Best Static Code Analysis Tools with C# Capabilities

How Many Static Code Analysis Tools Products Does G2 Track?

Total Products under this Category: 135

Category Stats (Nov 2026)

  • Average Rating: 4.4/5 (↑0.02 vs Oct 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: SoftSpell (+0.5%) - Among all products in this category, SoftSpell recorded the largest rating increase compared to last month

Last updated: November 02, 2026

How Does G2 Rank Static Code Analysis Tools Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 2,500+ Authentic Reviews
  • 135+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Static Code Analysis Tools

G2 Grid® for Static Code Analysis Tools plotting products by satisfaction and market presence

Highlighted products: SonarQube, Aikido Security, Checkmarx, Gearset DevOps, Semgrep, SoftSpell, Black Duck Polaris Platform, and ReSharper C++.

Underlying data: [Grid® JSON](https://www.g2.com/categories/static-code-analysis/grids.json?focus%5B%5D=sonarqube&focus%5B%5D=aikido-security&focus%5B%5D=checkmarx&focus%5B%5D=gearset-devops&focus%5B%5D=semgrep&focus%5B%5D=softspell&focus%5B%5D=black-duck-polaris-platform&focus%5B%5D=resharper-c)

SonarQube

Sonar, the industry standard for code verification and automated code review, helps reduce outages, improve security, and lower risks associated with AI and agentic coding. As an independent verification platform, Sonar enables organizations to securely develop at the speed of AI. Sonar is the foundation for high-performance software engineering, analyzing over 750 billion lines of code daily to ensure applications are secure, reliable, and maintainable. Rooted in the open source community, Sonar is trusted by 7M+ developers globally, including teams at ServiceNow, Booking.com, Deutsche Bank, AstraZeneca, and Ford Motor Company.

Average Rating: 4.4/5.0

Total Reviews: 164

How Do G2 Users Rate SonarQube?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.5/10 (Category avg: 8.5/10)
  • Ease of Use: 8.6/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind SonarQube?

  • Seller: Sonar
  • Company Website:
  • Year Founded: 2008
  • HQ Location: Geneva, Switzerland
  • LinkedIn® Page: www.linkedin.com
    1,041 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, DevOps Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 41% Large, 41% Medium

What Do G2 Reviewers Say About SonarQube?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the high-quality code analysis from SonarQube, ensuring cleaner, more reliable, and maintainable code.
  • Users appreciate SonarQube's separation of new and old code, enhancing prioritization of findings and improving overall code quality.
  • Users appreciate the effective issue identification of SonarQube, which enhances code quality and facilitates timely resolutions.
  • Users appreciate the ease of use of SonarQube, highlighting its simple setup and seamless CI/CD integration.
  • Users appreciate the easy integrations of SonarQube with CI/CD workflows, enhancing overall code quality and efficiency.
Cons
  • Users often face software bugs in SonarQube, leading to confusion with false positives and complex error messages.
  • Users find the complex configuration of SonarQube challenging, especially with initial setup and rule tuning in large projects.
  • Users report experiencing false positives that necessitate extra time for manual review and adjustments.
  • Users find the configuration complexity of SonarQube challenging, particularly with large projects and excessive warnings.
  • Users find the initial setup and configuration complex, especially for large projects, requiring time and careful tuning.

What Are Recent G2 Reviews of SonarQube?

What Are G2 Users Discussing About SonarQube?

Checkmarx

Checkmarx exists so the world can innovate faster than it ever has and still trust what it builds. That purpose starts with closing the Risk Gap — the widening distance between how fast software gets created and how fast risk can be understood and removed. As AI compresses the software development lifecycle from months to minutes, the old model of shipping code with known vulnerabilities and racing to patch it before attackers strike no longer works. Checkmarx's foundation: decades of deterministic threat intelligence and trillions of lines of code scanned each year. The Checkmarx One platform gives enterprises comprehensive application security, built to capture risk, eliminate vulnerabilities, and unify governance. Checkmarx Fusion now pairs that foundation with Claude-powered AI reasoning, unifying both engines to lead the category in detection accuracy. From there, the Checkmarx Assist family — Developer Assist, Triage Assist, and Remediation Assist — prevents vulnerabilities at the point of creation, prioritizes findings by real-world attackability, and generates review-ready fixes, so nothing sits in backlog waiting on a human to catch up. Checkmarx keeps detection and remediation independent. Instead of having the same system that writes the code grade its own work, security teams get oversight they can trust. This is the promise at the center of the mission: developers and agents never have to become security experts, and security leaders never have to take security on faith so enterprises can innovate at machine speed without ever trading speed for certainty.

