getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

SonarQube vs Veracode Comparison (2026)

Add to Compare

Compare similar apps

GitHub logo

GitHub

4.8

Jenkins logo

Jenkins

4.5

GitLab logo

GitLab

4.6

Good recommendations?

SonarQube logo

SonarQube

Veracode logo

Veracode

Overview

SonarQube is a cloud-based and self-hosted code quality and security platform that detects bugs, vulnerabilities, and architecture.

Veracode is a static application security testing (SAST) software designed to help businesses review applications' source code to identify vulnerabilities. The platform allows software developers to conduct application analysis and receive automated security feedback in the IDE and CI/CD pipeline.

  • Platforms supported
  • Web-based
  • iPhone app
  • Android app
  • Windows Phone app
  • Typical customers
  • Freelancers
  • Small businesses
  • Mid size businesses
  • Large enterprises
  • Customer support
  • Phone
  • Online
  • Knowledge base
  • Video tutorials
  • Platforms supported
  • Web-based
  • iPhone app
  • Android app
  • Windows Phone app
  • Typical customers
  • Freelancers
  • Small businesses
  • Mid size businesses
  • Large enterprises
  • Customer support
  • Phone
  • Online
  • Knowledge base
  • Video tutorials

Video & Screenshots

No videos yet

Pricing

Starting from

720

Per year

  • Free trial available
  • Credit cardless trial
  • Free account
  • Subscription based

Starting from

Empty state illustration for "No pricing info"

No pricing info

  • Free trial available
  • Credit cardless trial
  • Free account
  • Subscription based

User reviews

4.5

76

5

4

3

2

1

43

28

4

0

1

  • Value for money
  • Ease of use
  • Features
  • Customer support
86%
would recommend this app

4.0

1

5

4

3

2

1

0

1

0

0

0

  • Value for money
  • Ease of use
  • Features
  • Customer support
0%
would recommend this app

Pros

“The vulnerability detection is one of its strongest features because it points out security risks, bugs, and code smells before they become bigger problems.”
Verified reviewer profile picture

Swarnima G.

Software Engineer

“What I liked most about SonarQube is how helpful it is for improving code quality and catching issues early in development.”
Verified reviewer profile picture

Swarnima G.

Software Engineer

“It helps reduce issues before deployment, which can save a lot of time later.”
Verified reviewer profile picture

Swarnima G.

Software Engineer

Pros

Not enoughreviews yet

Cons

“I avoid unpleasant surprises and broken code in production.”
PJ

Philip J.

IT specialist

“In order to try to reduce my cost, our engineering team attempted to discsonnect some unused repos... nope, not possible.”
ZR

Zach R.

CEO OWner

“May block delivery/deployment if hard gates are enabled by DevOps team which may delay project delivery.”
Verified reviewer profile picture

Akash M.

Sr. Vice President

Cons

Not enoughreviews yet

  • Vendor responds to reviews
  • Last review7 days ago
  • Vendor responds to reviews
  • Last review3 years ago

Key features

  • Total features41
  • AI/Machine Learning
  • API
  • Access Controls/Permissions
  • Activity Dashboard
  • Alerts/Notifications
  • Application Security
  • Audit Management
  • Audit Trail
  • Bug Tracking
  • Collaboration Tools
  • Compliance Management
  • Configurable Workflow
  • Continuous Delivery
  • Continuous Deployment
  • Continuous Integration
  • Custom Development
  • Dashboard
  • Data Import/Export
  • Debugging
  • Decision Support
  • Deployment Management
  • For Developers
  • Graphical User Interface
  • Integrated Development Environment
  • Integration into Third Party Applications
  • Issue Management
  • Lifecycle Management
  • Mobile Development
  • Monitoring
  • Multi-Language Scanning
  • Policy Management
  • Proactive Recommendations
  • Quality Assurance
  • Real-Time Analytics
  • Real-Time Monitoring
  • Remote Monitoring & Management
  • Reporting & Statistics
  • Reporting/Analytics
  • Secure Data Storage
  • Security Auditing
  • Server Monitoring
  • Software Development
  • Source Control
  • Source-Code Scanning
  • Status Tracking
  • Task Management
  • Third-Party Integrations
  • Vulnerability Scanning
  • Workflow Management
  • Total features23
  • AI/Machine Learning
  • API
  • Access Controls/Permissions
  • Activity Dashboard
  • Alerts/Notifications
  • Application Security
  • Audit Management
  • Audit Trail
  • Bug Tracking
  • Collaboration Tools
  • Compliance Management
  • Configurable Workflow
  • Continuous Delivery
  • Continuous Deployment
  • Continuous Integration
  • Custom Development
  • Dashboard
  • Data Import/Export
  • Debugging
  • Decision Support
  • Deployment Management
  • For Developers
  • Graphical User Interface
  • Integrated Development Environment
  • Integration into Third Party Applications
  • Issue Management
  • Lifecycle Management
  • Mobile Development
  • Monitoring
  • Multi-Language Scanning
  • Policy Management
  • Proactive Recommendations
  • Quality Assurance
  • Real-Time Analytics
  • Real-Time Monitoring
  • Remote Monitoring & Management
  • Reporting & Statistics
  • Reporting/Analytics
  • Secure Data Storage
  • Security Auditing
  • Server Monitoring
  • Software Development
  • Source Control
  • Source-Code Scanning
  • Status Tracking
  • Task Management
  • Third-Party Integrations
  • Vulnerability Scanning
  • Workflow Management

Integrations

  • Total integrations22
  • AWS CodeBuild
  • Android Studio
  • Apache Maven
  • Azure DevOps Server
  • Bitbucket
  • Bugzilla
  • CircleCI
  • Claude
  • Codemagic
  • Cursor
  • Datadog
  • Docker
  • Drata
  • Dynatrace
  • GitHub
  • IntelliJ IDEA
  • JFrog
  • Jenkins
  • Jira
  • MuleSoft Anypoint Platform
  • PyCharm
  • ServiceNow DevOps
  • Travis CI
  • Visual Studio Code
  • Total integrations3
  • AWS CodeBuild
  • Android Studio
  • Apache Maven
  • Azure DevOps Server
  • Bitbucket
  • Bugzilla
  • CircleCI
  • Claude
  • Codemagic
  • Cursor
  • Datadog
  • Docker
  • Drata
  • Dynatrace
  • GitHub
  • IntelliJ IDEA
  • JFrog
  • Jenkins
  • Jira
  • MuleSoft Anypoint Platform
  • PyCharm
  • ServiceNow DevOps
  • Travis CI
  • Visual Studio Code