# Coverity, OpenText Static Application Security Testing, Microsoft Defender for Cloud vs SonarQube Comparison

| | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Star Rating** | 4.2 out of 5 | 4.5 out of 5 | 4.4 out of 5 | 4.4 out of 5 | 
| **Total Reviews** | 55 | 24 | 309 | 141 | 
| **Largest Market Segment** | Enterprise (63.6% of reviews) | Enterprise (47.6% of reviews) | Mid-Market (37.9% of reviews) | Enterprise (42.0% of reviews) | 
| **Entry Level Price** | No pricing available | No pricing available | Free Trial | Free | 

---
## Top Pros & Cons

### Coverity

**Not enough data**

### OpenText Static Application Security Testing

Pros:
- Easy Integrations (1 reviews)
- Integrations (1 reviews)

Cons:
- False Positives (1 reviews)

### Microsoft Defender for Cloud

Pros:
- Security (121 reviews)
- Comprehensive Security (92 reviews)

Cons:
- Complexity (27 reviews)
- Expensive (24 reviews)

### SonarQube

Pros:
- Code Quality (24 reviews)
- Features (20 reviews)

Cons:
- Software Bugs (12 reviews)
- Complex Configuration (10 reviews)

---
## Ratings Comparison
| Rating | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
  | **Meets Requirements** | 8.9 (43 reviews) | 8.3 (15 reviews) | 8.8 (235 reviews) | 8.8 (119 reviews) | 
  | **Ease of Use** | 8.4 (43 reviews) | 8.7 (15 reviews) | 8.7 (236 reviews) | 8.5 (122 reviews) | 
  | **Ease of Setup** | 8.2 (19 reviews) | 8.3 (9 reviews) | 8.6 (140 reviews) | 8.1 (81 reviews) | 
  | **Ease of Admin** | 8.2 (19 reviews) | 8.1 (9 reviews) | 8.8 (120 reviews) | 8.5 (67 reviews) | 
  | **Quality of Support** | 8.6 (37 reviews) | 8.7 (15 reviews) | 8.6 (228 reviews) | 8.2 (101 reviews) | 
  | **Has the product been a good partner in doing business?** | 8.1 (18 reviews) | 8.5 (9 reviews) | 8.5 (117 reviews) | 8.3 (60 reviews) | 
  | **Product Direction (% positive)** | 7.7 (40 reviews) | 9.1 (13 reviews) | 9.6 (224 reviews) | 8.6 (115 reviews) | 

---
## Pricing

### Coverity

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

### OpenText Static Application Security Testing

#### Entry-Level Pricing

No pricing available

#### Free Trial

No information available

### Microsoft Defender for Cloud

#### Entry-Level Pricing

Plan: Microsoft Defender for Cloud

Price: Free Trial

Description: https://azure.microsoft.com/en-us/pricing/details/defender-for-cloud/

Key Features:
- Unified visibility of your security posture across Azure, AWS, Google Cloud, and hybrid clouds
- Real-time security access and prioritization of the most critical risks with context-aware cloud security
- Integrated extended detection and response (XDR) solution across multicloud workloads to prevent, detect, and respond to attacks

[Learn more about Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews)

#### Free Trial

No

### SonarQube

#### Entry-Level Pricing

Plan: Free

Price: Free

Description: For developers wanting to try SonarQube.


Key Features:
- Scan of private projects limited to 50k lines of code
- Users limited to max. 5
- Architecture management

[Browse all 3 editions](https://www.g2.com/products/sonarqube/pricing)

#### Free Trial

Yes

---
## Features Comparison By Category

### Cloud Workload Protection Platforms

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | 8.7/10 | 57 |
| **SonarQube** | N/A | N/A |

#### Management

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Dashboards and Reports** | Not enough data | Not enough data | 9.1 (47 reviews) | Not enough data | 
| **Workflow Management** | Not enough data | Not enough data | 8.4 (45 reviews) | Not enough data | 
| **Administration Console** | Not enough data | Not enough data | 8.7 (44 reviews) | Not enough data | 

#### Operations

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Governance** | Not enough data | Not enough data | 8.8 (45 reviews) | Not enough data | 
| **Logging and Reporting** | Not enough data | Not enough data | 8.7 (46 reviews) | Not enough data | 
| **API / Integrations** | Not enough data | Not enough data | 8.4 (45 reviews) | Not enough data | 

