Average Ratings 1 Rating

Total
ease
features
design
support

Average Ratings 2 Ratings

Total
ease
features
design
support

Description

The Industry Standard Universal Binary Repository Management Manager. All major package types supported (over 27 and growing), including Maven, npm. Python, NuGet. Gradle. Go and Helm, Kubernetes, Docker, as well as integration to leading CI servers or DevOps tools you already use. Additional functionalities include: - High availability that scales to infinity through active/active clustering in your DevOps environment. This scales as your business grows - On-Prem or Cloud, Hybrid, Multi-Cloud Solution - De Facto Kubernetes Registry for managing application packages, operating systems component dependencies, open sources libraries, Docker containers and Helm charts. Full visibility of all dependencies. Compatible with a growing number of Kubernetes cluster provider.

Description

SonarQube Server serves as a self-hosted solution for ongoing code quality assessment, enabling development teams to detect and address bugs, vulnerabilities, and code issues in real time. It delivers automated static analysis across multiple programming languages, ensuring that the highest standards of quality and security are upheld throughout the software development process. Additionally, SonarQube Server integrates effortlessly with current CI/CD workflows, providing options for both on-premise and cloud deployments. Equipped with sophisticated reporting capabilities, it assists teams in managing technical debt, monitoring progress, and maintaining coding standards. This platform is particularly well-suited for organizations desiring comprehensive oversight of their code quality and security while maintaining high performance levels. Furthermore, SonarQube fosters a culture of continuous improvement within development teams, encouraging proactive measures to enhance code integrity over time.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Azure Marketplace Yes 
Digital.ai Release Yes 
Docker Scout Yes 
Fianu Yes 
JupiterOne Yes 
Kaholo Yes 
Maverix Yes 
Opsera Yes 
Ozone Yes 
Seeker Yes 
C++ No 
COBOL No 
Jozu Yes 
Kubermatic Kubernetes Platform Yes 
Mend.io Yes 
PHP No 
Phoenix Security No 
Sysdig Monitor Yes 
TruffleHog Yes 

Integrations

Azure Marketplace Yes 
Digital.ai Release Yes 
Docker Scout Yes 
Fianu Yes 
JupiterOne Yes 
Kaholo Yes 
Maverix Yes 
Opsera Yes 
Ozone Yes 
Seeker Yes 
C++ Yes 
COBOL Yes 
Jozu No 
Kubermatic Kubernetes Platform No 
Mend.io No 
PHP Yes 
Phoenix Security Yes 
Sysdig Monitor No 
TruffleHog No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

JFrog

Founded

2008

Country

United States

Website

jfrog.com

Vendor Details

Company Name

SonarSource

Founded

2008

Country

Switzerland

Website

www.sonarsource.com/products/sonarqube/

Product Features

Application Development

Access Controls/Permissions Yes 
Code Assistance No 
Code Refactoring Yes 
Collaboration Tools Yes 
Compatibility Testing Yes 
Data Modeling Yes 
Debugging Yes 
Deployment Management Yes 
Graphical User Interface Yes 
Mobile Development Yes 
No-Code Yes 
Reporting/Analytics Yes 
Software Development Yes 
Source Control Yes 
Testing Management No 
Version Control Yes 
Web App Development No 

Continuous Delivery

Application Lifecycle Management No 
Application Release Automation No 
Build Automation No 
Build Log No 
Change Management No 
Configuration Management No 
Continuous Deployment No 
Continuous Integration No 
Feature Toggles / Feature Flags No 
Quality Management No 
Testing Management No 

DevOps

Approval Workflow No 
Dashboard No 
KPIs No 
Policy Management No 
Portfolio Management No 
Prioritization No 
Release Management No 
Timeline Management No 
Troubleshooting Reports No 

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring Yes 
Source Code Analysis Yes 
Third-Party Tools Integration No 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation No 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Static Code Analysis

Analytics / Reporting Yes 
Code Standardization / Validation Yes 
Multiple Programming Language Support Yes 
Provides Recommendations Yes 
Standard Security/Industry Libraries Yes 
Vulnerability Management Yes 

Alternatives

Alternatives

SonarQube for IDE Reviews

SonarQube for IDE

SonarSource