Introducing G2.ai, the future of software buying.Try now

Compare Black Duck and SonarQube

Save
    Log in to your account
    to save comparisons,
    products and more.
At a Glance
Black Duck
Black Duck
Star Rating
(27)4.0 out of 5
Market Segments
Enterprise (50.0% of reviews)
Information
Pros & Cons
Entry-Level Pricing
No pricing available
Learn more about Black Duck
SonarQube
SonarQube
Star Rating
(125)4.5 out of 5
Market Segments
Enterprise (41.9% of reviews)
Information
Pros & Cons
Entry-Level Pricing
Free
Browse all 5 pricing plans
AI Generated Summary
AI-generated. Powered by real user reviews.
  • Users report that SonarQube excels in its overall star rating of 4.4, which reflects a strong user satisfaction compared to Black Duck's 4.0. Reviewers mention that SonarQube's comprehensive code quality analysis features, such as the "Code Smell Detection," significantly enhance their development process.
  • Reviewers mention that SonarQube has a larger user base in the Enterprise segment, with 43.7% of reviews coming from this market, while Black Duck has 52.0%. Users on G2 appreciate SonarQube's adaptability and integration capabilities with various CI/CD tools, making it a preferred choice for enterprise-level projects.
  • Users say that SonarQube offers a free entry-level price, making it accessible for teams looking to start with code quality management. In contrast, Black Duck does not provide a free tier, which some reviewers find limiting for smaller teams or startups.
  • Reviewers mention that SonarQube has a higher score for meeting requirements (8.8) compared to Black Duck (7.7). Users report that SonarQube's "Technical Debt Management" feature is particularly effective in helping teams prioritize code improvements, which is a critical aspect for many developers.
  • Users on G2 highlight that SonarQube's ease of use (8.5) and ease of admin (8.5) scores are superior to Black Duck's (8.0 and 8.3, respectively). Reviewers say that the intuitive dashboard and user-friendly interface of SonarQube make it easier for teams to adopt and manage their code quality processes.
  • Reviewers mention that SonarQube's quality of support (8.2) outshines Black Duck's (7.5), with users reporting that the community forums and documentation are particularly helpful. Users say that the responsiveness of SonarQube's support team has been a significant factor in their positive experience with the product.
Pricing
Entry-Level Pricing
Black Duck
No pricing available
SonarQube
Community Edition
Free
Browse all 5 pricing plans
Free Trial
Black Duck
Free Trial is available
SonarQube
Free Trial is available
Ratings
Meets Requirements
7.9
15
8.8
108
Ease of Use
8.0
15
8.5
111
Ease of Setup
8.1
9
8.1
70
Ease of Admin
8.3
9
8.5
63
Quality of Support
7.7
13
8.2
91
Has the product been a good partner in doing business?
8.3
11
8.4
57
Product Direction (% positive)
6.4
16
8.6
105
Features by Category
Static Application Security Testing (SAST)Hide 14 FeaturesShow 14 Features
Not enough data
7.3
22
Administration
Not enough data
7.8
19
Not enough data
6.0
20
Analysis
Not enough data
7.4
21
Not enough data
8.0
20
Not enough data
8.9
22
Not enough data
9.0
22
Testing
Not enough data
6.6
18
Not enough data
5.9
19
Not enough data
6.0
21
Not enough data
6.9
18
Not enough data
6.8
17
Not enough data
8.2
21
Not enough data
6.9
21
Agentic AI - Static Application Security Testing (SAST)
Not enough data
Not enough data
Software Development Analytics ToolsHide 6 FeaturesShow 6 Features
Not enough data
8.0
33
Functionality
Not enough data
8.1
31
Not enough data
8.4
30
Not enough data
8.2
29
Management
Not enough data
7.7
27
Not enough data
7.5
25
Not enough data
7.8
27
Not enough data
8.1
11
Bug Reporting
Not enough data
7.7
10
Not enough data
8.0
10
Not enough data
8.3
10
Bug Monitoring
Not enough data
7.8
10