#### Security Controls 

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Anomaly Detection** | Not enough data | Not enough data | 8.6 (46 reviews) | Not enough data | 
| **Data Loss Prevention** | Not enough data | Not enough data | 8.6 (45 reviews) | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | 8.9 (45 reviews) | Not enough data | 
| **Cloud Gap Analytics** | Not enough data | Not enough data | 8.6 (45 reviews) | Not enough data | 

### Static Application Security Testing (SAST)

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | 8.6/10 | 13 |
| **OpenText Static Application Security Testing** | 8.1/10 | 13 |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | 7.3/10 | 25 |

#### Administration

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **API / Integrations** | 8.3 (11 reviews) | 8.9 (9 reviews) | Not enough data | 7.9 (20 reviews) | 
| **Extensibility** | 9.0 (12 reviews) | 8.7 (10 reviews) | Not enough data | 6.0 (20 reviews) | 

#### Analysis

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Reporting and Analytics** | 8.9 (11 reviews) | 8.3 (11 reviews) | Not enough data | 7.4 (21 reviews) | 
| **Issue Tracking** | 8.8 (11 reviews) | 8.0 (11 reviews) | Not enough data | 8.0 (20 reviews) | 
| **Static Code Analysis** | 9.2 (11 reviews) | 8.8 (11 reviews) | Not enough data | 9.0 (23 reviews) | 
| **Code Analysis** | 8.9 (11 reviews) | 8.5 (10 reviews) | Not enough data | 9.1 (23 reviews) | 

#### Testing

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Command-Line Tools** | 8.5 (11 reviews) | 8.1 (9 reviews) | Not enough data | 6.6 (18 reviews) | 
| **Manual Testing** | 8.5 (8 reviews) | 6.9 (9 reviews) | Not enough data | 5.9 (19 reviews) | 
| **Test Automation** | 8.5 (10 reviews) | 8.7 (10 reviews) | Not enough data | 6.0 (21 reviews) | 
| **Compliance Testing** | 9.1 (11 reviews) | 8.5 (8 reviews) | Not enough data | 6.9 (18 reviews) | 
| **Black-Box Scanning** | 8.8 (10 reviews) | 7.0 (9 reviews) | Not enough data | 6.8 (17 reviews) | 
| **Detection Rate** | 8.9 (11 reviews) | 8.3 (9 reviews) | Not enough data | 8.2 (21 reviews) | 
| **False Positives** | 7.6 (12 reviews) | 6.2 (11 reviews) | Not enough data | 6.7 (23 reviews) | 

#### Agentic AI - Static Application Security Testing (SAST)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Container Security

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | 9.1/10 | 25 |
| **SonarQube** | N/A | N/A |

#### Administration

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Risk Scoring** | Not enough data | Not enough data | 9.3 (22 reviews) | Not enough data | 
| **Secrets Management** | Not enough data | Not enough data | 9.0 (21 reviews) | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | 9.1 (22 reviews) | Not enough data | 
| **Configuration Management** | Not enough data | Not enough data | 9.1 (22 reviews) | Not enough data | 

#### Monitoring

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Continuous Image Assurance** | Not enough data | Not enough data | 9.0 (20 reviews) | Not enough data | 
| **Behavior Monitoring** | Not enough data | Not enough data | 9.0 (20 reviews) | Not enough data | 
| **Observability** | Not enough data | Not enough data | 9.5 (20 reviews) | Not enough data | 

#### Protection

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Dynamic Image Scanning** | Not enough data | Not enough data | 8.9 (19 reviews) | Not enough data | 
| **Runtime Protection** | Not enough data | Not enough data | 8.9 (21 reviews) | Not enough data | 
| **Workload Protection** | Not enough data | Not enough data | 9.2 (22 reviews) | Not enough data | 
| **Network Segmentation** | Not enough data | Not enough data | 9.5 (21 reviews) | Not enough data | 

### Cloud Compliance

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | 8.6/10 | 114 |
| **SonarQube** | N/A | N/A |

