Average Ratings 2 Ratings

Total
ease
features
design
support

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

SonarQube Server serves as a self-hosted solution for ongoing code quality assessment, enabling development teams to detect and address bugs, vulnerabilities, and code issues in real time. It delivers automated static analysis across multiple programming languages, ensuring that the highest standards of quality and security are upheld throughout the software development process. Additionally, SonarQube Server integrates effortlessly with current CI/CD workflows, providing options for both on-premise and cloud deployments. Equipped with sophisticated reporting capabilities, it assists teams in managing technical debt, monitoring progress, and maintaining coding standards. This platform is particularly well-suited for organizations desiring comprehensive oversight of their code quality and security while maintaining high performance levels. Furthermore, SonarQube fosters a culture of continuous improvement within development teams, encouraging proactive measures to enhance code integrity over time.

Description

With VAddy, your development team doesn’t need to possess extensive knowledge in security matters. It simplifies the identification of vulnerabilities, enabling you to address them proactively before they become embedded in your codebase. Integrating seamlessly into your current CI workflow, VAddy operates automatically after each code alteration, notifying you whenever a commit introduces potential vulnerabilities. Many of us have experienced how a vulnerability discovered right before a project’s launch can derail timelines. By consistently conducting thorough security assessments throughout your development phases, VAddy helps mitigate those unexpected disruptions. Additionally, it provides insights into the occurrence of security vulnerabilities linked to specific team members or code modules. This capability allows for the prompt identification of areas needing improvement and fosters knowledge enhancement among developers who may lack strong security awareness. Our diagnostic engine is continuously refined and updated by seasoned security professionals to stay ahead of emerging threats. Consequently, your team can confidently build secure applications without requiring specialized security expertise. This results in a more efficient development process, leading to higher quality software delivery.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Jenkins Yes 
Blink Yes 
C# Yes 
COBOL Yes 
CircleCI No 
Coco Code Coverage Yes 
CodePeer Yes 
CodeScene Yes 
GitHub No 
Go Yes 
JaCoCo Yes 
Java Yes 
Maverix Yes 
PHP Yes 
SENTRIO Yes 
Terraform Yes 
ThreadFix Yes 
Trivy Yes 

Integrations

Jenkins Yes 
Blink No 
C# No 
COBOL No 
CircleCI Yes 
Coco Code Coverage No 
CodePeer No 
CodeScene No 
GitHub Yes 
Go No 
JaCoCo No 
Java No 
Maverix No 
PHP No 
SENTRIO No 
Terraform No 
ThreadFix No 
Trivy No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

$55 per month
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

SonarSource

Founded

2008

Country

Switzerland

Website

www.sonarsource.com/products/sonarqube/

Vendor Details

Company Name

VAddy

Founded

2014

Country

Japan

Website

vaddy.net

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring Yes 
Source Code Analysis Yes 
Third-Party Tools Integration No 
Training Resources Yes 
Vulnerability Detection Yes 
Vulnerability Remediation No 

Static Application Security Testing (SAST)

Application Security No 
Dashboard No 
Debugging No 
Deployment Management No 
IDE No 
Multi-Language Scanning No 
Real-Time Analytics No 
Source Code Scanning No 
Vulnerability Scanning No 

Static Code Analysis

Analytics / Reporting Yes 
Code Standardization / Validation Yes 
Multiple Programming Language Support Yes 
Provides Recommendations Yes 
Standard Security/Industry Libraries Yes 
Vulnerability Management Yes 

Product Features

Vulnerability Scanners

Asset Discovery No 
Black Box Scanning No 
Compliance Monitoring No 
Continuous Monitoring No 
Defect Tracking No 
Interactive Scanning No 
Logging and Reporting No 
Network Mapping No 
Perimeter Scanning No 
Risk Analysis No 
Threat Intelligence No 
Web Inspection No 

Alternatives

Alternatives

SonarQube for IDE Reviews

SonarQube for IDE

SonarSource