Software Alternatives & Reviews

SonarCloud VS Checkmarx

Compare SonarCloud VS Checkmarx and see what are their differences

SonarCloud logo SonarCloud

Enhance your workflow with continuous code quality, SonarCloud automatically analyzes and decorates pull requests on GitHub, Bitbucket, Azure DevOps and GitLab on major languages.

Checkmarx logo Checkmarx

The industry’s most comprehensive AppSec platform, Checkmarx One is fast, accurate, and accelerates your business.
  • SonarCloud Landing page
    Landing page //
    2023-07-20

SonarCloud, a core component of the Sonar solution, is a Software-as-a-Service (SaaS) tool that systematically helps developers and organizations deliver Clean Code. SonarCloud easily integrates into the cloud DevOps platforms and extends the CI/CD workflow to perform automated code reviews to detect and help fix issues in the code.

Supported by the Sonar Clean as You Code methodology, only code that meets the defined quality standard can be released to production. SonarCloud analyzes the most popular programming languages, frameworks, and infrastructure technologies and supports over 5,000 Clean Code rules.

Trusted by 7 million developers and 400,000 organizations globally to clean more than half a trillion lines of code, Sonar has become integral to delivering better software.

  • Checkmarx Landing page
    Landing page //
    2022-07-29

SonarCloud

Categories
  • Developer Tools
  • DevOps Tools
  • SAST
  • Code Quality
  • Code Security
  • Code Analysis
  • Code Review
  • Code Coverage
Website sonarsource.com
Pricing URL Official SonarCloud Pricing
Details $freemium €10.0 / Monthly (100,000 Lines of Code)
Platforms
Web Browser Google Chrome Internet Explorer Firefox Safari Cloud JavaScript PHP Python Java Ruby TypeScript JavaScript C++

Checkmarx

Categories
  • Code Analysis
  • Code Review
  • Web Application Security
  • Code Coverage
Website checkmarx.com
Pricing URL-
Details $-
Platforms
-

SonarCloud features and specs

  • SAST Analysis: Bug, Security Vulnerability, and Code Smell detection with remediation guidance
  • Code Reveiw: Automatic code review and pull request feedback in your code repository
  • Quality Gate: Go/No Go Quality Gate failing your pipelines when code doesn’t meet requirements

Checkmarx features and specs

No features have been listed yet.

SonarCloud videos

No SonarCloud videos yet. You could help us improve this page by suggesting one.

+ Add video

Checkmarx videos

Viewing results and understanding security issues via Checkmarx online scanner

More videos:

  • Demo - Checkmarx CxSAST Demonstration
  • Review - Meetups at Checkmarx: An Introduction to API Security
  • Review - Source code review with Checkmarx
  • Review - Checkmarx Results Review

Category Popularity

0-100% (relative to SonarCloud and Checkmarx)
Developer Tools
100 100%
0% 0
Code Analysis
12 12%
88% 88
Code Review
0 0%
100% 100
Code Coverage
100 100%
0% 0

User comments

Share your experience with using SonarCloud and Checkmarx. For example, how are they different and which one is better?
Log in or Post with

Reviews

These are some of the external sources and on-site user reviews we've used to compare SonarCloud and Checkmarx

SonarCloud Reviews

5 Best DevSecOps Tools in 2023
This software is not free but SonarCloud can be as little as €10/month. SonarQube is software that you can license and run on your own hardware, whereas SonarCloud is Software as a Service (SaaS).

Checkmarx Reviews

Ten Best SonarQube alternatives in 2021
CheckMarx has been used to test the programs to rectify vulnerability in the code and try the security lapses. Checkmarx is the software program exposure Platform for the enterprise. It has an impressive Codebashing characteristic that has the threshold over SonarQube. The software tracking-reporting function is good too. The "delta-experiment" function is it's far genuinely...
Source: duecode.io

Social recommendations and mentions

Based on our record, SonarCloud should be more popular than Checkmarx. It has been mentiond 12 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.

SonarCloud mentions (12)

  • free-for.dev
    Sonarcloud.io — Automated source code analysis for Java, JavaScript, C/C++, C#, VB.NET, PHP, Objective-C, Swift, Python, Groovy and even more languages, free for Open Source. - Source: dev.to / over 1 year ago
  • A new version of Podman Desktop is out: v0.9.0
    Website has been improved with a lot of UI enhancements and updated content. On CI side, dependabot is now enabled as well as SonarCloud. Source: over 1 year ago
  • Sunday Daily Thread: What's everyone working on this week?
    I am also using [SonarCloud](https://sonarcloud.io/) for static code analysis to minimize the chances of bugs. Source: almost 2 years ago
  • RFC: A Full-stack Analytics Platform Architecture
    Ideally, software can quickly go from development to production. Continuous deployment and delivery are some processes that make this possible. Continuous deployment means establishing an automated pipeline from development to production while continuous delivery means maintaining the main branch in a deployable state so that a deployment can be requested at any time. Predecos uses these tools. When a commit goes... - Source: dev.to / almost 2 years ago
  • js / senior vs junior /.then vs await
    There are tools that scan a repo and automatically drop a comment on a PR if it picks up smells on new code. We used Sonarcloud at a previous job. Source: almost 2 years ago
View more

Checkmarx mentions (2)

  • A Guide to DevSecOps with API Gateway
    Automate security testing: Use tools such as OWASP ZAP, SonarQube, or Checkmarx to automate security testing. This will help you identify security issues early in the development process and reduce the risk of vulnerabilities being introduced into your code. - Source: dev.to / about 1 year ago
  • 11 Top DevSecOps Tools
    Application Security (AppSec) is the forte of Checkmarx, which is an award-winning AppSec Testing tool that integrates security policies into the DevOps workflow and ensures security across the application lifecycle. Checkmarx scans all your code and provides actionable insights for critical vulnerabilities. Checkmarx also offers developer-friendly AppSec training that makes the transition to DevSecOps more... - Source: dev.to / over 2 years ago

What are some alternatives?

When comparing SonarCloud and Checkmarx, you can also consider the following products

SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.

Snyk - Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.

Coverity Scan - Find and fix defects in your Java, C/C++ or C# open source project for free

Codacy - Automatically reviews code style, security, duplication, complexity, and coverage on every change while tracking code quality throughout your sprints.

Veracode - Veracode's application security software products are simpler and more scalable to increase the resiliency of your application infrastructure.

ESLint - The fully pluggable JavaScript code quality tool