GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links.
Our commitment
Independent research methodology
Our researchers use a mix of verified reviews, independent research, and objective methodologies to bring you selection and ranking information you can trust. While we may earn a referral fee when you visit a provider through our links or speak to an advisor, this has no influence on our research or methodology.
Verified user reviews
GetApp maintains a proprietary database of millions of in-depth, verified user reviews across thousands of products in hundreds of software categories. Our data scientists apply advanced modeling techniques to identify key insights about products based on those reviews. We may also share aggregated ratings and select excerpts from those reviews throughout our site.
Our human moderators verify that reviewers are real people and that reviews are authentic. They use leading tech to analyze text quality and to detect plagiarism and generative AI.
How GetApp ensures transparency
GetApp lists all providers across its website—not just those that pay us—so that users can make informed purchase decisions. GetApp is free for users. Software providers pay us for sponsored profiles to receive web traffic and sales opportunities. Sponsored profiles include a link-out icon that takes users to the provider’s website.
SonarQube vs Xygeni Security Comparison (2026)
Add to Compare
Compare similar apps
Jsmon
4.8
GitHub
4.8
GitLab
4.6
Good recommendations?
SonarQube
5
40
4
24
3
3
2
0
1
1
Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews
Xygeni Security
5
5
4
0
3
0
2
0
1
0
Based on GetApp‘s extensive, proprietary database of in-depth, verified user reviews
Overview
SonarQube is a cloud-based and self-hosted code quality and security platform that detects bugs, vulnerabilities, and architecture.
Xygeni Container Security scans Docker and Kubernetes images for exploitable vulnerabilities, malware, secrets, and misconfigurations. Integrated into CI/CD, it blocks risky images before deployment and prioritizes real container risk with full ASPM context.
- Platforms supported
- Web-based
- iPhone app
- Android app
- Windows Phone app
- Typical customers
- Freelancers
- Small businesses
- Mid size businesses
- Large enterprises
- Customer support
- Phone
- Online
- Knowledge base
- Video tutorials
- Platforms supported
- Web-based
- iPhone app
- Android app
- Windows Phone app
- Typical customers
- Freelancers
- Small businesses
- Mid size businesses
- Large enterprises
- Customer support
- Phone
- Online
- Knowledge base
- Video tutorials
Video & Screenshots
Pricing
User reviews
4.5
68
5
4
3
2
1
40
24
3
0
1
- Value for money
- Ease of use
- Features
- Customer support
5.0
5
5
4
3
2
1
5
0
0
0
0
- Value for money
- Ease of use
- Features
- Customer support
Pros
Swarnima G.
Software Engineer
Swarnima G.
Software Engineer
Swarnima G.
Software Engineer
Pros
Not enoughreviews yet
Cons
Philip J.
IT specialist
Zach R.
CEO OWner
Akash M.
Sr. Vice President
Cons
Not enoughreviews yet
- Vendor responds to reviews
- Last review4 months ago
- Vendor responds to reviews
- Last reviewa year ago
Key features
- Total features41
- AI/Machine Learning
- API
- Access Controls/Permissions
- Activity Dashboard
- Alerts/Notifications
- Anomaly/Malware Detection
- Application Security
- Assessment Management
- Asset Discovery
- Audit Trail
- Bug Tracking
- Certificate Assessment
- Collaboration Tools
- Compliance Management
- Configurable Workflow
- Container Scanning
- Continuous Delivery
- Continuous Deployment
- Continuous Integration
- Custom Development
- Dashboard
- Data Import/Export
- Debugging
- Decision Support
- Deployment Management
- False Positives
- For DevSecOps
- For Developers
- Graphical User Interface
- Integrated Development Environment
- Integration into Third Party Applications
- Issue Management
- Issue Tracking
- Lifecycle Management
- Mobile Development
- Monitoring
- Multi-Language Scanning
- Network Scanning
- Policy Management
- Proactive Recommendations
- Quality Assurance
- Real-Time Analytics
- Real-Time Data
- Real-Time Monitoring
- Reporting & Statistics
- Reporting/Analytics
- Risk Alerts
- Risk Analysis
- Risk Assessment
- Risk Management
- SQL Injections
- Search/Filter
- Security Auditing
- Security Testing
- Software Development
- Source Control
- Source-Code Scanning
- Status Tracking
- Task Management
- Third-Party Integrations
- Vulnerability Assessment
- Vulnerability Management
- Vulnerability Protection
- Vulnerability Scanning
- Vulnerability/Threat Prioritization
- Web-Application Security
- Workflow Management
- Total features40
- AI/Machine Learning
- API
- Access Controls/Permissions
- Activity Dashboard
- Alerts/Notifications
- Anomaly/Malware Detection
- Application Security
- Assessment Management
- Asset Discovery
- Audit Trail
- Bug Tracking
- Certificate Assessment
- Collaboration Tools
- Compliance Management
- Configurable Workflow
- Container Scanning
- Continuous Delivery
- Continuous Deployment
- Continuous Integration
- Custom Development
- Dashboard
- Data Import/Export
- Debugging
- Decision Support
- Deployment Management
- False Positives
- For DevSecOps
- For Developers
- Graphical User Interface
- Integrated Development Environment
- Integration into Third Party Applications
- Issue Management
- Issue Tracking
- Lifecycle Management
- Mobile Development
- Monitoring
- Multi-Language Scanning
- Network Scanning
- Policy Management
- Proactive Recommendations
- Quality Assurance
- Real-Time Analytics
- Real-Time Data
- Real-Time Monitoring
- Reporting & Statistics
- Reporting/Analytics
- Risk Alerts
- Risk Analysis
- Risk Assessment
- Risk Management
- SQL Injections
- Search/Filter
- Security Auditing
- Security Testing
- Software Development
- Source Control
- Source-Code Scanning
- Status Tracking
- Task Management
- Third-Party Integrations
- Vulnerability Assessment
- Vulnerability Management
- Vulnerability Protection
- Vulnerability Scanning
- Vulnerability/Threat Prioritization
- Web-Application Security
- Workflow Management
Integrations
- Total integrations24
- AWS CodeBuild
- Android Studio
- Apache Maven
- Azure DevOps Server
- AzureDesk
- Bitbucket
- ChatGPT
- CircleCI
- Claude
- Codemagic
- Cursor
- Datadog
- DevOps
- Docker
- Drata
- Dynatrace
- GitHub
- GitLab
- IntelliJ IDEA
- JFrog
- Jenkins
- Jira
- MuleSoft Anypoint Platform
- PyCharm
- Travis CI
- Visual Studio Code
- Total integrations7
- AWS CodeBuild
- Android Studio
- Apache Maven
- Azure DevOps Server
- AzureDesk
- Bitbucket
- ChatGPT
- CircleCI
- Claude
- Codemagic
- Cursor
- Datadog
- DevOps
- Docker
- Drata
- Dynatrace
- GitHub
- GitLab
- IntelliJ IDEA
- JFrog
- Jenkins
- Jira
- MuleSoft Anypoint Platform
- PyCharm
- Travis CI
- Visual Studio Code
