# Codacy, SonarQube, Coverity vs Klocwork Comparison

| | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Star Rating** | 4.6 out of 5 | 4.4 out of 5 | 4.2 out of 5 | 4.4 out of 5 | 
| **Total Reviews** | 29 | 144 | 55 | 23 | 
| **Largest Market Segment** | Small-Business (60.7% of reviews) | Enterprise (41.8% of reviews) | Enterprise (63.6% of reviews) | Mid-Market (50.0% of reviews) | 
| **Entry Level Price** | Free | Free | No pricing available | No pricing available | 

---
## Top Pros & Cons

### Codacy

Pros:
- Security (2 reviews)
- Automation (1 reviews)

Cons:
- Expensive (1 reviews)

### SonarQube

Pros:
- Code Quality (24 reviews)
- Features (20 reviews)

Cons:
- Software Bugs (12 reviews)
- Complex Configuration (10 reviews)

### Coverity

**Not enough data**

### Klocwork

**Not enough data**

---
## Ratings Comparison
| Rating | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
  | **Meets Requirements** | 9.0 (20 reviews) | 8.8 (122 reviews) | 8.9 (43 reviews) | 8.6 (19 reviews) | 
  | **Ease of Use** | 9.1 (21 reviews) | 8.5 (125 reviews) | 8.4 (43 reviews) | 7.9 (19 reviews) | 
  | **Ease of Setup** | 9.0 (14 reviews) | 8.1 (84 reviews) | 8.2 (19 reviews) | 7.5 (8 reviews) | 
  | **Ease of Admin** | 8.9 (12 reviews) | 8.5 (67 reviews) | 8.2 (19 reviews) | 7.3 (8 reviews) | 
  | **Quality of Support** | 9.1 (15 reviews) | 8.2 (103 reviews) | 8.6 (37 reviews) | 8.5 (19 reviews) | 
  | **Has the product been a good partner in doing business?** | 9.1 (9 reviews) | 8.3 (60 reviews) | 8.1 (18 reviews) | 8.1 (8 reviews) | 
  | **Product Direction (% positive)** | 8.3 (21 reviews) | 8.6 (118 reviews) | 7.7 (40 reviews) | 8.7 (18 reviews) | 

---
## Pricing

### Codacy

#### Entry-Level Pricing

Plan: Developer

Price: Free

Description: IDE plugin for individual devs, with real-time feedback and AI guardrails in the editor

Key Features:
- Auto-fix AI code before it reaches the editor
- Scan-as-you-type
- Security Scans (SAST, SCA, Secrets)

[Browse all 3 editions](https://www.g2.com/products/codacy/pricing)

#### Free Trial

Yes

### SonarQube

#### Entry-Level Pricing

Plan: Free

Price: Free

Description: For developers wanting to try SonarQube.


Key Features:
- Scan of private projects limited to 50k lines of code
- Users limited to max. 5
- Architecture management

[Browse all 3 editions](https://www.g2.com/products/sonarqube/pricing)

#### Free Trial

Yes

### Coverity

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

### Klocwork

#### Entry-Level Pricing

No pricing available

#### Free Trial

Yes

---
## Features Comparison By Category

### Application Shielding

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | N/A | N/A |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Protect

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Login** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Data Injections** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Code** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Certificate Exploitation** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Advanced Awareness** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Digital Content** | Feature Not Available | Not enough data | Not enough data | Not enough data | 

#### Execute

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Environment** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Compliance** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Cross-Platform Implementation** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Static Application Security Testing (SAST)

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | 7.2/10 | 27 |
| **Coverity** | 8.6/10 | 13 |
| **Klocwork** | N/A | N/A |

#### Administration

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **API / Integrations** | Not enough data | 7.9 (20 reviews) | 8.3 (11 reviews) | Not enough data | 
| **Extensibility** | Not enough data | 6.0 (20 reviews) | 9.0 (12 reviews) | Not enough data | 

