Application Security
SonarQube
SonarQube is an open-source platform that helps developers manage code quality and security vulnerabilities in their applications. It provides continuous inspection of code quality and security.
- Category
- Application Security
- Company size
- Medium
- Price range
- Free
- Website
- sonarqube.org
Research SonarQube in detail on Clateway Insights → (free sign-in: full analysis, pricing, documentation, executives, market position and AI-assisted comparison).
Key features
- Static Code Analysis
- Security Vulnerability Detection
- Code Quality Metrics
- Integration with CI/CD pipelines
- Customizable Rules
- Reporting and Dashboards
Strengths
- Open-source and community-driven
- Strong integration capabilities
- Comprehensive code quality metrics
Weaknesses
- Limited support for dynamic analysis
- Can require significant configuration
Industries
- Software Development
- DevOps
- Education
SonarQube reviews
No reviews yet. Sign in to Clateway Insights to review SonarQube.
Alternatives to SonarQube
- Anchore (Application Security) – Container and software supply chain security platform providing SBOM management, vulnerability scanning, and compliance policy enforcement for DevSecOps.
- AppScan (Application Security) – IBM AppScan provides a comprehensive application security testing solution that helps organizations identify vulnerabilities in web and mobile applications.…
- Cybeats (Application Security) – SBOM management and product security platform providing software supply chain visibility, vulnerability management, and compliance for connected products.
- Dependency-Track (Application Security) – Open-source SBOM analysis platform by OWASP providing software composition analysis, vulnerability identification, and policy compliance for development teams.
- Finite State (Application Security) – Product security platform for software supply chain risk management, SBOM generation, firmware analysis, and vulnerability management for connected devices.
- Fortify (Application Security) – Fortify by Micro Focus provides a suite of application security solutions that help organizations secure their software development lifecycle. It offers both…
- FOSSA (Application Security) – Open source license compliance and security platform providing software composition analysis, SBOM management, and license risk identification.
- Mend (Application Security) – Application security platform (formerly WhiteSource) providing SCA, SAST, SBOM management, and automated remediation for software development teams.
SonarQube alternatives and competitors
Compare SonarQube
- SonarQube vs Anchore
- SonarQube vs Cybeats
- SonarQube vs Dependency-Track
- SonarQube vs Finite State
- SonarQube vs FOSSA
- SonarQube vs Mend
Frequently asked questions
What does SonarQube do?
SonarQube is an open-source platform that helps developers manage code quality and security vulnerabilities in their applications. It provides continuous inspection of code quality and security.
What category is SonarQube in?
SonarQube is listed under Application Security in the Clateway Vendor & Solution Marketplace.
What are alternatives to SonarQube?
Alternatives to SonarQube in Application Security include Anchore, AppScan, Cybeats, Dependency-Track, Finite State.
Research SonarQube in detail on Clateway Insights → (free sign-in: full analysis, pricing, documentation, executives, market position and AI-assisted comparison).