We use SonarQube to check for vulnerabilities and quality.
Sonar Software and Solutions
SonarQube Server (formerly SonarQube)
113 reviews
72 discussions
Sonar Reviews
IT Developer at PT Oto Multiartha
This solution is simple to use and can be quickly deployed
Pros and Cons
- "This solution is simple to use and can be quickly deployed."
- "I think the code security can be improved."
What is our primary use case?
How has it helped my organization?
The solution has helped us to find flaws in the Syntax and comply with requirements.
What is most valuable?
I have found the most valuable features to be scanning for bugs or fixing the hotspot. These features have helped to improve the code quality.
What needs improvement?
I think the code security can be improved. Code security should comply with the standard security list.
I would like to see the feature of Compliance Reporting added to the solution.
For how long have I used the solution?
I have been using this solution for two years.
What do I think about the stability of the solution?
I would rate the stability a ten out of ten.
What do I think about the scalability of the solution?
About ten people in my company are using this solution. On average, we use this solution once in a week.
Which solution did I use previously and why did I switch?
We chose SonarQube due to its free community edition. After a while, when we will need more features, we will probably purchase the solution next year.
How was the initial setup?
I would rate the initial setup a ten out of ten. The solution is easy to install and use. It took us only a day to deploy SonarQube. We downloaded the solution and followed the setup process. We simply integrated this solution with Azure DevOps. The maintenance of this solution is handled by one person from the database team.
What about the implementation team?
We implemented the solution through an in-house application developer.
What other advice do I have?
This solution is simple to use and can be quickly deployed. I would rate the solution an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Sonar Projects
Check out these projects from our community members.
Sonarqube integration with bank Application
Sonarqube 4.0 integration with bank Application. The project was done mainly to give an overview to senior management… more »
Sonar Questions
Julia Miller
PeerSpot
Oct 07 2024
If you were talking to someone whose organization is considering SonarCloud, what would you say?
How would you rate it and why? Any other tips or advice?
Miriam Tover
Senior Delivery Ops Manager
PeerSpot
Oct 07 2024
How do you or your organization use this solution?
Please share with us so that your peers can learn from your experiences.
Thank you!
Julia Miller
PeerSpot
Oct 07 2024
Please share with the community what you think needs improvement with SonarCloud.
What are its weaknesses? What would you like to see changed in a future version?
Sagar ModySonarCloud's UI needs enhancement.
Miriam Tover
Senior Delivery Ops Manager
PeerSpot
Oct 07 2024
Hi,
We all know it's really hard to get good pricing and cost information.
Please share what you can so you can help your peers.
Julia Miller
PeerSpot
Sep 02 2024
Hi,
We all know it's really hard to get good pricing and cost information.
Please share what you can so you can help your peers.
Julia Miller
PeerSpot
Sep 02 2024
Please share with the community what you think needs improvement with SonarQube.
What are its weaknesses? What would you like to see changed in a future version?
Wang DayongNormally, SonarQube gives a quick response for scanning and is easier for… more »
Julia Miller
PeerSpot
Sep 02 2024
How do you or your organization use this solution?
Please share with us so that your peers can learn from your experiences.
Thank you!
Julia Miller
PeerSpot
Sep 02 2024
If you were talking to someone whose organization is considering SonarQube, what would you say?
How would you rate it and why? Any other tips or advice?
Miriam Tover
Senior Delivery Ops Manager
PeerSpot
Hi Everyone,
What do you like most about SonarQube?
Thanks for sharing your thoughts with the community!
Miriam Tover
Senior Delivery Ops Manager
PeerSpot
Hi Everyone,
What do you like most about SonarCloud?
Thanks for sharing your thoughts with the community!
Netanya Carmi
Content Manager at PeerSpot (formerly IT Central Station)
Joe Baker
Senior Program Manager at Oasis TE
Hello peers,
I am a Senior Program Manager at a large manufacturing company.
I am currently researching both SonarQube and CAST AIP. What are the main differences between these two solutions? Does CAST AIP scan for design violations?
Thankyou for your help.
Vishal-GoyalHi Joe - SonarQube is essentially a static code quality tool and has multiple… more »
Tej Muchhala
Works at Network Appliance ASIAPAC
Hello peers,
I work for a large tech services company. I am currently researching Application Security Tools.
Which software is ideal for code quality and security? Are SonarQube and Snyk a good choice? Are there any better alternatives?
Thank you for your help.
Kit Ted
Works at H
I'm currently researching the following two application security tools: Coverity and SonarQube.
Can anyone point me out to main differences between these 2 products?
Thanks for your help!
