# CAST Highlight vs SonarQube Comparison | | CAST Highlight | SonarQube | |---|---|---| | **Star Rating** | 4.5 out of 5 | 4.4 out of 5 | | **Total Reviews** | 91 | 145 | | **Largest Market Segment** | Enterprise (59.8% of reviews) | Enterprise (42.7% of reviews) | | **Entry Level Price** | Starting at $44,000.00 Per Year | Free | --- ## Top Pros & Cons ### CAST Highlight Pros: - Ease of Use (8 reviews) - Easy Setup (4 reviews) Cons: - Complex Navigation (1 reviews) - Dashboard Issues (1 reviews) ### SonarQube Pros: - Code Quality (24 reviews) - Features (20 reviews) Cons: - Software Bugs (12 reviews) - Complex Configuration (10 reviews) --- ## Ratings Comparison | Rating | CAST Highlight | SonarQube | |---|---|---| | **Meets Requirements** | 8.8 (62 reviews) | 8.8 (124 reviews) | | **Ease of Use** | 8.7 (64 reviews) | 8.5 (127 reviews) | | **Ease of Setup** | 9.0 (52 reviews) | 8.1 (86 reviews) | | **Ease of Admin** | 8.8 (48 reviews) | 8.5 (67 reviews) | | **Quality of Support** | 9.1 (58 reviews) | 8.2 (105 reviews) | | **Has the product been a good partner in doing business?** | 9.2 (47 reviews) | 8.3 (60 reviews) | | **Product Direction (% positive)** | 9.2 (59 reviews) | 8.6 (120 reviews) | --- ## Pricing ### CAST Highlight #### Entry-Level Pricing Plan: Complete Edition Price: Starting at $44,000.00 Per Year Description: Annual SaaS subscription that includes ALL insights priced based on the size of the application portfolio (max # of apps). Key Features: - Application Portfolio Core Insights - Cloud Insights - SCA Insights [Browse all 4 editions](https://www.g2.com/products/cast-highlight/pricing) #### Free Trial Yes ### SonarQube #### Entry-Level Pricing Plan: Free Price: Free Description: For developers wanting to try SonarQube. Key Features: - Scan of private projects limited to 50k lines of code - Users limited to max. 5 - Architecture management [Browse all 3 editions](https://www.g2.com/products/sonarqube/pricing) #### Free Trial Yes --- ## Features Comparison By Category ### Static Application Security Testing (SAST) | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | 7.3/10 | 29 | #### Administration | Feature | CAST Highlight | SonarQube | |---|---|---| | **API / Integrations** | Not enough data | 8.0 (22 reviews) | | **Extensibility** | Not enough data | 6.0 (20 reviews) | #### Analysis | Feature | CAST Highlight | SonarQube | |---|---|---| | **Reporting and Analytics** | Not enough data | 7.4 (23 reviews) | | **Issue Tracking** | Not enough data | 8.0 (22 reviews) | | **Static Code Analysis** | Not enough data | 9.1 (25 reviews) | | **Code Analysis** | Not enough data | 9.1 (27 reviews) | #### Testing | Feature | CAST Highlight | SonarQube | |---|---|---| | **Command-Line Tools** | Not enough data | 6.6 (18 reviews) | | **Manual Testing** | Not enough data | 6.0 (20 reviews) | | **Test Automation** | Not enough data | 6.5 (24 reviews) | | **Compliance Testing** | Not enough data | 6.9 (18 reviews) | | **Black-Box Scanning** | Not enough data | 6.8 (17 reviews) | | **Detection Rate** | Not enough data | 8.2 (21 reviews) | | **False Positives** | Not enough data | 6.9 (24 reviews) | #### Agentic AI - Static Application Security Testing (SAST) | Feature | CAST Highlight | SonarQube | |---|---|---| | **Autonomous Task Execution** | Not enough data | 6.0 (5 reviews) | ### Software Development Analytics Tools | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | 8.0/10 | 36 | #### Functionality | Feature | CAST Highlight | SonarQube | |---|---|---| | **Repository Integration** | Not enough data | 8.1 (32 reviews) | | **Analytics and Trends** | Not enough data | 8.5 (31 reviews) | | **Productivity Updates** | Not enough data | 8.2 (30 reviews) | #### Management | Feature | CAST Highlight | SonarQube | |---|---|---| | **Historical Data Consolidation** | Not enough data | Feature Not Available | | **Data Context** | Not enough data | 7.5 (26 reviews) | | **Testing Integration** | Not enough data | 7.9 (30 reviews) | ### Bug Tracking | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | 8.1/10 | 12 | #### Bug Reporting | Feature | CAST Highlight | SonarQube | |---|---|---| | **User Reports & Feedback** | Not enough data | 7.7 (10 reviews) | | **Tester Reports & Feedback** | Not enough data | 8.0 (10 reviews) | | **Team Reports & Comments** | Not enough data | 8.3 (10 reviews) | #### Bug Monitoring | Feature | CAST Highlight | SonarQube | |---|---|---| | **Analytics** | Not enough data | 7.8 (10 reviews) | | **Bug History** | Not enough data | 8.2 (11 reviews) | | **Data Retention** | Not enough data | 8.5 (10 reviews) | #### Agentic AI - Bug Tracking | Feature | CAST Highlight | SonarQube | |---|---|---| | **Adaptive Learning** | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | ### Software Composition Analysis | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | 8.6/10 | 30 | | **SonarQube** | N/A | N/A | #### Functionality - Software Composition Analysis | Feature | CAST Highlight | SonarQube | |---|---|---| | **Language Support** | 8.5 (29 reviews) | Not enough data | | **Integration** | 8.5 (27 reviews) | Not enough data | | **Transparency** | 8.8 (28 reviews) | Not enough data | #### Effectiveness - Software Composition Analysis | Feature | CAST Highlight | SonarQube | |---|---|---| | **Remediation Suggestions** | 8.8 (26 reviews) | Not enough data | | **Continuous Monitoring** | 8.5 (24 reviews) | Not enough data | | **Thorough Detection** | 8.6 (27 reviews) | Not enough data | ### Cloud Migration Assessment Tools | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | 8.1/10 | 40 | | **SonarQube** | N/A | N/A | #### Assessment | Feature | CAST Highlight | SonarQube | |---|---|---| | **IT Infrastructure** | 8.0 (32 reviews) | Not enough data | | **Cost Benefit** | 7.9 (32 reviews) | Not enough data | | **Applications** | 8.5 (36 reviews) | Not enough data | ### Secure Code Review | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | 7.6/10 | 48 | #### Documentation | Feature | CAST Highlight | SonarQube | |---|---|---| | **Feedback** | Not enough data | 8.0 (43 reviews) | | **Prioritization** | Not enough data | 7.7 (38 reviews) | | **Remediation Suggestions** | Not enough data | 8.4 (39 reviews) | #### Security | Feature | CAST Highlight | SonarQube | |---|---|---| | **False Positives** | Not enough data | 6.8 (38 reviews) | | **Custom Compliance** | Not enough data | 7.0 (34 reviews) | | **Agility** | Not enough data | 8.0 (38 reviews) | ### Application Security Posture Management (ASPM) | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | 8.5/10 | 7 | #### Risk management - Application Security Posture Management (ASPM) | Feature | CAST Highlight | SonarQube | |---|---|---| | **Vulnerability Management** | Not enough data | 9.3 (5 reviews) | | **Risk Assessment and Prioritization** | Not enough data | Feature Not Available | | **Compliance Management** | Not enough data | 9.0 (5 reviews) | | **Policy Enforcement** | Not enough data | 8.9 (6 reviews) | #### Integration and efficiency - Application Security Posture Management (ASPM) | Feature | CAST Highlight | SonarQube | |---|---|---| | **Integration with Development Tools** | Not enough data | 7.8 (6 reviews) | | **Automation and Efficiency** | Not enough data | Feature Not Available | #### Reporting and Analytics - Application Security Posture Management (ASPM) | Feature | CAST Highlight | SonarQube | |---|---|---| | **Trend Analysis** | Not enough data | 7.8 (6 reviews) | | **Risk Scoring** | Not enough data | Not enough data | | **Customizable Dashboards** | Not enough data | 8.3 (5 reviews) | #### Agentic AI - Application Security Posture Management (ASPM) | Feature | CAST Highlight | SonarQube | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Multi-step Planning** | Not enough data | Not enough data | ### Software Bill of Materials (SBOM) | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | N/A | N/A | #### Functionality - Software Bill of Materials (SBOM) | Feature | CAST Highlight | SonarQube | |---|---|---| | **Format Support** | Not enough