Average Rating: 4.2/5.0

Total Reviews: 46

How Do G2 Users Rate Checkmarx?

  • Has the product been a good partner in doing business?: 8.6/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.3/10 (Category avg: 8.5/10)
  • Ease of Use: 8.5/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Checkmarx?

  • Seller: Checkmarx
  • Company Website:
  • Year Founded: 2006
  • HQ Location: Paramus, NJ
  • LinkedIn® Page: www.linkedin.com
    997 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 56% Large, 22% Medium

What Do G2 Reviewers Say About Checkmarx?

AI-generated summary from verified user reviews

Pros
  • Users find Checkmarx easy to implement into existing repositories, appreciating its user-friendly interface and comprehensive features.
  • Users appreciate the intuitive user interface of Checkmarx, making security reviews straightforward and user-friendly.
  • Users value the accuracy of results from Checkmarx, noting its effective code review and user-friendly interface.
  • Users appreciate the automation of security reviews in Checkmarx, praising its ease of implementation and user-friendly interface.
  • Users commend Checkmarx for its excellent customer support, consistently available to assist with any issues that arise.
Cons
  • Users experience a high number of false positives with Checkmarx, especially when analyzing Kotlin based projects.
  • Users are frustrated with Checkmarx's poor feature support for Kotlin, leading to numerous false positives in scans.
  • Users note a significant issue with false positives in Kotlin support, affecting their experience when using Checkmarx.
  • Users feel that the poor navigation in Checkmarx hinders their ability to efficiently use the dashboards.

What Are Recent G2 Reviews of Checkmarx?

What Are G2 Users Discussing About Checkmarx?

OpenText Static Application Security Testing

OpenText™ Static Application Security Testing (SAST) is a comprehensive solution designed to identify and remediate security vulnerabilities within an application's source code during the early stages of development. By analyzing code from the "inside out," SAST provides immediate feedback to developers, enabling them to address security issues promptly and effectively. Key Features and Functionality: - Extensive Language Support: Supports over 33 programming languages and more than 1,400 vulnerability categories, ensuring broad applicability across various development environments. - Integration with Development Tools: Seamlessly integrates with popular Integrated Development Environments (IDEs) such as Eclipse, Visual Studio, and JetBrains, as well as Continuous Integration/Continuous Deployment (CI/CD) tools like Jenkins and Bamboo, facilitating a smooth incorporation into existing workflows. - Scalable Deployment Options: Offers flexible deployment models, including on-premises, cloud-based, and Software as a Service (SaaS) solutions, allowing organizations to choose the setup that best fits their needs. - Advanced Analysis Capabilities: Utilizes multiple algorithms and an expansive knowledge base of secure coding rules to perform thorough code analysis, pinpointing the root causes of vulnerabilities and providing detailed remediation guidance. Primary Value and Problem Solved: OpenText SAST empowers organizations to proactively manage application security by detecting and addressing vulnerabilities early in the Software Development Life Cycle (SDLC). This proactive approach reduces the risk of security breaches, minimizes the cost and effort associated with late-stage remediation, and enhances the overall security posture of applications. By integrating security testing into the development process, OpenText SAST helps developers create more secure code, leading to robust and reliable software products.

Average Rating: 4.5/5.0

Total Reviews: 21

How Do G2 Users Rate OpenText Static Application Security Testing?

  • Has the product been a good partner in doing business?: 8.5/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.1/10 (Category avg: 8.5/10)
  • Ease of Use: 8.7/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind OpenText Static Application Security Testing?

  • Seller: OpenText
  • Year Founded: 1991
  • HQ Location: Waterloo, ON
  • LinkedIn® Page: www.linkedin.com
    22,835 employees on LinkedIn®
  • Ownership: NASDAQ:OTEX
  • Phone: +1-519-888-7111

Who Uses This Product?