#### Analysis

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Reporting and Analytics** | Not enough data | 7.4 (21 reviews) | 8.9 (11 reviews) | Not enough data | 
| **Issue Tracking** | Not enough data | 8.1 (21 reviews) | 8.8 (11 reviews) | Not enough data | 
| **Static Code Analysis** | Not enough data | 9.1 (25 reviews) | 9.2 (11 reviews) | Not enough data | 
| **Code Analysis** | Not enough data | 9.1 (25 reviews) | 8.9 (11 reviews) | Not enough data | 

#### Testing

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Command-Line Tools** | Not enough data | 6.6 (18 reviews) | 8.5 (11 reviews) | Not enough data | 
| **Manual Testing** | Not enough data | 5.9 (19 reviews) | 8.5 (8 reviews) | Feature Not Available | 
| **Test Automation** | Not enough data | 6.2 (22 reviews) | 8.5 (10 reviews) | Feature Not Available | 
| **Compliance Testing** | Not enough data | 6.9 (18 reviews) | 9.1 (11 reviews) | Not enough data | 
| **Black-Box Scanning** | Not enough data | 6.8 (17 reviews) | 8.8 (10 reviews) | Not enough data | 
| **Detection Rate** | Not enough data | 8.2 (21 reviews) | 8.9 (11 reviews) | Not enough data | 
| **False Positives** | Not enough data | 6.9 (24 reviews) | 7.6 (12 reviews) | Not enough data | 

#### Agentic AI - Static Application Security Testing (SAST)

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Autonomous Task Execution** | Not enough data | 6.0 (5 reviews) | Not enough data | Not enough data | 

### Dynamic Application Security Testing (DAST)

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | N/A | N/A |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Administration

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **API / Integrations** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Extensibility** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Analysis

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Reporting and Analytics** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Issue Tracking** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Static Code Analysis** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Vulnerability Scan** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Code Analysis** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Testing

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Manual Testing** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Test Automation** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Compliance Testing** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Black-Box Scanning** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Detection Rate** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **False Positives** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Software Development Analytics Tools

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | 8.0/10 | 36 |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Functionality

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Repository Integration** | Not enough data | 8.1 (32 reviews) | Not enough data | Not enough data | 
| **Analytics and Trends** | Not enough data | 8.5 (31 reviews) | Not enough data | Not enough data | 
| **Productivity Updates** | Not enough data | 8.2 (30 reviews) | Not enough data | Not enough data | 

#### Management

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Historical Data Consolidation** | Not enough data | Feature Not Available | Not enough data | Not enough data | 
| **Data Context** | Not enough data | 7.5 (26 reviews) | Not enough data | Not enough data | 
| **Testing Integration** | Not enough data | 7.9 (30 reviews) | Not enough data | Not enough data | 

### Bug Tracking

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | 8.1/10 | 12 |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Bug Reporting

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **User Reports &amp; Feedback** | Not enough data | 7.7 (10 reviews) | Not enough data | Not enough data | 
| **Tester Reports &amp; Feedback** | Not enough data | 8.0 (10 reviews) | Not enough data | Not enough data | 
| **Team Reports &amp; Comments** | Not enough data | 8.3 (10 reviews) | Not enough data | Not enough data | 

#### Bug Monitoring

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Analytics** | Not enough data | 7.8 (10 reviews) | Not enough data | Not enough data | 
| **Bug History** | Not enough data | 8.2 (11 reviews) | Not enough data | Not enough data | 
| **Data Retention** | Not enough data | 8.5 (10 reviews) | Not enough data | Not enough data | 

#### Agentic AI - Bug Tracking

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Adaptive Learning** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Software Composition Analysis

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | N/A | N/A |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Functionality - Software Composition Analysis 

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Language Support** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Integration** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Transparency** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Effectiveness - Software Composition Analysis

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Remediation Suggestions** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Continuous Monitoring** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Thorough Detection** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Continuous Integration