#### Security

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Compliance Monitoring** | Not enough data | Not enough data | 8.8 (99 reviews) | Not enough data | 
| **Anomoly Detection** | Not enough data | Not enough data | 8.6 (98 reviews) | Not enough data | 
| **Data Loss Prevention** | Not enough data | Not enough data | 8.6 (96 reviews) | Not enough data | 
| **Cloud Gap Analytics** | Not enough data | Not enough data | 8.5 (95 reviews) | Not enough data | 

#### Compliance

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Governance** | Not enough data | Not enough data | 8.6 (97 reviews) | Not enough data | 
| **Data Governance** | Not enough data | Not enough data | 8.5 (93 reviews) | Not enough data | 
| **Sensitive Data Compliance** | Not enough data | Not enough data | 8.8 (94 reviews) | Not enough data | 

#### Administration

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Policy Enforcement** | Not enough data | Not enough data | 8.7 (92 reviews) | Not enough data | 
| **Auditing** | Not enough data | Not enough data | 8.7 (94 reviews) | Not enough data | 
| **Workflow Management** | Not enough data | Not enough data | 8.6 (94 reviews) | Not enough data | 

### Software Development Analytics Tools

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | 8.0/10 | 35 |

#### Functionality

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Repository Integration** | Not enough data | Not enough data | Not enough data | 8.1 (32 reviews) | 
| **Analytics and Trends** | Not enough data | Not enough data | Not enough data | 8.5 (31 reviews) | 
| **Productivity Updates** | Not enough data | Not enough data | Not enough data | 8.2 (29 reviews) | 

#### Management

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Historical Data Consolidation** | Not enough data | Not enough data | Not enough data | Feature Not Available | 
| **Data Context** | Not enough data | Not enough data | Not enough data | 7.5 (26 reviews) | 
| **Testing Integration** | Not enough data | Not enough data | Not enough data | 7.9 (29 reviews) | 

### Bug Tracking

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | 8.1/10 | 11 |

#### Bug Reporting

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **User Reports &amp; Feedback** | Not enough data | Not enough data | Not enough data | 7.7 (10 reviews) | 
| **Tester Reports &amp; Feedback** | Not enough data | Not enough data | Not enough data | 8.0 (10 reviews) | 
| **Team Reports &amp; Comments** | Not enough data | Not enough data | Not enough data | 8.3 (10 reviews) | 

#### Bug Monitoring

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Analytics** | Not enough data | Not enough data | Not enough data | 7.8 (10 reviews) | 
| **Bug History** | Not enough data | Not enough data | Not enough data | 8.2 (10 reviews) | 
| **Data Retention** | Not enough data | Not enough data | Not enough data | 8.5 (10 reviews) | 

#### Agentic AI - Bug Tracking

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Adaptive Learning** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Software Composition Analysis

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | 9.7/10 | 14 |
| **SonarQube** | N/A | N/A |

#### Functionality - Software Composition Analysis 

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Language Support** | Not enough data | Not enough data | 9.4 (12 reviews) | Not enough data | 
| **Integration** | Not enough data | Not enough data | 9.9 (12 reviews) | Not enough data | 
| **Transparency** | Not enough data | Not enough data | 9.7 (12 reviews) | Not enough data | 

#### Effectiveness - Software Composition Analysis

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Remediation Suggestions** | Not enough data | Not enough data | 9.6 (12 reviews) | Not enough data | 
| **Continuous Monitoring** | Not enough data | Not enough data | 10.0 (12 reviews) | Not enough data | 
| **Thorough Detection** | Not enough data | Not enough data | 9.6 (12 reviews) | Not enough data | 

### Cloud Security Monitoring and Analytics

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | 8.3/10 | 65 |
| **SonarQube** | N/A | N/A |

#### Activity Monitoring

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Usage Monitoring** | Not enough data | Not enough data | 8.5 (64 reviews) | Not enough data | 
| **Database Monitoring** | Not enough data | Not enough data | 8.4 (63 reviews) | Not enough data | 
| **API Monitoring** | Not enough data | Not enough data | 8.4 (64 reviews) | Not enough data | 
| **Activity Monitoring** | Not enough data | Not enough data | 8.6 (62 reviews) | Not enough data | 

