--- title: CodeSonar Reviews meta\_title: 'CodeSonar Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 13 reviews by the users' company size, role or industry to find out how CodeSonar works for a business like yours. aggregate\_rating: rating\_value: 4.3 review\_count: 13 scale: '5' date\_modified: '2026-08-07' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # CodeSonar Reviews & Product Details As a leading provider of static application security testing (SAST) solutions, CodeSecure helps software developers solve challenging issues throughout the software development life cycle (SDLC) to protect mission-critical software and devices from failure and cyberattack. By enabling developers to shift security testing left, CodeSecure CodeSonar seamlessly integrates into CI/CD and DevSecOps tools to assist developers in designing, developing, and deploying trusted software applications – meeting standards, minimizing risk and accelerating projects to gain a competitive advantage. CodeSecure CodeSonar is a multi-language static application security testing (SAST) solution supporting C, C++, C# and Java. CodeSonar provides deep static analysis to quickly find and fix defects impacting code quality, safety and security. With seamless integrations into developer tools such as GitHub, GitLab, Jenkins, Visual Studio and others, CodeSonar is easily adopted into developer workflows to efficiently and continuously test code to create higher quality, safer and more secure software.   * * * Seller [CodeSecure](https://www.g2.com/sellers/codesecure) Discussions [CodeSonar Community](https://www.g2.com/products/codesonar/discuss) Overview by Alison Napolitano (Marketer, Board Director + lifelong learner. Inspired by humble leadership, teamwork and a well-told story. ) Show More ## Top-Rated Alternatives [ ![SonarQube](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SonarQube") SonarQube 4.4/5(155) ](https://www.g2.com/products/sonarqube/reviews) [ ![Black Duck Coverity Static](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Black Duck Coverity Static") Black Duck Coverity Static 4.3/5(65) ](https://www.g2.com/products/black-duck-coverity-static/reviews) [ ![GitHub](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitHub") GitHub 4.7/5(2,397) ](https://www.g2.com/products/github/reviews) [ View All Alternatives ](https://www.g2.com/products/codesonar/competitors/alternatives) ## User Insights Average based on 13 real user reviews. [Log in to unlock pricing and user insights](/login) ![kanchan s.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "kanchan s.") KS kanchan s. Search Engine Optimization Specialist Small-Business (50 or fewer emp.) 7/7/2023 "Help developers identify and address software defects" 4/5 What do you like best about CodeSonar? CodeSonar is a static analysis tool designed to help developers identify and address software defects and vulnerabilities. It analyzes source code to detect potential issues and provides insights to improve code quality. Here's a review of CodeSonar, including its pros and cons: Pros: Powerful bug detection: CodeSonar is known for its robust bug detection capabilities. It uses advanced static analysis techniques to identify a wide range of defects, including memory leaks, null pointer dereferences, buffer overflows, and concurrency issues. Its deep analysis helps developers uncover subtle bugs that may be challenging to detect through manual code review or testing. Precise and accurate results: CodeSonar is praised for its accuracy in detecting bugs. It employs a combination of data flow analysis, control flow analysis, and symbolic execution to provide precise results. This reduces false positives and helps developers focus on genuine issues, saving time and effort during the debugging process. Scalability: CodeSonar is designed to handle large and complex codebases. It can analyze projects with millions of lines of code efficiently, making it suitable for enterprise-level software development. Its scalability ensures that developers can apply static analysis to projects of varying sizes without sacrificing performance. Review collected by and hosted on G2.com. What do you dislike about CodeSonar? Complexity and learning curve: CodeSonar is a powerful tool, but it can be complex to set up and configure, especially for developers who are new to static analysis. The learning curve can be steep, and users may require some time and training to fully understand and utilize its features effectively. False negatives: While CodeSonar strives for accurate bug detection, there is still a possibility of false negatives—bugs that go undetected by the tool. Some types of bugs or code patterns may be more challenging for static analysis to identify, and developers should not rely solely on CodeSonar but also supplement it with other testing and code review practices. Cost: CodeSonar is a commercial tool, and its licensing costs may be a deterrent for small or independent developers or organizations with limited budgets. The pricing structure may not be feasible for all development teams, particularly those working on open-source or non-commercial projects. Review collected by and hosted on G2.com. What problems is CodeSonar solving and how is that benefiting you? Helping developers identify and address software defects and vulnerabilities. Review collected by and hosted on G2.com. Show More 2/27/2024 Validated ReviewerSource: Organic Review from User Profile ![Tushar J.