  • Top Industries: Banking, Financial Services
  • Company Size: 50% Large, 29% Small

What Do G2 Reviewers Say About OpenText Static Application Security Testing?

AI-generated summary from verified user reviews

Pros
  • Users value the easy integrations of OpenText Static Application Security Testing, enhancing workflow with various third-party tools.
  • Users value the extensive integration capabilities of OpenText Static Application Security Testing with various third-party tools.
  • Users value the extensive integration support of OpenText Static Application Security Testing with numerous languages and third-party tools.
Cons
  • Users dislike the false positives generated, but can manage them using the ignore feature in scans.

What Are Recent G2 Reviews of OpenText Static Application Security Testing?

What Are G2 Users Discussing About OpenText Static Application Security Testing?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

ReSharper

ReSharper is a renowned productivity tool that turns Microsoft Visual Studio into a much better IDE. Both individual .NET developers and teams rely on ReSharper to write and maintain code in a more manageable and enjoyable way, adopt the best coding practices, and deliver higher quality applications faster.

Average Rating: 4.5/5.0

Total Reviews: 83

How Do G2 Users Rate ReSharper?

  • Has the product been a good partner in doing business?: 8.5/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.1/10 (Category avg: 8.5/10)
  • Ease of Use: 8.8/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind ReSharper?

Who Uses This Product?

  • Who Uses This: Software Engineer, Software Developer
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 38% Medium, 38% Small

What Are Recent G2 Reviews of ReSharper?

What Are G2 Users Discussing About ReSharper?

Kiuwan Code Security & Insights

Fast, Flexible Code Security! Kiuwan is a robust, end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Security Testing (SAST), Software Composition Analysis (SCA), Software Governance and Code Quality, empowering your team to quickly identify and remediate vulnerabilities. By integrating seamlessly into your CI/CD pipeline, Kiuwan enables early detection and remediation of security issues. Kiuwan supports strict compliance with industry standards including OWASP, CWE, MISRA, NIST, PCI DSS, and CERT, among others. Top features: ✅ Extensive language support: Over 30 programming languages. ✅ Detailed action plans: Prioritize remediation with tailored action plans. ✅ Code Security: Seamless Static Application Security Testing (SAST) integration. ✅ Insights: On-demand or continuous scanning Software Composition Analysis (SCA) to help reduce third-party threats. ✅ One-click Software Bill of Materials (SBOM) generation. Kiuwan is now part of Sembi - a global portfolio of market-leading software brands focused on software quality, security, and developer productivity. Code Smarter. Secure Faster. Ship Sooner

Average Rating: 4.5/5.0

Total Reviews: 29

How Do G2 Users Rate Kiuwan Code Security & Insights?

  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.7/10 (Category avg: 8.5/10)
  • Ease of Use: 8.5/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Kiuwan Code Security & Insights?

  • Seller: Sembi
  • Company Website:
  • Year Founded: 2023
  • HQ Location: Austin, US
  • LinkedIn® Page: www.linkedin.com
    114 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Banking
  • Company Size: 41% Large, 35% Medium

What Do G2 Reviewers Say About Kiuwan Code Security & Insights?

AI-generated summary from verified user reviews

Pros
  • Users value the accuracy of the results from Kiuwan, significantly enhancing their coding security measures.
  • Users appreciate the accuracy of findings from Kiuwan, ensuring reliable insights from code scans and reports.
  • Users praise the efficient customer support of Kiuwan, consistently resolving problems and enhancing user satisfaction.
  • Users value the user-friendly interface of Kiuwan Code Security & Insights, enhancing their overall experience and satisfaction.
  • Users appreciate the user-friendly automation testing of Kiuwan, enhancing their experience with efficient code scans and reporting.

What Are Recent G2 Reviews of Kiuwan Code Security & Insights?