#### Security

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Compliance Monitoring** | Not enough data | Not enough data | 8.5 (63 reviews) | Not enough data | 
| **Risk Analysis** | Not enough data | Not enough data | 7.9 (61 reviews) | Not enough data | 
| **Reporting** | Not enough data | Not enough data | 8.4 (63 reviews) | Not enough data | 

#### Administration

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Security Automation** | Not enough data | Not enough data | 8.4 (61 reviews) | Not enough data | 
| **Security Integration** | Not enough data | Not enough data | 8.1 (62 reviews) | Not enough data | 
| **Multicloud Visibility** | Not enough data | Not enough data | 8.1 (61 reviews) | Not enough data | 

#### Agentic AI - Cloud Security Monitoring and Analytics

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Decision Making** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Secure Code Review

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | 8.9/10 | 19 |
| **SonarQube** | 7.5/10 | 45 |

#### Documentation

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Feedback** | 9.3 (5 reviews) | Not enough data | 9.2 (16 reviews) | 8.0 (42 reviews) | 
| **Prioritization** | 9.3 (5 reviews) | Not enough data | 8.6 (16 reviews) | 7.6 (37 reviews) | 
| **Remediation Suggestions** | 8.7 (5 reviews) | Not enough data | 9.2 (15 reviews) | 8.3 (38 reviews) | 

#### Security

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **False Positives** | 7.0 (5 reviews) | Not enough data | 8.3 (15 reviews) | 6.7 (37 reviews) | 
| **Custom Compliance** | 8.3 (5 reviews) | Not enough data | 9.0 (17 reviews) | 7.0 (34 reviews) | 
| **Agility** | 8.3 (5 reviews) | Not enough data | 9.3 (15 reviews) | 7.9 (37 reviews) | 

### Cloud Security Posture Management (CSPM)

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | 8.6/10 | 78 |
| **SonarQube** | N/A | N/A |

#### Configuration

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **DLP Configuration** | Not enough data | Not enough data | 8.4 (62 reviews) | Not enough data | 
| **Configuration Monitoring** | Not enough data | Not enough data | 8.7 (66 reviews) | Not enough data | 
| **Unified Policy Management** | Not enough data | Not enough data | 8.6 (60 reviews) | Not enough data | 
| **Adaptive Access Control** | Not enough data | Not enough data | 8.6 (60 reviews) | Not enough data | 
| **API / Integrations** | Not enough data | Not enough data | 8.4 (67 reviews) | Not enough data | 

#### Visibility

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Multicloud Visibility** | Not enough data | Not enough data | 8.5 (66 reviews) | Not enough data | 
| **Asset Discovery** | Not enough data | Not enough data | 8.8 (60 reviews) | Not enough data | 

#### Vulnerability Management

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Threat Hunting** | Not enough data | Not enough data | 8.6 (64 reviews) | Not enough data | 
| **Vulnerability Scanning** | Not enough data | Not enough data | 8.9 (62 reviews) | Not enough data | 
| **Vulnerability Intelligence** | Not enough data | Not enough data | 8.6 (62 reviews) | Not enough data | 
| **Risk-Prioritization** | Not enough data | Not enough data | 8.6 (64 reviews) | Not enough data | 

### Container Monitoring

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | 8.2/10 | 9 |
| **SonarQube** | N/A | N/A |

#### Alerts management

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Multi-mode alerts** | Not enough data | Not enough data | 8.1 (8 reviews) | Not enough data | 
| **Opimization alerts** | Not enough data | Not enough data | 8.3 (8 reviews) | Not enough data | 
| **Incident alerts** | Not enough data | Not enough data | 7.7 (8 reviews) | Not enough data | 

#### Monitoring

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Resource utilization** | Not enough data | Not enough data | 8.1 (8 reviews) | Not enough data | 
| **Real-time monitoring** | Not enough data | Not enough data | 8.1 (8 reviews) | Not enough data | 
| **Performance baseline** | Not enough data | Not enough data | 7.7 (8 reviews) | Not enough data | 
| **API monitoring** | Not enough data | Not enough data | 8.3 (8 reviews) | Not enough data | 

#### Automation

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Resolution automation** | Not enough data | Not enough data | 8.3 (8 reviews) | Not enough data | 
| **Automation** | Not enough data | Not enough data | 8.3 (8 reviews) | Not enough data | 