Vishal-Goyal
Chief Architect at Peristent Systems
Dear experts,
I wanted to check with those who have experience in using both SonarQube Community Edition and SonarQube Enterprise Edition.
What real advantages do you see in spending money to procure an enterprise license vs using community edition which is free?
I'm aware enterprise provide... Read More »
Netanya Carmi
Content Manager at PeerSpot (formerly IT Central Station)
Why is one better than the other?
Mauro VerderosaThey are mainly two different products.
If your goal is to set the quality on… more »
Vishal-GoyalWe have used SonarQube quite a lot and this is great to check code quality… more »
Netanya Carmi
Content Manager at PeerSpot (formerly IT Central Station)
Netanya Carmi
Content Manager at PeerSpot (formerly IT Central Station)
Netanya Carmi
Content Manager at PeerSpot (formerly IT Central Station)
Netanya Carmi
Content Manager at PeerSpot (formerly IT Central Station)
Manoj Kumar Kemisetty
Sap Advanced Business Application Programming Consultant at Accenture
Hi community members,
Is SonarQube is the best tool for static analysis? Are there any good tools that compete with SonarQube?
Peter ArvedlundI am not very familiar with SonarQube and their solutions, so I can not answer… more »
Purushothaman KThe static tool we can use is Fortify or IBM Appscan
SonarQube is widely used… more »
Vishal-GoyalWe have been using SonarQube and SonarLint (IDE) for quite some time on multiple… more »
Malla Reddy Bakka
Works at a tech services company with 10,001+ employees
I currently work for a global product engineering and lifecycle services partner.
We are currently evaluating Checkmarx and SonarQube for our PoC. What are the biggest differences between the two? Which would you recommend?
Thanks! I appreciate the help.
Elina PetrovnaSonarQube historically was focused on Code Quality and Best Practices. Recently… more »
ManojKumar9The major difference I have seen between Checkmarx and SonarQube is… more »
Curtis YankoI’ve always viewed sonarqube as a code quality tool that compliments many code… more »
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick Kenna.AppSec or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick Cequence Security or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick ERPScan SMART Cybersecurity Platform or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick CAST Highlight or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick NSFOCUS WVSS or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick SonarQube or Virsec Security Platform?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick Arxan Application Protection or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick Frontline WAS or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick Polyspace Code Prover or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick SonarQube or WhiteSource?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick Fortify Application Defender or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick Coverity or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick Netsparker Web Application Security Scanner or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick PortSwigger Burp or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
Julia Miller
PeerSpot
When looking for a Application Security solution, are you more likely to pick Acunetix Vulnerability Scanner or SonarQube?
What are the advantages and disadvantages of each?
Are there specific use cases where one provides a better solution than the other?
AshokPandey
Principal Software Engineer at Becton, Dickinson and Company
I work in a large enterprise Healthcare Company.
We are thinking of buying SonarQube licensing (Developer edition) and need to understand some details of it. Is there anyone I can talk to?
Donovan GreeffSonarQube is an open source tool. The use of the developer edition leads me to… more »
Daniel HallHi, we still use the community edition and not yet matured to the point where… more »
Russell Rothstein@Steven Gomez @Phil Denomme @Jeff Ingalls @Donovan Greeff @Kiran Gujju @Daniel… more »
William Hayes
Works at Securities America
I am looking for pros and cons for the Checkmarx vs SonarQube, in particular regarding:
false positives
tuning Sonarqube to reduce false positives without introducing false negatives.
I am also wondering if SonarQube could allow developers to delint their code before submitting it to SAS... Read More »
Donovan GreeffMy opinions are my own and do not represent any other entities that I may be or… more »
Durga GudimetlaSonarQube can be used for SAST. However, based on our internal analysis, our… more »
Swapna RagiSonarQube depends on completely what you configure the Rules. You will have the… more »
Miriam Tover
Senior Delivery Ops Manager
PeerSpot
One of the most popular comparisons on IT Central Station is Coverity vs SonarQube.
People like you are trying to decide which one is best for their company. Can you help them out?
What is the biggest difference between Coverity and SonarQube? Which of these two solutions would you recommend to a... Read More »
Miriam Tover
Senior Delivery Ops Manager
PeerSpot
One of the most popular comparisons on IT Central Station is Fortify on Demand vs SonarQube.
People like you are trying to decide which one is best for their company. Can you help them out?
What is the biggest difference between Fortify on Demand and SonarQube? Which of these two solutions w... Read More »
Popular Comparisons
Black Duck
Parasoft
Sonatype
Tenable
Qualys
Semmle
Cisco
Trend Micro
Perforce
CAST
Checkmarx