Codacy

Codacy is the code quality and security platform for AI-assisted engineering teams. AI is now embedded through the engineering workflow, which has made teams faster, but also adds risk to everything they ship. Codacy helps AI-assisted teams ship high-quality, secure code across the full software development lifecycle, starting in the agent and editor, through pull requests in Git, and into containers and runtime security. At each stage we check for quality issues, security vulnerabilities and AI coding risk introduced into the codebase, and help devs and agent fix them effortlessly. A team's standards become automated guardrails that apply across every IDE, AI coding agent, and Pull Request. More than 250,000 developers rely on Codacy to keep quality and security stable as AI changes how software gets built. Add your repo and get your free scan report in minutes: https://codacy.com

Average Rating: 4.6/5.0

Total Reviews: 31

How Do G2 Users Rate Codacy?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.8/10 (Category avg: 8.5/10)
  • Ease of Use: 9.0/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Codacy?

  • Seller: Codacy
  • Year Founded: 2012
  • HQ Location: Lisbon, Lisboa
  • LinkedIn® Page: www.linkedin.com
    61 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 55% Small, 23% Large

What Do G2 Reviewers Say About Codacy?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the security insights and vulnerability management features of Codacy, enhancing code safety and cleanliness.
  • Users value the integrated automation of Codacy, finding it easy to use for maintaining code quality.
  • Users appreciate the integrated automation testing of Codacy, finding it easy to use and effective for code quality.
  • Users appreciate the high code quality provided by Codacy's integrated automation and helpful static code analyses.
  • Users commend the helpful customer support of Codacy, appreciating their immediate assistance and responsive service.
Cons
  • Users find Codacy expensive at $19/month, particularly impacting smaller organizations' budgets and affordability.

What Are Recent G2 Reviews of Codacy?

OpenText Core Application Security

Fortify on Demand (FoD) is a complete Application Security as a Service solution. It offers an easy way to get started with the flexibility to scale. In addition to static and dynamic, Fortify on Demand covers in-depth mobile app security testing, open-source analysis, and vendor application security management. False positives are removed for every test and test results can be manually reviewed by application security experts.

Average Rating: 4.1/5.0

Total Reviews: 34

How Do G2 Users Rate OpenText Core Application Security?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.9/10 (Category avg: 8.5/10)
  • Ease of Use: 8.2/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind OpenText Core Application Security?

  • Seller: OpenText
  • Year Founded: 1991
  • HQ Location: Waterloo, ON
  • LinkedIn® Page: www.linkedin.com
    22,835 employees on LinkedIn®
  • Ownership: NASDAQ:OTEX
  • Phone: +1-519-888-7111

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 41% Large, 32% Small

What Are Recent G2 Reviews of OpenText Core Application Security?

What Are G2 Users Discussing About OpenText Core Application Security?

Klocwork

Perforce Klocwork is an enterprise grade SAST solution for C, C++, C#, Rust, Java, JavaScript, Python, and Kotlin. It helps development teams detect security vulnerabilities, quality issues, and reliability defects early, while supporting compliance with industry and regulatory standards. Klocwork is purpose built to analyze very large, complex codebases and scales to hundreds of millions of lines of code, well beyond the practical limits of many traditional SAST tools. This makes it especially suited for organizations developing long lived, safety critical, or security critical systems. Designed for DevOps and DevSecOps, Klocwork integrates with complex build systems, CI/CD pipelines, cloud and containerized environments, and common developer tools—enabling consistent security and quality enforcement without slowing development. Static Application Security Testing (SAST) Klocwork identifies a wide range of security vulnerabilities, including SQL injection, tainted data flows, buffer overflows, and other insecure coding practices. It also detects bugs and quality issues such as null pointer dereferences, memory and resource leaks, uncaught exceptions, and code smells. The solution supports compliance with internationally recognized standards including CWE, OWASP, CERT, PCI DSS, DISA STIG, and ISO/IEC TS 17961. Automated CI/CD integrations make continuous security testing practical even for very large systems. AI Assisted Code Remediation with MCP Klocwork extends static analysis with AI assisted code remediation, designed to help developers resolve findings faster and with greater confidence. Using MCP based capabilities, Klocwork securely exposes rich static analysis context—defect data, rule knowledge, and precise fix guidance—to supported AI code assist tools directly within the IDE. Rather than relying on generic AI suggestions, Klocwork’s remediation feature combines deep static analysis insights with comprehensive documentation and exact fix instructions, enabling AI assistants to propose accurate, context aware corrections for security vulnerabilities, quality defects, and coding standard violations. Fixes are presented as clear diffs and require developer review and approval, making the approach suitable for safety and security critical environments. By integrating remediation into the developer workflow, Klocwork reduces time spent interpreting analysis results, researching fixes, and switching between tools. Developers stay in their IDE, receive guided remediation aligned with secure coding standards and project specific rules, and can immediately re analyze code to validate fixes. This completes the optimal shift left approach—helping teams not only find issues early, but fix them efficiently and consistently. Project Streams and Enterprise Scalability Klocwork’s Project Streams feature simplifies managing shared codebases with multiple variants or branches. A single rule configuration can be applied across streams, issues common to multiple variants stay synchronized, and stream specific findings are clearly identified for reporting and compliance. Developer Focused and Centralized Klocwork integrates directly into popular IDEs to deliver fast, contextual feedback as developers write code. Out of the box compiler support eliminates manual setup, while centralized dashboards provide visibility into trends, risk, and compliance across projects of any size.