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | N/A | N/A |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Functionality

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Integrations** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Extensibility** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Test Customization** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Management

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Automation** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Processes and Workflow** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Reporting** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Agentic AI - Continuous Integration

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Cross-system Integration** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Adaptive Learning** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Secure Code Review

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | 7.6/10 | 47 |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Documentation

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Feedback** | Not enough data | 8.0 (42 reviews) | 9.3 (5 reviews) | Not enough data | 
| **Prioritization** | Not enough data | 7.6 (37 reviews) | 9.3 (5 reviews) | Not enough data | 
| **Remediation Suggestions** | Not enough data | 8.4 (39 reviews) | 8.7 (5 reviews) | Not enough data | 

#### Security

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **False Positives** | Not enough data | 6.8 (38 reviews) | 7.0 (5 reviews) | Not enough data | 
| **Custom Compliance** | Not enough data | 7.0 (34 reviews) | 8.3 (5 reviews) | Not enough data | 
| **Agility** | Not enough data | 8.0 (38 reviews) | 8.3 (5 reviews) | Not enough data | 

### Application Security

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | N/A | N/A |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Generative AI

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **AI Text Summarization** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Application Security Posture Management (ASPM)

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | 8.5/10 | 7 |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Risk management - Application Security Posture Management (ASPM)

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Vulnerability Management** | Not enough data | 9.3 (5 reviews) | Not enough data | Not enough data | 
| **Risk Assessment and Prioritization** | Not enough data | Feature Not Available | Not enough data | Not enough data | 
| **Compliance Management** | Not enough data | 9.0 (5 reviews) | Not enough data | Not enough data | 
| **Policy Enforcement** | Not enough data | 8.9 (6 reviews) | Not enough data | Not enough data | 

#### Integration and efficiency - Application Security Posture Management (ASPM)

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Integration with Development Tools** | Not enough data | 7.8 (6 reviews) | Not enough data | Not enough data | 
| **Automation and Efficiency** | Not enough data | Feature Not Available | Not enough data | Not enough data | 

#### Reporting and Analytics - Application Security Posture Management (ASPM)

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Trend Analysis** | Not enough data | 7.8 (6 reviews) | Not enough data | Not enough data | 
| **Risk Scoring** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Customizable Dashboards** | Not enough data | 8.3 (5 reviews) | Not enough data | Not enough data | 

#### Agentic AI  - Application Security Posture Management (ASPM)

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Multi-step Planning** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Software Bill of Materials (SBOM)

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | N/A | N/A |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Functionality - Software Bill of Materials (SBOM)

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Format Support** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Annotations** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Attestation** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Management - Software Bill of Materials (SBOM)

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Monitoring** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Dashboards** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **User Provisioning** | Not enough data | Not enough data | Not enough data | Not enough data | 

### AI Governance Tools

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | N/A | N/A |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### AI Compliance

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Regulatory Reporting** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Automated Compliance** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Audit Trails** | Not enough data | Feature Not Available | Not enough data | Not enough data | 

#### Risk Management &amp; Monitoring

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **AI Risk Management** | Not enough data | Feature Not Available | Not enough data | Not enough data | 
| **Real-time Monitoring** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### AI Lifecycle Management

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Lifecycle Automation** | Not enough data | Feature Not Available | Not enough data | Not enough data | 

#### Access Control and Security

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Pole-based Access Control (RBAC)** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Collaboration and Communication 

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Model Sharing and Reuse** | Not enough data | Feature Not Available | Not enough data | Not enough data | 

#### Agentic AI - AI Governance Tools

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Multi-step Planning** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Cross-system Integration** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Adaptive Learning** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Feature Not Available | Not enough data | Not enough data | 
| **Decision Making** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Static Code Analysis

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | 6.2/10 | 8 |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Agentic AI - Static Code Analysis

