Software Alternatives & Reviews

Qualys VM VS SonarCloud

Compare Qualys VM VS SonarCloud and see what are their differences

Qualys VM logo Qualys VM

The industry's most advanced, scalable and extensible solution for vulnerability management and network security.

SonarCloud logo SonarCloud

Enhance your workflow with continuous code quality, SonarCloud automatically analyzes and decorates pull requests on GitHub, Bitbucket, Azure DevOps and GitLab on major languages.
  • Qualys VM Landing page
    Landing page //
    2023-08-28
  • SonarCloud Landing page
    Landing page //
    2023-07-20

SonarCloud, a core component of the Sonar solution, is a Software-as-a-Service (SaaS) tool that systematically helps developers and organizations deliver Clean Code. SonarCloud easily integrates into the cloud DevOps platforms and extends the CI/CD workflow to perform automated code reviews to detect and help fix issues in the code.

Supported by the Sonar Clean as You Code methodology, only code that meets the defined quality standard can be released to production. SonarCloud analyzes the most popular programming languages, frameworks, and infrastructure technologies and supports over 5,000 Clean Code rules.

Trusted by 7 million developers and 400,000 organizations globally to clean more than half a trillion lines of code, Sonar has become integral to delivering better software.

SonarCloud

$ Details
freemium €10.0 / Monthly (100,000 Lines of Code)
Platforms
Web Browser Google Chrome Internet Explorer Firefox Safari Cloud JavaScript PHP Python Java Ruby TypeScript JavaScript C++

Qualys VM features and specs

No features have been listed yet.

SonarCloud features and specs

  • SAST Analysis: Bug, Security Vulnerability, and Code Smell detection with remediation guidance
  • Code Reveiw: Automatic code review and pull request feedback in your code repository
  • Quality Gate: Go/No Go Quality Gate failing your pipelines when code doesn’t meet requirements

Qualys VM videos

Qualys VMDR® – All-in-One Vulnerability Management, Detection, and Response

More videos:

  • Review - QUALYS VMDR TRAINING 2023 2024 EXAM REVIEW QUESTIONS AND VERIFIED ANSWERS 100 CORRECT

SonarCloud videos

No SonarCloud videos yet. You could help us improve this page by suggesting one.

+ Add video

Category Popularity

0-100% (relative to Qualys VM and SonarCloud)
Security
100 100%
0% 0
Developer Tools
0 0%
100% 100
Web Application Security
100 100%
0% 0
Code Analysis
0 0%
100% 100

User comments

Share your experience with using Qualys VM and SonarCloud. For example, how are they different and which one is better?
Log in or Post with

Reviews

These are some of the external sources and on-site user reviews we've used to compare Qualys VM and SonarCloud

Qualys VM Reviews

We have no reviews of Qualys VM yet.
Be the first one to post

SonarCloud Reviews

5 Best DevSecOps Tools in 2023
This software is not free but SonarCloud can be as little as €10/month. SonarQube is software that you can license and run on your own hardware, whereas SonarCloud is Software as a Service (SaaS).

Social recommendations and mentions

Based on our record, SonarCloud seems to be more popular. It has been mentiond 12 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.

Qualys VM mentions (0)

We have not tracked any mentions of Qualys VM yet. Tracking of Qualys VM recommendations started around Mar 2021.

SonarCloud mentions (12)

  • free-for.dev
    Sonarcloud.io — Automated source code analysis for Java, JavaScript, C/C++, C#, VB.NET, PHP, Objective-C, Swift, Python, Groovy and even more languages, free for Open Source. - Source: dev.to / over 1 year ago
  • A new version of Podman Desktop is out: v0.9.0
    Website has been improved with a lot of UI enhancements and updated content. On CI side, dependabot is now enabled as well as SonarCloud. Source: over 1 year ago
  • Sunday Daily Thread: What's everyone working on this week?
    I am also using [SonarCloud](https://sonarcloud.io/) for static code analysis to minimize the chances of bugs. Source: almost 2 years ago
  • RFC: A Full-stack Analytics Platform Architecture
    Ideally, software can quickly go from development to production. Continuous deployment and delivery are some processes that make this possible. Continuous deployment means establishing an automated pipeline from development to production while continuous delivery means maintaining the main branch in a deployable state so that a deployment can be requested at any time. Predecos uses these tools. When a commit goes... - Source: dev.to / almost 2 years ago
  • js / senior vs junior /.then vs await
    There are tools that scan a repo and automatically drop a comment on a PR if it picks up smells on new code. We used Sonarcloud at a previous job. Source: about 2 years ago
View more

What are some alternatives?

When comparing Qualys VM and SonarCloud, you can also consider the following products

Nessus - Nessus Professional is a security platform designed for businesses who want to protect the security of themselves, their clients, and their customers.

SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.

Burp Suite - Burp Suite is an integrated platform for performing security testing of web applications.

Snyk - Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.

AlienVault USM (from AT&T Cybersecurity) - AlienVault USM Anywhere delivers powerful threat detection, incident response, and compliance management for cloud, on-premises, and hybrid environments.

Codacy - Automatically reviews code style, security, duplication, complexity, and coverage on every change while tracking code quality throughout your sprints.