#### Analysis

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Search** | Not enough data | Not enough data | 8.6 (7 reviews) | Not enough data | 
| **Reporting** | Not enough data | Not enough data | 8.7 (9 reviews) | Not enough data | 
| **Visualization** | Not enough data | Not enough data | 8.8 (8 reviews) | Not enough data | 
| **Track trends** | Not enough data | Not enough data | 8.1 (8 reviews) | Not enough data | 

#### Issue Resolution

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Root cause identification** | Not enough data | Not enough data | 7.4 (9 reviews) | Not enough data | 
| **Resolution guidance** | Not enough data | Not enough data | 8.3 (8 reviews) | Not enough data | 
| **Proactive identification** | Not enough data | Not enough data | 8.3 (8 reviews) | Not enough data | 

### Application Security Posture Management (ASPM)

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | 8.5/10 | 7 |

#### Risk management - Application Security Posture Management (ASPM)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Vulnerability Management** | Not enough data | Not enough data | Not enough data | 9.3 (5 reviews) | 
| **Risk Assessment and Prioritization** | Not enough data | Not enough data | Not enough data | Feature Not Available | 
| **Compliance Management** | Not enough data | Not enough data | Not enough data | 9.0 (5 reviews) | 
| **Policy Enforcement** | Not enough data | Not enough data | Not enough data | 8.9 (6 reviews) | 

#### Integration and efficiency - Application Security Posture Management (ASPM)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Integration with Development Tools** | Not enough data | Not enough data | Not enough data | 7.8 (6 reviews) | 
| **Automation and Efficiency** | Not enough data | Not enough data | Not enough data | Feature Not Available | 

#### Reporting and Analytics - Application Security Posture Management (ASPM)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Trend Analysis** | Not enough data | Not enough data | Not enough data | 7.8 (6 reviews) | 
| **Risk Scoring** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Customizable Dashboards** | Not enough data | Not enough data | Not enough data | 8.3 (5 reviews) | 

#### Agentic AI  - Application Security Posture Management (ASPM)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Multi-step Planning** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Software Bill of Materials (SBOM)

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | N/A | N/A |

#### Functionality - Software Bill of Materials (SBOM)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Format Support** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Annotations** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Attestation** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Management - Software Bill of Materials (SBOM)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Monitoring** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Dashboards** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **User Provisioning** | Not enough data | Not enough data | Not enough data | Not enough data | 

### AI Governance Tools

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | N/A | N/A |

#### AI Compliance

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Regulatory Reporting** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Automated Compliance** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Audit Trails** | Not enough data | Not enough data | Not enough data | Feature Not Available | 

#### Risk Management &amp; Monitoring

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **AI Risk Management** | Not enough data | Not enough data | Not enough data | Feature Not Available | 
| **Real-time Monitoring** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### AI Lifecycle Management

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Lifecycle Automation** | Not enough data | Not enough data | Not enough data | Feature Not Available | 

#### Access Control and Security

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Pole-based Access Control (RBAC)** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Collaboration and Communication 

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Model Sharing and Reuse** | Not enough data | Not enough data | Not enough data | Feature Not Available | 

#### Agentic AI - AI Governance Tools

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Multi-step Planning** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Cross-system Integration** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Adaptive Learning** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | Not enough data | Feature Not Available | 
| **Decision Making** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Cloud-Native Application Protection Platform (CNAPP)

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | N/A | N/A |

#### Security - Cloud-Native Application Protection Platform (CNAPP)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Workload and container security** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Threat detection and response** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **DevSecOps Integrations** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Unified Visibility** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Artificial Intelligence - Cloud-Native Application Protection Platform (CNAPP)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Intelligent remediations and suggestions** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Risk prioritization** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Anomaly detection using machine learning** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Cloud Configuration Management - Cloud-Native Application Protection Platform (CNAPP)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Multi-cloud visibility** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Cloud Security Posture Management (CSPM)** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Agentic AI - Cloud-Native Application Protection Platform (CNAPP)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Adaptive Learning** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Static Code Analysis