Average Rating: 4.4/5.0

Total Reviews: 22

How Do G2 Users Rate Klocwork?

  • Has the product been a good partner in doing business?: 8.1/10 (Category avg: 8.7/10)
  • Ease of Admin: 7.3/10 (Category avg: 8.5/10)
  • Ease of Use: 7.9/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Klocwork?

  • Seller: Perforce
  • Year Founded: 1995
  • HQ Location: Minneapolis, MN
  • LinkedIn® Page: www.linkedin.com
    2,009 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 48% Medium, 35% Small

What Are Recent G2 Reviews of Klocwork?

Semmle

Semmle makes the management of software development easier than ever before. By giving you complete visibility _ for every project, location, team, developer, timeframe and cost _ Semmle is engineering intelligence at its most advanced.

Average Rating: 4.4/5.0

Total Reviews: 75

How Do G2 Users Rate Semmle?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.8/10 (Category avg: 8.5/10)
  • Ease of Use: 8.6/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Semmle?

  • Seller: Semmle
  • Year Founded: 2006
  • HQ Location: San Francisco, California
  • LinkedIn® Page: www.linkedin.com
    2 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 54% Small, 36% Medium

What Are Recent G2 Reviews of Semmle?

Roslyn

The .NET Compiler Platform ("Roslyn") provides open-source C# and Visual Basic compilers with rich code analysis APIs.

Average Rating: 4.4/5.0

Total Reviews: 11

How Do G2 Users Rate Roslyn?

  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.3/10 (Category avg: 8.5/10)
  • Ease of Use: 8.5/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 3.3/10 (Category avg: 10/10)

Who Is the Company Behind Roslyn?

Who Uses This Product?

  • Company Size: 58% Large, 42% Small

What Are Recent G2 Reviews of Roslyn?

What Are G2 Users Discussing About Roslyn?

Veracode Application Security Platform

Veracode helps companies that innovate through software deliver secure code on time. Unlike on-premise solutions that are hard to scale and focused on finding rather than fixing, Veracode comprises a unique combination of SaaS technology and on-demand expertise that enables DevSecOps through integration with your pipeline,empower developers to fix security defects, and scales your program through best practices to achieve your desired outcomes. Veracode covers your all your AppSec needs in one solution through a combination of five analysis types available for 24 programming languages, 77 frameworks, and application types as varied as microservices, mainframe and mobile apps.

Average Rating: 3.8/5.0

Total Reviews: 25

How Do G2 Users Rate Veracode Application Security Platform?

  • Has the product been a good partner in doing business?: 7.9/10 (Category avg: 8.7/10)
  • Ease of Admin: 7.4/10 (Category avg: 8.5/10)
  • Ease of Use: 7.3/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Veracode Application Security Platform?