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Adaptive Learning** | Not enough data | 6.3 (8 reviews) | Not enough data | Not enough data | 
| **Natural Language Interaction** | Not enough data | 5.7 (7 reviews) | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | 6.7 (8 reviews) | Not enough data | Not enough data | 

### AI AppSec Assistants

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | N/A | N/A |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Performance - AI AppSec Assistants

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Remediation** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Real-time Vulnerability Detection** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Accuracy** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Integration - AI AppSec Assistants

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Stack Integration** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Workflow Integration** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Codebase Contextual Awareness** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Cloud Security

| Product | Score | Reviews |
|---|---|---|
| **Codacy** | N/A | N/A |
| **SonarQube** | N/A | N/A |
| **Coverity** | N/A | N/A |
| **Klocwork** | N/A | N/A |

#### Cloud Visibility

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Data Discovery** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Cloud Registry** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Cloud Gap Analytics** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Security

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Data Security** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Data loss Prevention** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Identity

| Feature | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **SSO** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Governance** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **User Analytics** | Not enough data | Not enough data | Not enough data | Not enough data | 

---
## Categories
**Shared Categories (2):** [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis)

**Unique to Codacy (3):** [Application Shielding Software](https://www.g2.com/categories/application-shielding), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast)

**Unique to SonarQube (8):** [Application Security Posture Management (ASPM) Software](https://www.g2.com/categories/application-security-posture-management-aspm), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review), [Software Development Analytics Tools](https://www.g2.com/categories/software-development-analytics-tools), [Bug Tracking Software](https://www.g2.com/categories/bug-tracking), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [Software Bill of Materials (SBOM) Software](https://www.g2.com/categories/software-bill-of-materials-sbom), [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [ AI Governance Tools](https://www.g2.com/categories/ai-governance-tools)

**Unique to Coverity (1):** [Secure Code Review Software](https://www.g2.com/categories/secure-code-review)

**Unique to Klocwork (3):** [Peer Code Review Software](https://www.g2.com/categories/peer-code-review), [Continuous Integration Tools](https://www.g2.com/categories/continuous-integration), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review)


---
## Reviewer Demographics

### By Company Size

| Segment | Codacy | SonarQube | Coverity | Klocwork | 
|---|---|---|---|---|
| **Small-Business** | 60.7% | 17.7% | 10.9% | 31.8% | 
| **Mid-Market** | 21.4% | 40.4% | 25.5% | 50.0% | 
| **Enterprise** | 17.9% | 41.8% | 63.6% | 18.2% | 

### By Industry

#### Codacy

- **Computer Software:** 28.6%
- **Information Technology and Services:** 14.3%
- **Program Development:** 7.1%
- **Financial Services:** 7.1%
- **Security and Investigations:** 3.6%
- **Retail:** 3.6%
- **Logistics and Supply Chain:** 3.6%
- **Internet:** 3.6%
- **Insurance:** 3.6%
- **Higher Education:** 3.6%
- **Other:** 21.4%

#### SonarQube

- **Information Technology and Services:** 26.8%
- **Computer Software:** 20.3%
- **Financial Services:** 8.0%
- **Banking:** 3.6%
- **Automotive:** 2.9%
- **Computer &amp; Network Security:** 2.9%
- **Hospital &amp; Health Care:** 2.9%
- **Manufacturing:** 2.2%
- **Aviation &amp; Aerospace:** 2.2%
- **Telecommunications:** 2.2%
- **Other:** 26.1%

#### Coverity

- **Computer Software:** 36.4%
- **Information Technology and Services:** 12.7%
- **Telecommunications:** 9.1%
- **Computer &amp; Network Security:** 7.3%
- **Automotive:** 5.5%
- **Semiconductors:** 5.5%
- **Airlines/Aviation:** 3.6%
- **Aviation &amp; Aerospace:** 1.8%
- **Banking:** 1.8%
- **Computer Hardware:** 1.8%
- **Other:** 14.5%

