Introducing G2.ai, the future of software buying.Try now

Compare CodeScan and SonarQube

Save
    Log in to your account
    to save comparisons,
    products and more.
At a Glance
CodeScan
CodeScan
Star Rating
(34)4.6 out of 5
Market Segments
Enterprise (50.0% of reviews)
Information
Pros & Cons
Not enough data
Entry-Level Pricing
Contact for Pricing
Browse all 3 pricing plans
SonarQube
SonarQube
Star Rating
(125)4.5 out of 5
Market Segments
Enterprise (41.9% of reviews)
Information
Pros & Cons
Entry-Level Pricing
Contact Us Per Year
Browse all 6 pricing plans
AI Generated Summary
AI-generated. Powered by real user reviews.
  • G2 reviewers report that SonarQube excels in overall user satisfaction, boasting a significantly higher G2 Score compared to CodeScan. Users appreciate its simple deployment process, particularly highlighting the ease of installation on Kubernetes using YAML formats.
  • Users say that SonarQube's integration capabilities are a standout feature, with seamless connections to GitHub through GitHub actions. This allows developers to conduct scans effortlessly, enhancing their workflow and code quality.
  • Reviewers mention that while CodeScan has a strong focus on Salesforce code quality, it faces challenges in overall user satisfaction, reflected in its lower G2 Score. However, users commend its Vs code plugin and Autorabit integration, which facilitate secure coding practices.
  • According to verified reviews, SonarQube provides valuable code suggestions that help developers improve their coding practices. Users find it beneficial for identifying potential errors in code flows, which contributes to better overall code quality.
  • G2 reviewers highlight that CodeScan is particularly effective for organizations prioritizing Salesforce code quality, especially when handling sensitive customer data. Users appreciate its tools for managing security roles, permissions, and access control definitions.
  • Users report that while SonarQube has a robust feature set, CodeScan shines in areas like reporting and compliance testing, making it a strong contender for teams focused on security and regulatory requirements.
Pricing
Entry-Level Pricing
CodeScan
Cloud
Contact for Pricing
Browse all 3 pricing plans
SonarQube
Cloud-base: Enterprise
Contact Us
Per Year
Browse all 6 pricing plans
Free Trial
CodeScan
Free Trial is available
SonarQube
Free Trial is available
Ratings
Meets Requirements
8.4
16
8.8
108
Ease of Use
8.6
18
8.5
111
Ease of Setup
8.7
10
8.1
70
Ease of Admin
8.8
12
8.5
63
Quality of Support
9.0
20
8.2
91
Has the product been a good partner in doing business?
9.2
12
8.4
57
Product Direction (% positive)
8.3
21
8.6
105
Features by Category
Static Application Security Testing (SAST)Hide 14 FeaturesShow 14 Features
9.4
9
7.3
22
Administration
8.8
8
7.8
19
8.3
8
6.0
20
Analysis
8.5
8
7.4
21
7.9
8
8.0
20
9.2
8
8.9
22
9.2
8
9.0
22
Testing
Not enough data
6.6
18
Not enough data
5.9
19
7.3
5
6.0
21
8.8
7
6.9
18
8.3
5
6.8
17
8.3
6
8.2
21
5.8
6
6.9
21
Agentic AI - Static Application Security Testing (SAST)
Not enough data
Not enough data
Software Development Analytics ToolsHide 6 FeaturesShow 6 Features
Not enough data
8.0
33
Functionality
Not enough data
8.1
31
Not enough data
8.4
30
Not enough data
8.2
29
Management
Not enough data
7.7
27
Not enough data
7.5
25
Not enough data
7.8
27
Not enough data
8.1
11
Bug Reporting
Not enough data
7.7
10
Not enough data
8.0
10
Not enough data
8.3
10
Bug Monitoring
Not enough data
7.8
10
Not enough data
8.2
10
Not enough data
8.5
10
Agentic AI - Bug Tracking
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Software Composition AnalysisHide 6 FeaturesShow 6 Features
Not enough data
Not enough data
Functionality - Software Composition Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Effectiveness - Software Composition Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
7.5
37
Documentation
Not enough data
7.7
35
Not enough data
7.6
35
Not enough data
8.2
36
Security
Not enough data
6.9
33
Not enough data
7.0
32
Not enough data
7.9
33
Application Security Posture Management (ASPM)Hide 11 FeaturesShow 11 Features
Not enough data
8.6
7
Risk management - Application Security Posture Management (ASPM)
Not enough data
9.3
5
Not enough data
8.7
5
Not enough data
9.0
5
Not enough data
8.9
6
Integration and efficiency - Application Security Posture Management (ASPM)
Not enough data
7.8
6
Not enough data
8.6
6
Reporting and Analytics - Application Security Posture Management (ASPM)
Not enough data
7.8
6
Not enough data
Not enough data
Not enough data
8.3
5
Agentic AI - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Software Bill of Materials (SBOM)Hide 6 FeaturesShow 6 Features
Not enough data
Not enough data
Functionality - Software Bill of Materials (SBOM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Management - Software Bill of Materials (SBOM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
AI Compliance
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Risk Management & Monitoring
Not enough data
Not enough data
Not enough data
Not enough data
AI Lifecycle Management
Not enough data
Not enough data
Access Control and Security
Not enough data
Not enough data
Collaboration and Communication
Not enough data
Not enough data
Agentic AI - AI Governance Tools
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Static Code AnalysisHide 3 FeaturesShow 3 Features
Not enough data
6.2
8
Agentic AI - Static Code Analysis
Not enough data
6.3
8
Not enough data
5.7
7
Not enough data
6.7
8
AI AppSec AssistantsHide 6 FeaturesShow 6 Features
Not enough data
Not enough data
Performance - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration - AI AppSec Assistants
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Cloud Visibility
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Categories
Categories
Shared Categories
CodeScan
CodeScan
SonarQube
SonarQube
CodeScan and SonarQube are categorized as Static Code Analysis and Static Application Security Testing (SAST)
Reviews
Reviewers' Company Size
CodeScan
CodeScan
Small-Business(50 or fewer emp.)
20.0%
Mid-Market(51-1000 emp.)
30.0%
Enterprise(> 1000 emp.)
50.0%
SonarQube
SonarQube
Small-Business(50 or fewer emp.)
17.7%
Mid-Market(51-1000 emp.)
40.3%
Enterprise(> 1000 emp.)
41.9%
Reviewers' Industry
CodeScan
CodeScan
Information Technology and Services
16.7%
Computer Software
16.7%
Hospital & Health Care
10.0%
Management Consulting
6.7%
Insurance
6.7%
Other
43.3%
SonarQube
SonarQube
Information Technology and Services
26.6%
Computer Software
21.8%
Financial Services
6.5%
Hospital & Health Care
3.2%
Computer & Network Security
3.2%
Other
38.7%
Alternatives
CodeScan
CodeScan Alternatives
Checkmarx
Checkmarx
Add Checkmarx
GitLab
GitLab
Add GitLab
GitHub
GitHub
Add GitHub
Coverity
Coverity
Add Coverity
SonarQube
SonarQube Alternatives
GitHub
GitHub
Add GitHub
GitLab
GitLab
Add GitLab
Semgrep
Semgrep
Add Semgrep
Veracode Application Security Platform
Veracode Application Security Platform
Add Veracode Application Security Platform
Discussions
CodeScan
CodeScan Discussions
Monty the Mongoose crying
CodeScan has no discussions with answers
SonarQube
SonarQube Discussions
Monty the Mongoose crying
SonarQube has no discussions with answers