  • Seller: VERACODE
  • Year Founded: 2006
  • HQ Location: Burlington, MA
  • LinkedIn® Page: www.linkedin.com
    500 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 69% Large, 31% Medium

What Do G2 Reviewers Say About Veracode Application Security Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the accuracy of findings from Veracode, providing clear reports with corrections and suggestions for improvement.
  • Users value the single entry point for application security, enabling detailed insights and effective security scanning.
  • Users value the scanning efficiency of Veracode, enabling precise reports and seamless integration into CI/CD pipelines.
  • Users value the effective security vulnerability identification provided by Veracode, enhancing their overall application safety.
  • Users value the effective vulnerability detection of Veracode, enhancing security across applications through comprehensive analysis.
Cons
  • Users face a lack of information due to mismatches in documentation and delayed notifications during uploads.
  • Users report poor customer support with pushy account executives and difficulties in resolving issues efficiently.
  • Users find the overly complex license model challenging, contributing to frustration and misalignment with expectations.
  • Users find the confusing interface of Veracode to be challenging, especially during unsuccessful uploads without immediate notifications.
  • Users are concerned about the cost issues related to complex licensing and justifying customer success investments.

What Are Recent G2 Reviews of Veracode Application Security Platform?

What Are G2 Users Discussing About Veracode Application Security Platform?

Embold

Embold supports developers and development teams by finding critical code issues before they become roadblocks. It is the perfect tool to analyze, diagnose, transform, and sustain your software efficiently. With the use of A.I. and machine learning technologies, Embold can immediately prioritize issues, suggest ways to best solve them, and re-factor software where necessary. Run it within your current Dev-Ops stack, on premise or in the cloud privately or publicly.

Average Rating: 4.7/5.0

Total Reviews: 15

How Do G2 Users Rate Embold?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.7/10 (Category avg: 8.5/10)
  • Ease of Use: 9.4/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Embold?

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 56% Small, 28% Medium

What Are Recent G2 Reviews of Embold?

Source Insight

Source Insight parses your source code and maintains its own database of symbolic information dynamically while you work, and presents useful contextual information to you automatically.

Average Rating: 4.5/5.0

Total Reviews: 24

How Do G2 Users Rate Source Insight?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.5/10)
  • Ease of Use: 9.6/10 (Category avg: 8.8/10)

Who Is the Company Behind Source Insight?

Who Uses This Product?

  • Company Size: 69% Large, 31% Medium

What Are Recent G2 Reviews of Source Insight?

What Are G2 Users Discussing About Source Insight?

CodeSonar

As a leading provider of static application security testing (SAST) solutions, CodeSecure helps software developers solve challenging issues throughout the software development life cycle (SDLC) to protect mission-critical software and devices from failure and cyberattack. By enabling developers to shift security testing left, CodeSecure CodeSonar seamlessly integrates into CI/CD and DevSecOps tools to assist developers in designing, developing, and deploying trusted software applications – meeting standards, minimizing risk and accelerating projects to gain a competitive advantage. CodeSecure CodeSonar is a multi-language static application security testing (SAST) solution supporting C, C++, C# and Java. CodeSonar provides deep static analysis to quickly find and fix defects impacting code quality, safety and security. With seamless integrations into developer tools such as GitHub, GitLab, Jenkins, Visual Studio and others, CodeSonar is easily adopted into developer workflows to efficiently and continuously test code to create higher quality, safer and more secure software.  

Average Rating: 4.3/5.0

Total Reviews: 13

How Do G2 Users Rate CodeSonar?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 6.3/10 (Category avg: 8.5/10)
  • Ease of Use: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind CodeSonar?

Who Uses This Product?

  • Company Size: 38% Medium, 31% Large

What Are Recent G2 Reviews of CodeSonar?

What Are G2 Users Discussing About CodeSonar?

Codecov

Codecov is a code coverage tool.

Average Rating: 3.9/5.0

Total Reviews: 10

How Do G2 Users Rate Codecov?

  • Has the product been a good partner in doing business?: 4.2/10 (Category avg: 8.7/10)
  • Ease of Admin: 7.5/10 (Category avg: 8.5/10)
  • Ease of Use: 8.1/10 (Category avg: 8.8/10)
  • What is your organization's estimated ROI on the product (payback period in months)?: 10/10 (Category avg: 10/10)

Who Is the Company Behind Codecov?

  • Seller: Codecov
  • Year Founded: 2015
  • HQ Location: San Francisco, California
  • LinkedIn® Page: www.linkedin.com
    2 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software
  • Company Size: 50% Small, 40% Medium

What Are Recent G2 Reviews of Codecov?

What Are G2 Users Discussing About Codecov?