Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Enhance your productivity by ensuring only high-quality code is released, as SonarQube Cloud (previously known as SonarCloud) seamlessly evaluates branches and enriches pull requests with insights. Identify subtle bugs to avoid unpredictable behavior that could affect users and address security vulnerabilities that threaten your application while gaining knowledge of application security through the Security Hotspots feature. Within moments, you can begin using the platform right where your code resides, benefiting from immediate access to the most current features and updates. Project dashboards provide vital information on code quality and readiness for release, keeping both teams and stakeholders in the loop. Showcase project badges to demonstrate your commitment to excellence within your communities. Code quality and security are essential across your entire technology stack, encompassing both front-end and back-end development. That’s why we support a wide range of 24 programming languages, including Python, Java, C++, and many more. The demand for transparency in coding practices is on the rise, and we invite you to be a part of this movement; it's completely free for open-source projects, making it an accessible opportunity for all developers! Plus, by participating, you contribute to a larger community dedicated to improving software quality.

Description

Supports more than 20 programming languages such as Java, JSP, C/C++, C#, Python, Swift, ASP(.NET), ABAP, and Objective C, among others. Adheres to international security compliance standards and guidelines. Conducts analysis of MVC structures, file associations, and function call relationships at various levels. Implements incremental analysis to reduce analysis time by focusing only on newly added or modified files and their related components. Collaborates with other Sparrow AST solutions like DAST and RASP to uncover correlations between vulnerabilities, enhancing the accuracy of search results. Provides an issue navigator for tracking and monitoring vulnerabilities from their source to the actual code implementation. Offers automated guidance for correcting real source code issues and categorizing vulnerabilities efficiently. Features a dashboard for managing analysis results and statistical data. Centralizes rule management (Checker) utilizing information related to risk levels, options, and additional parameters, ensuring a comprehensive approach to security. Additionally, it enables users to maintain a historical record of vulnerabilities, facilitating better understanding and remediation over time.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

C Yes 
C# Yes 
C++ Yes 
Java Yes 
Kotlin Yes 
Objective-C Yes 
Python Yes 
Swift Yes 
AWS CloudFormation Yes 
AccessOwl Yes 
BI Book Yes 
COBOL Yes 
Faros AI Yes 
Kondukto Yes 
Microsoft Word No 
Oobeya Yes 
PVS-Studio Yes 
Resmo Yes 
Ruby Yes 
Visual Basic Yes 

Integrations

C Yes 
C# Yes 
C++ Yes 
Java Yes 
Kotlin Yes 
Objective-C Yes 
Python Yes 
Swift Yes 
AWS CloudFormation No 
AccessOwl No 
BI Book No 
COBOL No 
Faros AI No 
Kondukto No 
Microsoft Word Yes 
Oobeya No 
PVS-Studio No 
Resmo No 
Ruby No 
Visual Basic No 

Pricing Details

No price information available.
Free Trial No 
Free Version Yes 

Pricing Details

one-time payment
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

SonarSource

Founded

2008

Country

Switzerland

Website

www.sonarsource.com/products/sonarcloud/

Vendor Details

Company Name

Sparrow

Founded

2018

Country

South Korea

Website

www.sparrowfasoo.com/en/product/sast

Product Features

Enterprise Architecture

Application Portfolio Management No 
Architecture Governance No 
Capability Mapping No 
Diagramming No 
Idea Management No 
Modeling & Simulation No 
Project Management No 
Risk Assessment No 
Transformation Roadmapping No 
Version Control No 

Source Code Management

Access Controls/Permissions No 
Bug Tracking No 
Build Automation No 
Change Management No 
Code Review No 
Collaboration No 
Continuous Integration No 
Repository Management No 
Version Control No 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Static Code Analysis

Analytics / Reporting No 
Code Standardization / Validation No 
Multiple Programming Language Support No 
Provides Recommendations No 
Standard Security/Industry Libraries No 
Vulnerability Management No 

Product Features

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Static Code Analysis

Analytics / Reporting No 
Code Standardization / Validation No 
Multiple Programming Language Support No 
Provides Recommendations No 
Standard Security/Industry Libraries No 
Vulnerability Management No 

Alternatives

Alternatives

Snappytick Reviews

Snappytick

Snappycode Audit
PT Application Inspector Reviews

PT Application Inspector

Positive Technologies
SonarQube Server Reviews

SonarQube Server

SonarSource
Altar-1 Reviews

Altar-1

Aikido Security