What is SonarQube?
SonarQube is the leading tool for continuously inspecting the Code Quality & Security of your codebases and guiding development teams during Code Reviews. Covering 27 programming languages, while pairing-up with your existing software pipeline, SonarQube provides clear remediation guidance for developers to understand and fix issues and ultimately deliver better and safer software. With over 170k deployments helping small development teams as well as global organizations, SonarQube provides the means for all teams and companies around the world to own and impact their Code Quality.
Company Details
Need Assistance?
We're here to help you with understanding our reports and the data inside to help you make decisions.
Get AssistanceSonarQube Ratings
Real user data aggregated to summarize the product performance and customer experience.
Download the entire Product Scorecard
to access more information on SonarQube.
Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.
91 Likeliness to Recommend
100 Plan to Renew
84 Satisfaction of Cost Relative to Value
Emotional Footprint Overview
Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.
+93 Net Emotional Footprint
The emotional sentiment held by end users of the software based on their experience with the vendor. Responses are captured on an eight-point scale.
How much do users love SonarQube?
Pros
- Performance Enhancing
- Respectful
- Altruistic
- Transparent
How to read the Emotional Footprint
The Net Emotional Footprint measures high-level user sentiment towards particular product offerings. It aggregates emotional response ratings for various dimensions of the vendor-client relationship and product effectiveness, creating a powerful indicator of overall user feeling toward the vendor and product.
While purchasing decisions shouldn't be based on emotion, it's valuable to know what kind of emotional response the vendor you're considering elicits from their users.
Footprint
Negative
Neutral
Positive
Feature Ratings
Automated Workflow
Vulnerability Scanning
Static Application Security Testing (SAST)
Mobile Application Security Testing
Container Security Testing
Policy Engine and Enforcements
Software Composition Analysis (SCA)
Dynamic Application Security Testing (DAST)
Risk Scoring
False Positive Remediation
Interactive Application Security Testing (IAST)
Vendor Capability Ratings
Ease of Data Integration
Business Value Created
Breadth of Features
Ease of Implementation
Ease of IT Administration
Availability and Quality of Training
Vendor Support
Ease of Customization
Usability and Intuitiveness
Quality of Features
Product Strategy and Rate of Improvement
SonarQube Reviews
Jeemish M.
- Role: Information Technology
- Industry: Technology
- Involvement: IT Leader or Manager
Submitted Jul 2023
Enterprise scale SAST scans at zero cost !!
Likeliness to Recommend
What differentiates SonarQube from other similar products?
Ease of implementation and support for most common technology stacks like java, Js, .net, python, groovy, etc for SAST scans
What is your favorite aspect of this product?
Minimalistic UI and multiple technology stack support
What do you dislike most about this product?
Requires a lot of manual setup and configuration for maintenance
What recommendations would you give to someone considering this product?
Must have for implementing automated SAST scans at enterprise scale
Pros
- Helps Innovate
- Reliable
- Performance Enhancing
- Respectful
Oferi G.
- Role: Information Technology
- Industry: Construction
- Involvement: End User of Application
Submitted Jan 2023
Securing Applications Made Easy
Likeliness to Recommend
What differentiates SonarQube from other similar products?
Using SonarQube is easy an it comes with amazing application security testing criterion
What is your favorite aspect of this product?
I like the many security features of SonarQube The software makes testing applications for security threshold easy
What do you dislike most about this product?
No dislikes in the way SonarQube works
What recommendations would you give to someone considering this product?
SonarQube has met our needs and has been our go to software when it comes to testing application security and for this reason I recommend it.
Pros
- Continually Improving Product
- Unique Features
- Efficient Service
- Inspires Innovation
Chintan G.
- Role: Information Technology
- Industry: Entertainment
- Involvement: IT Leader or Manager
Submitted Nov 2022
Fine product for detecting code vulnerabilities
Likeliness to Recommend
What differentiates SonarQube from other similar products?
SonarQube has large library of various programming language code vulnerabilities and defects.
What is your favorite aspect of this product?
SonarQube provides multi-language static analysis. Their publicly available ruleset includes thousands of rules covering various issue categories and language standards.
What do you dislike most about this product?
Nothing specifically as of now.
What recommendations would you give to someone considering this product?
Try to integrate this at every stage of project development within your CI/CD pipeline. This way you will utilize the real value of the product as it can then detect majority of the vulnerabilities.
Pros
- Helps Innovate
- Inspires Innovation
- Generous Negotitation
- Performance Enhancing
Cons
- Commodity Features
- Vendor Friendly Policies
- Less Fair