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | 6.2/10 | 8 |

#### Agentic AI - Static Code Analysis

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Adaptive Learning** | Not enough data | Not enough data | Not enough data | 6.3 (8 reviews) | 
| **Natural Language Interaction** | Not enough data | Not enough data | Not enough data | 5.7 (7 reviews) | 
| **Proactive Assistance** | Not enough data | Not enough data | Not enough data | 6.7 (8 reviews) | 

### AI Security Solutions

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | N/A | N/A |

#### Model Protection - AI Security Solutions

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Input Hardening** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Input/Output Inspection** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Integrity Monitoring** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Model Access Control** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Runtime Monitoring - AI Security Solutions

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **AI Behavior Anomaly Detection** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Audit Trail** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Policy Enforcement and Compliance - AI Security Solutions

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Scalable Governance** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Integrations** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Shadow AI** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Policy‑as‑Code for AI Assets** | Not enough data | Not enough data | Not enough data | Not enough data | 

### AI Security Posture Management (AI-SPM) Tools

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | N/A | N/A |

#### Functionality - AI Security Posture Management (AI-SPM) Tools

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Security Ecosystem Integration** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **AI Asset Discovery** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Adaptive Policy Updates** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Access and Permissions Monitoring** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Policy Enforcement** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Risk Assessment - AI Security Posture Management (AI-SPM) Tools

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **AI Risk Assessment** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **AI Asset Posture Scoring** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Governance &amp; Compliance - AI Security Posture Management (AI-SPM) Tools

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **AI‑Generated Content Controls** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Audit Trails** | Not enough data | Not enough data | Not enough data | Not enough data | 

### AI AppSec Assistants

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | N/A | N/A |

#### Performance - AI AppSec Assistants

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Remediation** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Real-time Vulnerability Detection** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Accuracy** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Integration - AI AppSec Assistants

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Stack Integration** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Workflow Integration** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Codebase Contextual Awareness** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Cloud Security

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | N/A | N/A |

#### Cloud Visibility

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Data Discovery** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Cloud Registry** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Cloud Gap Analytics** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Security

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Data Security** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Data loss Prevention** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Security Auditing** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Identity

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **SSO** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Governance** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **User Analytics** | Not enough data | Not enough data | Not enough data | Not enough data | 

### Cloud Detection and Response (CDR)

| Product | Score | Reviews |
|---|---|---|
| **Coverity** | N/A | N/A |
| **OpenText Static Application Security Testing** | N/A | N/A |
| **Microsoft Defender for Cloud** | N/A | N/A |
| **SonarQube** | N/A | N/A |

#### Agentic AI - Cloud Detection and Response (CDR)

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Autonomous Task Execution** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Proactive Assistance** | Not enough data | Not enough data | Not enough data | Not enough data | 
| **Decision Making** | Not enough data | Not enough data | Not enough data | Not enough data | 

#### Services - Cloud Detection and Response (CDR) 

| Feature | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Managed Services** | Not enough data | Not enough data | Not enough data | Not enough data | 

---
## Categories

**Unique to Coverity (3):** [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review)

**Unique to OpenText Static Application Security Testing (2):** [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast)

**Unique to Microsoft Defender for Cloud (12):** [Cloud-Native Application Protection Platform (CNAPP)](https://www.g2.com/categories/cloud-native-application-protection-platform-cnapp), [AI Security Solutions Software](https://www.g2.com/categories/ai-security-solutions), [Cloud Security Posture Management (CSPM) Software](https://www.g2.com/categories/cloud-security-posture-management-cspm), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review), [Cloud Security Monitoring and Analytics Software](https://www.g2.com/categories/cloud-security-monitoring-and-analytics), [Cloud Detection and Response (CDR) Software](https://www.g2.com/categories/cloud-detection-and-response-cdr), [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance), [Container Security Tools](https://www.g2.com/categories/container-security-tools), [Cloud Workload Protection Platforms](https://www.g2.com/categories/cloud-workload-protection-platforms), [Container Monitoring Tools](https://www.g2.com/categories/container-monitoring-tools), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [AI Security Posture Management (AI-SPM) Tools Software](https://www.g2.com/categories/ai-security-posture-management-ai-spm-tools)