data | Not enough data | | **Annotations** | Not enough data | Not enough data | | **Attestation** | Not enough data | Not enough data | #### Management - Software Bill of Materials (SBOM) | Feature | CAST Highlight | SonarQube | |---|---|---| | **Monitoring** | Not enough data | Not enough data | | **Dashboards** | Not enough data | Not enough data | | **User Provisioning** | Not enough data | Not enough data | ### Software Intelligence Platforms | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | 9.2/10 | 7 | | **SonarQube** | N/A | N/A | #### Analytics - Software Intelligence Platforms | Feature | CAST Highlight | SonarQube | |---|---|---| | **Visualization** | 9.8 (7 reviews) | Not enough data | | **Technical Debt Identification** | 9.8 (7 reviews) | Not enough data | | **Codebase Health Metrics** | 9.0 (7 reviews) | Not enough data | | **Actionable Insights** | 9.5 (7 reviews) | Not enough data | #### Usability - Software Intelligence Platforms | Feature | CAST Highlight | SonarQube | |---|---|---| | **Querying** | 8.8 (7 reviews) | Not enough data | | **Integrations** | 8.3 (7 reviews) | Not enough data | | **UI** | 9.5 (7 reviews) | Not enough data | ### AI Governance Tools | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | N/A | N/A | #### AI Compliance | Feature | CAST Highlight | SonarQube | |---|---|---| | **Regulatory Reporting** | Not enough data | Not enough data | | **Automated Compliance** | Not enough data | Not enough data | | **Audit Trails** | Not enough data | Feature Not Available | #### Risk Management & Monitoring | Feature | CAST Highlight | SonarQube | |---|---|---| | **AI Risk Management** | Not enough data | Feature Not Available | | **Real-time Monitoring** | Not enough data | Not enough data | #### AI Lifecycle Management | Feature | CAST Highlight | SonarQube | |---|---|---| | **Lifecycle Automation** | Not enough data | Feature Not Available | #### Access Control and Security | Feature | CAST Highlight | SonarQube | |---|---|---| | **Pole-based Access Control (RBAC)** | Not enough data | Not enough data | #### Collaboration and Communication | Feature | CAST Highlight | SonarQube | |---|---|---| | **Model Sharing and Reuse** | Not enough data | Feature Not Available | #### Agentic AI - AI Governance Tools | Feature | CAST Highlight | SonarQube | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Multi-step Planning** | Not enough data | Not enough data | | **Cross-system Integration** | Not enough data | Not enough data | | **Adaptive Learning** | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Feature Not Available | | **Decision Making** | Not enough data | Not enough data | ### Strategic Portfolio Management | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | N/A | N/A | #### Strategic Planning - Strategic Portfolio Management | Feature | CAST Highlight | SonarQube | |---|---|---| | **Objectives** | Not enough data | Not enough data | | **Roadmaps** | Not enough data | Not enough data | | **Demand management** | Not enough data | Not enough data | | **Resource Planning** | Not enough data | Not enough data | | **Planning** | Not enough data | Not enough data | | **Simulation** | Not enough data | Not enough data | | **Prioritization** | Not enough data | Not enough data | | **Alignment** | Not enough data | Not enough data | #### Strategic Management - Strategic Portfolio Management | Feature | CAST Highlight | SonarQube | |---|---|---| | **Visiblity** | Not enough data | Not enough data | | **Tracking** | Not enough data | Not enough data | | **Risk Management** | Not enough data | Not enough data | | **Implementation** | Not enough data | Not enough data | | **Change Management** | Not enough data | Not enough data | | **Optimization** | Not enough data | Not enough data | | **Strategy Model** | Not enough data | Not enough data | | **Frameworks** | Not enough data | Not enough data | #### Data Analysis - Strategic Portfolio Management | Feature | CAST Highlight | SonarQube | |---|---|---| | **ESG Impact** | Not enough data | Not enough data | | **Financial Performance** | Not enough data | Not enough data | | **Forecasting** | Not enough data | Not enough data | #### Artificial Intelligence - Strategic Portfolio Management | Feature | CAST Highlight | SonarQube | |---|---|---| | **Process Intelligence** | Not enough data | Not enough data | | **Predictive Insights** | Not enough data | Not enough data | | **Virtual Agents** | Not enough data | Not enough data | ### Static Code Analysis | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | 6.2/10 | 8 | #### Agentic AI - Static Code Analysis | Feature | CAST Highlight | SonarQube | |---|---|---| | **Adaptive Learning** | Not enough data | 6.3 (8 reviews) | | **Natural Language Interaction** | Not enough data | 5.7 (7 reviews) | | **Proactive Assistance** | Not enough data | 6.7 (8 reviews) | ### Application Portfolio Management | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | N/A | N/A | #### Agentic AI - Application Portfolio Management | Feature | CAST Highlight | SonarQube | |---|---|---| | **Autonomous Task Execution** | Not enough data | Not enough data | | **Multi-step Planning** | Not enough data | Not enough data | | **Cross-system Integration** | Not enough data | Not enough data | | **Adaptive Learning** | Not enough data | Not enough data | | **Natural Language Interaction** | Not enough data | Not enough data | | **Proactive Assistance** | Not enough data | Not enough data | | **Decision Making** | Not enough data | Not enough data | ### AI AppSec Assistants | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | N/A | N/A | #### Performance - AI AppSec Assistants | Feature | CAST Highlight | SonarQube | |---|---|---| | **Remediation** | Not enough data | Not enough data | | **Real-time Vulnerability Detection** | Not enough data | Not enough data | | **Accuracy** | Not enough data | Not enough data | #### Integration - AI AppSec Assistants | Feature | CAST Highlight | SonarQube | |---|---|---| | **Stack Integration** | Not enough data | Not enough data | | **Workflow Integration** | Not enough data | Not enough data | | **Codebase Contextual Awareness** | Not enough data | Not enough data | ### Cloud Security | Product | Score | Reviews | |---|---|---| | **CAST Highlight** | N/A | N/A | | **SonarQube** | N/A | N/A | #### Cloud Visibility | Feature | CAST Highlight | SonarQube | |---|---|---| | **Data Discovery** | Not enough data | Not enough data | | **Cloud Registry** | Not enough data | Not enough data | | **Cloud Gap Analytics** | Not enough data | Not enough data | #### Security | Feature | CAST Highlight | SonarQube | |---|---|---| | **Data Security** | Not enough data | Not enough data | | **Data loss Prevention** | Not enough data | Not enough data | | **Security Auditing** | Not enough data | Not enough data | #### Identity | Feature | CAST Highlight | SonarQube | |---|---|---| | **SSO** | Not enough data | Not enough data | | **Governance** | Not enough data | Not enough data | | **User Analytics** | Not enough data | Not enough data | --- ## Categories **Shared Categories (2):** [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [Software Bill of Materials (SBOM) Software](https://www.g2.com/categories/software-bill-of-materials-sbom) **Unique to CAST Highlight (4):** [Strategic Portfolio Management Software](https://www.g2.com/categories/strategic-portfolio-management), [Application Portfolio Management Software](https://www.g2.com/categories/application-portfolio-management), [Software Intelligence Platforms Software](https://www.g2.com/categories/software-intelligence-platforms), [Cloud Migration Assessment Tools](https://www.g2.com/categories/cloud-migration-assessment-tools) **Unique to SonarQube (8):** [Application Security Posture Management (ASPM) Software](https://www.g2.com/categories/application-security-posture-management-aspm), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review), [Software Development Analytics Tools](https://www.g2.com/categories/software-development-analytics-tools), [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Bug