#### Klocwork

- **Information Technology and Services:** 31.8%
- **Defense &amp; Space:** 18.2%
- **Automotive:** 13.6%
- **Financial Services:** 9.1%
- **Computer Software:** 9.1%
- **Telecommunications:** 4.5%
- **Semiconductors:** 4.5%
- **Program Development:** 4.5%
- **Industrial Automation:** 4.5%

---
## Alternatives

### Alternatives to Codacy

- [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (41 reviews)
- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2364 reviews)
- [DeepSource](https://www.g2.com/products/deepsource/reviews) — 4.6/5 stars (22 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (896 reviews)
- [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (813 reviews)
- [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) — 4.5/5 stars (603 reviews)
- [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (26 reviews)
- [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) — 4.4/5 stars (313 reviews)
- [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) — 4.5/5 stars (302 reviews)
- [Embold](https://www.g2.com/products/embold/reviews) — 4.7/5 stars (18 reviews)

### Alternatives to SonarQube

- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2364 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (896 reviews)
- [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (26 reviews)
- [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews)
- [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews)
- [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (133 reviews)
- [Aikido Security](https://www.g2.com/products/aikido-security/reviews) — 4.6/5 stars (141 reviews)
- [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (41 reviews)
- [Kiuwan Code Security &amp; Insights](https://www.g2.com/products/kiuwan-code-security-insights/reviews) — 4.5/5 stars (34 reviews)
- [Embold](https://www.g2.com/products/embold/reviews) — 4.7/5 stars (18 reviews)

### Alternatives to Coverity

- [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (41 reviews)
- [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (26 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (896 reviews)
- [Embold](https://www.g2.com/products/embold/reviews) — 4.7/5 stars (18 reviews)
- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2364 reviews)
- [OpenText Static Application Security Testing](https://www.g2.com/products/opentext-static-application-security-testing/reviews) — 4.5/5 stars (24 reviews)
- [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews)
- [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (133 reviews)
- [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews)
- [ReSharper](https://www.g2.com/products/resharper/reviews) — 4.5/5 stars (84 reviews)

### Alternatives to Klocwork

- [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (41 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (896 reviews)
- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2364 reviews)
- [Bitbucket](https://www.g2.com/products/bitbucket/reviews) — 4.4/5 stars (1012 reviews)
- [Jenkins](https://www.g2.com/products/jenkins/reviews) — 4.4/5 stars (567 reviews)
- [Pantheon](https://www.g2.com/products/pantheon/reviews) — 4.4/5 stars (723 reviews)
- [CloudBees](https://www.g2.com/products/cloudbees/reviews) — 4.4/5 stars (622 reviews)
- [CircleCI](https://www.g2.com/products/circleci/reviews) — 4.4/5 stars (509 reviews)
- [Red Hat Ansible Automation Platform](https://www.g2.com/products/red-hat-ansible-automation-platform/reviews) — 4.6/5 stars (377 reviews)
- [Copado DevOps](https://www.g2.com/products/copado-devops/reviews) — 4.4/5 stars (329 reviews)

---
## Top Discussions

### Codacy

No discussions available for this product.

### SonarQube

No discussions available for this product.

### Coverity

No discussions available for this product.

### Klocwork

- Title: [How do i automate klocwork scanning ?](https://www.g2.com/discussions/36356-how-do-i-automate-klocwork-scanning) — 1 comment, 1 upvote
  > **Top comment:** "Hi Vikash,

Typically, Klocwork scans* these days are automated through CI/CD pipelines and as part of the overall DevOps infrastructure. This all started..."
- Title: [How do I integrate it in a linux make file](https://www.g2.com/discussions/30149-how-do-i-integrate-it-in-a-linux-make-file) — 1 comment
  > **Top comment:** "Hi Chris. There should be no need to &#39;integrate&#39; with the makefile itself, the Klocwork kwinject tool will simply capture the build process by wrapping the..."

---
**Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/codacy-vs-sonarqube-vs-coverity-vs-klocwork)