**Unique to SonarQube (10):** [Application Security Posture Management (ASPM) Software](https://www.g2.com/categories/application-security-posture-management-aspm), [Secure Code Review Software](https://www.g2.com/categories/secure-code-review), [Software Development Analytics Tools](https://www.g2.com/categories/software-development-analytics-tools), [Static Application Security Testing (SAST) Software](https://www.g2.com/categories/static-application-security-testing-sast), [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis), [Bug Tracking Software](https://www.g2.com/categories/bug-tracking), [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis), [Software Bill of Materials (SBOM) Software](https://www.g2.com/categories/software-bill-of-materials-sbom), [AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants), [ AI Governance Tools](https://www.g2.com/categories/ai-governance-tools)


---
## Reviewer Demographics

### By Company Size

| Segment | Coverity | OpenText Static Application Security Testing | Microsoft Defender for Cloud | SonarQube | 
|---|---|---|---|---|
| **Small-Business** | 10.9% | 28.6% | 26.1% | 18.1% | 
| **Mid-Market** | 25.5% | 23.8% | 37.9% | 39.9% | 
| **Enterprise** | 63.6% | 47.6% | 36.1% | 42.0% | 

### By Industry

#### Coverity

- **Computer Software:** 36.4%
- **Information Technology and Services:** 12.7%
- **Telecommunications:** 9.1%
- **Computer &amp; Network Security:** 7.3%
- **Automotive:** 5.5%
- **Semiconductors:** 5.5%
- **Airlines/Aviation:** 3.6%
- **Aviation &amp; Aerospace:** 1.8%
- **Banking:** 1.8%
- **Computer Hardware:** 1.8%
- **Other:** 14.5%

#### OpenText Static Application Security Testing

- **Financial Services:** 23.8%
- **Banking:** 19.0%
- **Information Technology and Services:** 14.3%
- **Computer Software:** 14.3%
- **Computer &amp; Network Security:** 9.5%
- **Consulting:** 4.8%
- **Hospital &amp; Health Care:** 4.8%
- **Higher Education:** 4.8%
- **Automotive:** 4.8%

#### Microsoft Defender for Cloud

- **Information Technology and Services:** 23.2%
- **Computer Software:** 11.8%
- **Computer &amp; Network Security:** 11.4%
- **Education Management:** 6.8%
- **Oil &amp; Energy:** 3.6%
- **Financial Services:** 3.2%
- **Banking:** 2.9%
- **Retail:** 2.5%
- **Hospital &amp; Health Care:** 2.1%
- **Telecommunications:** 2.1%
- **Other:** 30.4%

#### SonarQube

- **Information Technology and Services:** 26.7%
- **Computer Software:** 20.7%
- **Financial Services:** 7.4%
- **Banking:** 3.7%
- **Computer &amp; Network Security:** 3.0%
- **Hospital &amp; Health Care:** 3.0%
- **Manufacturing:** 2.2%
- **Automotive:** 2.2%
- **Aviation &amp; Aerospace:** 2.2%
- **Telecommunications:** 2.2%
- **Other:** 26.7%

---
## Alternatives

### Alternatives to Coverity

- [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (36 reviews)
- [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (25 reviews)
- [Klocwork](https://www.g2.com/products/klocwork/reviews) — 4.4/5 stars (23 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews)
- [Embold](https://www.g2.com/products/embold/reviews) — 4.7/5 stars (18 reviews)
- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2347 reviews)
- [Codacy](https://www.g2.com/products/codacy/reviews) — 4.6/5 stars (29 reviews)
- [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews)
- [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (132 reviews)
- [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews)

### Alternatives to OpenText Static Application Security Testing

- [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (36 reviews)
- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2347 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews)
- [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews)
- [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews)
- [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (132 reviews)
- [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (25 reviews)
- [Klocwork](https://www.g2.com/products/klocwork/reviews) — 4.4/5 stars (23 reviews)
- [HCL AppScan](https://www.g2.com/products/hcl-appscan/reviews) — 4.1/5 stars (76 reviews)
- [Gearset DevOps](https://www.g2.com/products/gearset-devops/reviews) — 4.7/5 stars (292 reviews)