Tracking Software](https://www.g2.com/categories/bug-tracking), [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [ AI Governance Tools](https://www.g2.com/categories/ai-governance-tools) --- ## Reviewer Demographics ### By Company Size | Segment | CAST Highlight | SonarQube | |---|---|---| | **Small-Business** | 25.6% | 17.5% | | **Mid-Market** | 14.6% | 39.9% | | **Enterprise** | 59.8% | 42.7% | ### By Industry #### CAST Highlight - **Information Technology and Services:** 25.6% - **Computer Software:** 18.3% - **Financial Services:** 8.5% - **Consulting:** 4.9% - **Management Consulting:** 4.9% - **Telecommunications:** 3.7% - **Automotive:** 3.7% - **Banking:** 3.7% - **Government Administration:** 3.7% - **Accounting:** 2.4% - **Other:** 20.7% #### SonarQube - **Information Technology and Services:** 26.4% - **Computer Software:** 20.7% - **Financial Services:** 7.9% - **Automotive:** 3.6% - **Banking:** 3.6% - **Computer & Network Security:** 2.9% - **Hospital & Health Care:** 2.9% - **Manufacturing:** 2.1% - **Aviation & Aerospace:** 2.1% - **Telecommunications:** 2.1% - **Other:** 25.7% --- ## Alternatives ### Alternatives to CAST Highlight - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2366 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (814 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (896 reviews) - [GanttPRO](https://www.g2.com/products/ganttpro-ganttpro/reviews) — 4.8/5 stars (583 reviews) - [Profit.co](https://www.g2.com/products/profit-co/reviews) — 4.7/5 stars (491 reviews) - [Oracle Primavera](https://www.g2.com/products/oracle-primavera/reviews) — 4.4/5 stars (387 reviews) - [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) — 4.4/5 stars (314 reviews) - [ServiceNow Strategic Portfolio Management](https://www.g2.com/products/servicenow-strategic-portfolio-management/reviews) — 4.1/5 stars (272 reviews) - [Cascade](https://www.g2.com/products/cascade-strategy-cascade/reviews) — 4.7/5 stars (251 reviews) - [IBM Targetprocess](https://www.g2.com/products/ibm-targetprocess/reviews) — 4.3/5 stars (243 reviews) ### Alternatives to SonarQube - [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2366 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (896 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (26 reviews) - [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews) - [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews) - [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (133 reviews) - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) — 4.6/5 stars (141 reviews) - [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (43 reviews) - [Kiuwan Code Security & Insights](https://www.g2.com/products/kiuwan-code-security-insights/reviews) — 4.5/5 stars (34 reviews) - [Embold](https://www.g2.com/products/embold/reviews) — 4.7/5 stars (18 reviews) --- ## Top Discussions ### CAST Highlight - Title: [What is cast imaging?](https://www.g2.com/discussions/what-is-cast-imaging) — 1 comment > **Top comment:** "CAST imaging is a code analysis tool which will provide a google type navigation of the code. help you understand the architecture of the application,..." - Title: [What is CAST software tool?](https://www.g2.com/discussions/what-is-cast-software-tool) — 1 comment > **Top comment:** "CAST Highlight is a code analysis tool wherein it reads the software source code and prepares findings on the health (i.e. Agility, Resiliency and Elegance)..." - Title: [License cost please ?](https://www.g2.com/discussions/license-cost-please) — 1 comment, 1 upvote > **Top comment:** "You can refer to this link to understand the pricing: https://learn.castsoftware.com/highlight/pricing" - Title: [What does cast highlight do?](https://www.g2.com/discussions/what-does-cast-highlight-do) — 1 comment > **Top comment:** "Portfolio Analysis" ### SonarQube No discussions available for this product. --- **Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/cast-highlight-vs-sonarqube)