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Tushar J.") TJ Tushar J. System Engineer Small-Business (50 or fewer emp.) 12/31/2022 "CodeSonar : Life saver" 4/5 What do you like best about CodeSonar? CodeSonar is the best tool in market for static code analysis for C/C++ and other languages. It can be easily integrate with other tools like Jenkins. It's GUI is impressive. The accuracy of problems detected in code is quite high in CodeSonar. Review collected by and hosted on G2.com. What do you dislike about CodeSonar? Sometimes it seems it's performance speed gets low and the keyword which was searched doesn't produce useful results. Else there's nothing much to dislike CodeSonar. Review collected by and hosted on G2.com. What problems is CodeSonar solving and how is that benefiting you? CodeSonar helps me to analyse the quality and enhance the performance of the code written. To make the code complaint with the guidelines provided by client, CodeSonar helps to provide perfect solution to the respective warnings. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Verified User in Electrical/Electronic Manufacturing](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Electrical/Electronic Manufacturing") UE Verified User in Electrical/Electronic Manufacturing Mid-Market (51-1000 emp.) 9/9/2022 "do the job quickly" 4/5 What do you like best about CodeSonar? The way to check the result in browser, and no need to search the result it's intuitive. Review collected by and hosted on G2.com. What do you dislike about CodeSonar? The configuration if there is no support. Review collected by and hosted on G2.com. What problems is CodeSonar solving and how is that benefiting you? Some potential bugs or errors before the code increase.Avoid spending time. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Rohit M.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Rohit M.") RM Rohit M. Software Engineer Intern Small-Business (50 or fewer emp.) 10/3/2019 "Decent Tool" 3.5/5 What do you like best about CodeSonar? Most of the IDEs provide this feature but the best part about this is that we can define rules about test cases and check for that rules. Hence it increases the Code Quality Review collected by and hosted on G2.com. What do you dislike about CodeSonar? The UI can be more easier. Right now i dont find good help documentation to start with scratch Review collected by and hosted on G2.com. What problems is CodeSonar solving and how is that benefiting you? I am making my code coverage of minimum 92 with extra rules for quality Review collected by and hosted on G2.com. Show More 11/24/2020 Validated ReviewerIncentivizedSource: G2 invite ## Questions about CodeSonar? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about CodeSonar ](https://www.g2.com/products/codesonar/discussions/new) JM James McDonald • Last activity over 3 years ago What is the easiest way to setup CodeSonar using Azure DevOps 1 Upvote 2 [ Join the conversation ](https://www.g2.com/discussions/what-is-the-easiest-way-to-setup-codesonar-using-azure-devops) GU Guest User • Last activity about 4 years ago Is CodeSonar open source? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/is-codesonar-open-source) [ View all Discussions ](https://www.g2.com/products/codesonar/discuss) ##### Pricing Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more. [ View More Pricing Information ](https://www.g2.com/products/codesonar/pricing) CodeSonar Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_a4dc620644f85fd7e4f00b0a2267d09c/sonarqube.png "Product Avatar Image") SonarQube 4.4/5(155) [ Compare Now ](https://www.g2.com/compare/codesonar-vs-sonarqube) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_eba7b910de9a9aac0b4f1b82545d0832/black-duck-coverity-static.jpg "Product Avatar Image") Black Duck Coverity Static 4.3/5(65) [ Compare Now ](https://www.g2.com/compare/black-duck-coverity-static-vs-codesonar) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_3d509cff58c24e8af4ca3ad0ef140936/klocwork.png "Product Avatar Image") Klocwork 4.4/5(23) [ Compare Now ](https://www.g2.com/compare/codesonar-vs-klocwork) ##### Categories on G2 [Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis) ##### Explore More [What platform integrates video interviewing with ATS systems?](https://www.g2.com/discussions/what-platform-integrates-video-interviewing-with-ats-systems)[Best customer success platform for growing software companies](https://www.g2.com/discussions/best-customer-success-platform-for-growing-software-companies)[Which secure data room services comply with legal regulations for document sharing?](https://www.g2.com/discussions/which-secure-data-room-services-comply-with-legal-regulations-for-document-sharing) [What's the best ETL software for cloud services](https://www.g2.com/discussions/what-s-the-best-etl-software-for-cloud-services)[What local listing management system offers real-time update tracking?](https://www.g2.com/discussions/what-local-listing-management-system-offers-real-time-update-tracking)[Best-rated digital asset manager for marketing teams](https://www.g2.com/discussions/best-rated-digital-asset-manager-for-marketing-teams) [Show MoreShow Less](javascript:void(0);)