Not enough data
8.2
10
Not enough data
8.5
10
Agentic AI - Bug Tracking
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Software Composition AnalysisHide 6 FeaturesShow 6 Features
8.4
6
Not enough data
Functionality - Software Composition Analysis
Not enough data
Not enough data
8.0
5
Not enough data
Not enough data
Not enough data
Effectiveness - Software Composition Analysis
8.3
5
Not enough data
8.0
5
Not enough data
9.3
5
Not enough data
Not enough data
7.5
37
Documentation
Not enough data
7.7
35
Not enough data
7.6
35
Not enough data
8.2
36
Security
Not enough data
6.9
33
Not enough data
7.0
32
Not enough data
7.9
33
Application Security Posture Management (ASPM)Hide 11 FeaturesShow 11 Features
Not enough data
8.6
7
Risk management - Application Security Posture Management (ASPM)
Not enough data
9.3
5
Not enough data
8.7
5
Not enough data
9.0
5
Not enough data
8.9
6
Integration and efficiency - Application Security Posture Management (ASPM)
Not enough data
7.8
6
Not enough data
8.6
6
Reporting and Analytics - Application Security Posture Management (ASPM)
Not enough data
7.8
6
Not enough data
Not enough data
Not enough data
8.3
5
Agentic AI - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Software Bill of Materials (SBOM)Hide 6 FeaturesShow 6 Features
Not enough data
Not enough data
Functionality - Software Bill of Materials (SBOM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Management - Software Bill of Materials (SBOM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
AI Compliance
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Risk Management & Monitoring
Not enough data
Not enough data
Not enough data
Not enough data
AI Lifecycle Management
Not enough data
Not enough data
Access Control and Security
Not enough data
Not enough data
Collaboration and Communication
Not enough data
Not enough data
Agentic AI - AI Governance Tools
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Static Code AnalysisHide 3 FeaturesShow 3 Features
Not enough data
6.2
8
Agentic AI - Static Code Analysis
Not enough data
6.3
8
Not enough data
5.7
7
Not enough data
6.7
8
AI AppSec AssistantsHide 6 FeaturesShow 6 Features
Not enough data
Not enough data
Performance - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Cloud Visibility
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Categories
Categories
Shared Categories
Black Duck
Black Duck
SonarQube
SonarQube
Black Duck and SonarQube are categorized as AI AppSec Assistants and Software Composition Analysis
Reviews
Reviewers' Company Size
Black Duck
Black Duck
Small-Business(50 or fewer emp.)
15.4%
Mid-Market(51-1000 emp.)
34.6%
Enterprise(> 1000 emp.)
50.0%
SonarQube
SonarQube
Small-Business(50 or fewer emp.)
17.7%
Mid-Market(51-1000 emp.)
40.3%
Enterprise(> 1000 emp.)
41.9%
Reviewers' Industry
Black Duck
Black Duck
Information Technology and Services
30.8%
Computer Software
30.8%
Computer & Network Security
7.7%
Utilities
3.8%
Telecommunications
3.8%
Other
23.1%
SonarQube
SonarQube
Information Technology and Services
26.6%
Computer Software
21.8%
Financial Services
6.5%
Hospital & Health Care
3.2%
Computer & Network Security
3.2%
Other
38.7%
Alternatives
Black Duck
Black Duck Alternatives
Snyk
Snyk
Add Snyk
Veracode Application Security Platform
Veracode Application Security Platform
Add Veracode Application Security Platform
GitHub
GitHub
Add GitHub
GitLab
GitLab
Add GitLab
SonarQube
SonarQube Alternatives
GitHub
GitHub
Add GitHub
GitLab
GitLab
Add GitLab
Semgrep
Semgrep
Add Semgrep
Veracode Application Security Platform
Veracode Application Security Platform
Add Veracode Application Security Platform
Discussions
Black Duck
Black Duck Discussions
Monty the Mongoose crying
Black Duck has no discussions with answers
SonarQube
SonarQube Discussions
Monty the Mongoose crying
SonarQube has no discussions with answers