What is SonarQube?
SonarQube is the leading tool for continuously inspecting the Code Quality & Security of your codebases and guiding development teams during Code Reviews. Covering 27 programming languages, while pairing-up with your existing software pipeline, SonarQube provides clear remediation guidance for developers to understand and fix issues and ultimately deliver better and safer software. With over 170k deployments helping small development teams as well as global organizations, SonarQube provides the means for all teams and companies around the world to own and impact their Code Quality.
Company Details
Need Assistance?
We're here to help you with understanding our reports and the data inside to help you make decisions.
Get AssistanceSonarQube Ratings
Real user data aggregated to summarize the product performance and customer experience.
Download the entire Product Scorecard
to access more information on SonarQube.
Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.
90 Likeliness to Recommend
100 Plan to Renew
82 Satisfaction of Cost Relative to Value
1
Since last award
Emotional Footprint Overview
Product scores listed below represent current data. This may be different from data contained in reports and awards, which express data as of their publication date.
+94 Net Emotional Footprint
The emotional sentiment held by end users of the software based on their experience with the vendor. Responses are captured on an eight-point scale.
How much do users love SonarQube?
Pros
- Transparent
- Caring
- Over Delivered
- Appreciates Incumbent Status
How to read the Emotional Footprint
The Net Emotional Footprint measures high-level user sentiment towards particular product offerings. It aggregates emotional response ratings for various dimensions of the vendor-client relationship and product effectiveness, creating a powerful indicator of overall user feeling toward the vendor and product.
While purchasing decisions shouldn't be based on emotion, it's valuable to know what kind of emotional response the vendor you're considering elicits from their users.
Footprint
Negative
Neutral
Positive
Feature Ratings
Vulnerability Scanning
Policy Engine and Enforcements
Static Application Security Testing (SAST)
Mobile Application Security Testing
SDLC Integration
Dynamic Application Security Testing (DAST)
Interactive Application Security Testing (IAST)
Risk Scoring
Container Security Testing
Integrated Development Environment (IDE) plug-in
False Positive Remediation
Vendor Capability Ratings
Ease of Data Integration
Business Value Created
Ease of Implementation
Breadth of Features
Vendor Support
Ease of Customization
Quality of Features
Availability and Quality of Training
Product Strategy and Rate of Improvement
Usability and Intuitiveness
Ease of IT Administration
SonarQube Reviews
Oferi G.
- Role: Information Technology
- Industry: Construction
- Involvement: End User of Application
Submitted Jan 2023
Securing Applications Made Easy
Likeliness to Recommend
What differentiates SonarQube from other similar products?
Using SonarQube is easy an it comes with amazing application security testing criterion
What is your favorite aspect of this product?
I like the many security features of SonarQube The software makes testing applications for security threshold easy
What do you dislike most about this product?
No dislikes in the way SonarQube works
What recommendations would you give to someone considering this product?
SonarQube has met our needs and has been our go to software when it comes to testing application security and for this reason I recommend it.
Pros
- Continually Improving Product
- Unique Features
- Efficient Service
- Inspires Innovation
Chintan G.
- Role: Information Technology
- Industry: Entertainment
- Involvement: IT Leader or Manager
Submitted Nov 2022
Fine product for detecting code vulnerabilities
Likeliness to Recommend
What differentiates SonarQube from other similar products?
SonarQube has large library of various programming language code vulnerabilities and defects.
What is your favorite aspect of this product?
SonarQube provides multi-language static analysis. Their publicly available ruleset includes thousands of rules covering various issue categories and language standards.
What do you dislike most about this product?
Nothing specifically as of now.
What recommendations would you give to someone considering this product?
Try to integrate this at every stage of project development within your CI/CD pipeline. This way you will utilize the real value of the product as it can then detect majority of the vulnerabilities.
Pros
- Helps Innovate
- Inspires Innovation
- Generous Negotitation
- Performance Enhancing
Cons
- Commodity Features
- Vendor Friendly Policies
- Less Fair
Mary V.
- Role: Information Technology
- Industry: Technology
- Involvement: IT Leader or Manager
Submitted Jun 2022
My experience with SonarQube.
Likeliness to Recommend
What differentiates SonarQube from other similar products?
Code analysis, minimizing coding violations, ensuring that code complexity is resolved and complies with industry standards, running a health report for every check-in to the repository, removing duplicate methods or code, empty methods, and making sure we have a plan in place for the required.Our staff may visit the cloud-based server where SonarQube is running to assess the caliber of their code.
What is your favorite aspect of this product?
One of the main advantages is the connection with Jenkins. It's an excellent feature for enterprise apps since it makes the entire process easier and allows you to incorporate the tollgate idea. also SonarQube provides strong capabilities to maintain the quality of your code by eliminating bugs, which also increases the code's security.
What do you dislike most about this product?
It takes some time to integrate Sonarqube into CI/CD pipelines, and if the developer is less experienced, it can take even longer. The offered help guide also needs to be more recent. Finally, it would be great if there was a way to download the report and provide it to the teams.
What recommendations would you give to someone considering this product?
When using this tool, it is crucial to note that not all IDE codes can be used in SonarQube, so be careful when choosing them. Static scans are easy to incorporate into your DevOps lifecycle and have several benefits. We recommend companies to use this technology to guarantee the expected performance.
Pros
- Performance Enhancing
- Trustworthy
- Unique Features
- Efficient Service