### Alternatives to Microsoft Defender for Cloud

- [Wiz](https://www.g2.com/products/wiz-wiz/reviews) — 4.7/5 stars (790 reviews)
- [Orca Security](https://www.g2.com/products/orca-security/reviews) — 4.6/5 stars (257 reviews)
- [Cortex Cloud](https://www.g2.com/products/cortex-cloud/reviews) — 4.1/5 stars (112 reviews)
- [FortiCNAPP](https://www.g2.com/products/forticnapp/reviews) — 4.4/5 stars (386 reviews)
- [CrowdStrike Falcon Cloud Security](https://www.g2.com/products/crowdstrike-falcon-cloud-security/reviews) — 4.6/5 stars (86 reviews)
- [Sysdig Secure](https://www.g2.com/products/sysdig-sysdig-secure/reviews) — 4.8/5 stars (112 reviews)
- [Qualys VMDR](https://www.g2.com/products/qualys-vmdr/reviews) — 4.4/5 stars (167 reviews)
- [Datadog](https://www.g2.com/products/datadog/reviews) — 4.4/5 stars (704 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews)
- [Vanta](https://www.g2.com/products/vanta/reviews) — 4.6/5 stars (2432 reviews)

### Alternatives to SonarQube

- [GitHub](https://www.g2.com/products/github/reviews) — 4.7/5 stars (2347 reviews)
- [GitLab](https://www.g2.com/products/gitlab/reviews) — 4.5/5 stars (890 reviews)
- [Mend.io](https://www.g2.com/products/mend-io/reviews) — 4.3/5 stars (112 reviews)
- [Semgrep](https://www.g2.com/products/semgrep/reviews) — 4.6/5 stars (55 reviews)
- [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) — 3.8/5 stars (25 reviews)
- [Snyk](https://www.g2.com/products/snyk/reviews) — 4.5/5 stars (132 reviews)
- [Aikido Security](https://www.g2.com/products/aikido-security/reviews) — 4.6/5 stars (141 reviews)
- [Checkmarx](https://www.g2.com/products/checkmarx/reviews) — 4.2/5 stars (36 reviews)
- [Kiuwan Code Security &amp; Insights](https://www.g2.com/products/kiuwan-code-security-insights/reviews) — 4.5/5 stars (34 reviews)
- [Embold](https://www.g2.com/products/embold/reviews) — 4.7/5 stars (18 reviews)

---
## Top Discussions

### Coverity

No discussions available for this product.

### OpenText Static Application Security Testing

- Title: [What are the main components of Fortify?](https://www.g2.com/discussions/fortify-static-code-analyzer-what-are-the-main-components-of-fortify) — 1 comment
  > **Top comment:** "Fortify SSC server 
Fortify scan software for windows or Linux "
- Title: [will provide Video training course for this tool?](https://www.g2.com/discussions/49959-will-provide-video-training-course-for-this-tool) — 1 comment, 1 upvote
  > **Top comment:** "Micro Focus has a comprehensive set of free training tools! Check out this one on SCA..."

### Microsoft Defender for Cloud

- Title: [What are the three security services provided by Windows Azure?](https://www.g2.com/discussions/what-are-the-three-security-services-provided-by-windows-azure) — 2 comments
  > **Top comment:** "It provides azure firewall, Microsoft sentinel, prevents DDOS Attack, defender for cloud "
- Title: [What is Microsoft Defender for Cloud used for?](https://www.g2.com/discussions/what-is-microsoft-defender-for-cloud-used-for) — 1 comment
  > **Top comment:** "Microsoft Defender for Cloud is a multicloud security solution. It provides native CSPM capabilities for Azure, AWS, and Google Cloud environments and..."
- Title: [What is Azure security management?](https://www.g2.com/discussions/what-is-azure-security-management) — 1 comment
  > **Top comment:** "Defender "
- Title: [Is Azure security Center a SIEM?](https://www.g2.com/discussions/is-azure-security-center-a-siem) — 1 comment, 1 upvote
  > **Top comment:** "Azure Security Center (ASC) is a cloud-native security management platform that provides unified security management and threat protection across hybrid..."

### SonarQube

No discussions available for this product.

---
**Source:** [G2.com](https://www.g2.com) | [Comparison Page](https://www.g2.com/compare/coverity-vs-opentext-static-application-security-testing-vs-microsoft-defender-for-cloud-vs-sonarqube)

