on upcoming vulnerability details and loopholes that might turn into vulnerabilities.
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
846,617 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
21%
Government
12%
Media Company
10%
Financial Services Firm
6%
Computer Software Company
18%
Financial Services Firm
10%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about GitGuardian Internal Monitoring ?
It's also worth mentioning that GitGuardian is unique because they have a free tier that we've been using for the first twelve months. It provides full functionality for smaller teams. We're a smal...
What needs improvement with GitGuardian Internal Monitoring ?
We'd like to request a new GitGuardian feature that automates user onboarding and access control for code repositories. Ideally, when a user contributes to a repository, they would be automatically...
What do you like most about SonarCloud?
Recently, they introduced support for mono reports and microservices, which is a noteworthy development as it provides a more detailed view of each service.
What is your experience regarding pricing and costs for SonarCloud?
From what I understand, SonarQube Cloud is roughly equivalent in cost to Veracode, maybe a little cheaper.
What needs improvement with SonarCloud?
SonarQube Cloud could improve its vulnerability detection compared to Veracode. Additionally, it has fewer capabilities, which prompted us to use Veracode.
 

Also Known As

GitGuardian Internal Monitoring
No data available
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Automox, 66degrees (ex Cloudbakers), Iress, Now:Pensions, Payfit, Orange, BouyguesTelecom, Seequent, Stedi, Talend, Snowflake... 
Information Not Available
Find out what your peers are saying about GitGuardian Platform vs. SonarQube Cloud (formerly SonarCloud) and other solutions. Updated: April 2025.
846,617 professionals have used our research since 2012.