SonarQube Server

SonarQube Server

SonarSource
+
+

Related Products

  • Aikido Security
    364 Ratings
    Visit Website
  • Feroot
    33 Ratings
    Visit Website
  • Jscrambler
    41 Ratings
    Visit Website
  • Astra Pentest
    296 Ratings
    Visit Website
  • Rocket z/Assure VAP
    1 Rating
    Visit Website
  • Parasoft
    152 Ratings
    Visit Website
  • 1Password
    16,918 Ratings
    Visit Website
  • GoCodes
    275 Ratings
    Visit Website
  • Hyperproof
    350 Ratings
    Visit Website
  • FormAssembly
    525 Ratings
    Visit Website

About

Eureka is a cloud-based application security and DevSecOps platform for software development teams. It checks code, dependencies, exposed secrets, and software-supply-chain risks, and accepts supported scanner output and SARIF results. The platform consolidates findings, removes duplicates, prioritizes them with application context, and tracks ownership, remediation, validation, approvals, and risk decisions. Teams can connect code repositories, issue trackers, and CI/CD workflows, linking findings to tickets and pull requests. Eureka preserves activity and decision history to help prepare application-security evidence for customer security reviews, audits, and regulated software documentation. It is designed for engineering and security teams that want to establish or operate an AppSec process without assembling scanner integrations and evidence workflows themselves.

About

SonarQube Server is a self-managed solution for continuous code quality inspection that helps development teams identify and fix bugs, vulnerabilities, and code smells in real-time. It provides automated static code analysis for a variety of programming languages, ensuring the highest quality and security standards are maintained throughout the development lifecycle. SonarQube Server integrates seamlessly with existing CI/CD pipelines, offering flexibility for on-premise or cloud-based deployment. With advanced reporting features, it helps teams manage technical debt, track improvements, and enforce coding standards. SonarQube Server is ideal for organizations seeking full control over their code quality and security without compromising on performance.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Software teams without dedicated AppSec capacity, including B2B SaaS companies preparing for enterprise customer security reviews or SOC 2 evidence requests, and SaMD or other regulated software teams organizing cybersecurity documentation.

Audience

Companies searching for a solution to manage and empower their dev teams

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Not Supported

API

Offers API Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

$125/month
Team costs $125/month when billed annually ($1,500/year) or $150/month with monthly billing, including up to five seats connected to scanned repositories. A 30-day free trial requires no credit card. Eligible active public repositories may apply for free access, subject to approval.
Free Version Not Supported
Free Trial Supported

Pricing

No information available.
Free Version Not Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 5.0 / 5
ease 5.0 / 5
features 5.0 / 5
design 5.0 / 5
support 5.0 / 5

Pros & Cons from Real Users

Pros

  • Great User Interface / Dashboard. Different tiers of bugs - helps identify and fix only the critical issues. Suggestions to fix the issue. Jenkins integration. Also available as SaaS offering. Also shows security defects.
  • - Accurate results and no bullshit findings - Very fast analysis - Handy configuration features for analysis customization - Nice interface - Plenty integration options

Cons

  • The only con i can think of is expensive license which is not optimal for personal projects (unless open source). There is a free trial though.
  • - It has its price but its worth every penny. Similar vendors are more expensive with significantly less value.

Training

Documentation Not Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Eureka DevSecOps
Founded: 2014
Canada
www.eurekadevsecops.com

Company Information

SonarSource
Founded: 2008
Switzerland
www.sonarsource.com/products/sonarqube/

Alternatives

Xygeni

Xygeni

Xygeni Security

Alternatives

SonarQube for IDE

SonarQube for IDE

SonarSource
SonarQube Cloud

SonarQube Cloud

SonarSource

Categories

Categories

Application Security Features

Analytics / Reporting Not Supported
Open Source Component Monitoring Supported
Source Code Analysis Supported
Third-Party Tools Integration Not Supported
Training Resources Supported
Vulnerability Detection Supported
Vulnerability Remediation Not Supported

Static Code Analysis Features

Analytics / Reporting Supported
Code Standardization / Validation Supported
Multiple Programming Language Support Supported
Provides Recommendations Supported
Standard Security/Industry Libraries Supported
Vulnerability Management Supported

Integrations

Azure DevOps Supported
Azure Marketplace Not Supported
Betterscan.io Not Supported
Bizzy Not Supported
HivePro Uni5 Not Supported
JaCoCo Not Supported
Oobeya Not Supported
OpsLevel Not Supported
Opsera Not Supported
PHP Not Supported
Phoenix Security Not Supported
Propelo Not Supported
RegScale Not Supported
Snyk Supported
SonarQube Cloud Not Supported
SonarQube for IDE Not Supported
Visual Basic Not Supported
bugScout Not Supported
kcov Not Supported

Integrations

Azure DevOps Not Supported
Azure Marketplace Supported
Betterscan.io Supported
Bizzy Supported
HivePro Uni5 Supported
JaCoCo Supported
Oobeya Supported
OpsLevel Supported
Opsera Supported
PHP Supported
Phoenix Security Supported
Propelo Supported
RegScale Supported
Snyk Not Supported
SonarQube Cloud Supported
SonarQube for IDE Supported
Visual Basic Supported
bugScout Supported
kcov Supported
Claim Eureka DevSecOps and update features and information
Claim Eureka DevSecOps and update features and information
Claim SonarQube Server and update features and information
Claim SonarQube Server and update features and information