Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | SonarQube Advanced Security by SonarSource View product | Veracode Platform by Veracode View product |
|---|---|---|
| Overview | ||
| What it is | SonarSource built SonarQube Advanced Security for open source dependency risk. Explore SBOM generation, review cloud deployment and compare similar SAST products. | What does Veracode Platform do? It covers comprehensive AppSec platform and SAST, DAST, SCA, IAST. See typical use cases, cloud deployment and how it compares to rivals. |
| Product type | Software Composition Analysis & Advanced SAST | Unified Application Risk Management Platform |
| Best for | Cross-industry, Software & Technology, Financial Services, Healthcare, Public Sector | Global Enterprise, Financial, Health, Defense |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | SaaSCloud |
| Deployment details | Self-managed (SonarQube Server); Cloud (SonarQube Cloud); Add-on for SonarQube Server Enterprise and SonarQube Cloud Enterprise | Cloud (SaaS); Multi-Engine; Multi-tenant cloud platform |
| Data residency | Customer-controlled (Server); EU or US region (Cloud) | US; EU; Global |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | WindowsLinuxmacOSDockerKubernetes | JiraGitHubGitLabAzure DevOpsServiceNowJenkinsREST API |
| Compliance | Supports OWASP Top 10, CWE Top 25, SBOM (CycloneDX and SPDX) and secure development requirements | FedRAMPSOC 2 Type IIISO 27001PCI-DSSHIPAA |
| Integrations & coverage | ||
| Integrations | GitHubGitLabAzure DevOpsBitbucketJenkinsSonarQube for IDE | JiraAzure DevOpsServiceNowGitHub |
| Industries | Cross-industrySoftware & TechnologyFinancial ServicesHealthcarePublic Sector | Global EnterpriseFinancialHealthDefense |
| Regions | Global | GlobalUSEU |
| Vendor | ||
| Company | SonarSource | Veracode |
| Headquarters | Geneva, Switzerland | Burlington, Massachusetts, USA |
| Company size | 1,000+ | 1,000+ |
| Founded | 2008 | 2006 |
Overview
What it is
SonarQube Advanced Security
SonarSource built SonarQube Advanced Security for open source dependency risk. Explore SBOM generation, review cloud deployment and compare similar SAST products.Veracode Platform
What does Veracode Platform do? It covers comprehensive AppSec platform and SAST, DAST, SCA, IAST. See typical use cases, cloud deployment and how it compares to rivals.Product type
SonarQube Advanced Security
Software Composition Analysis & Advanced SASTVeracode Platform
Unified Application Risk Management PlatformBest for
SonarQube Advanced Security
Cross-industry, Software & Technology, Financial Services, Healthcare, Public SectorVeracode Platform
Global Enterprise, Financial, Health, DefensePricing
Pricing model
SonarQube Advanced Security
Contact VendorVeracode Platform
Contact VendorFree trial
SonarQube Advanced Security
Free trial: yesVeracode Platform
Free trial: yesDeployment
Deployment options
SonarQube Advanced Security
Veracode Platform
Deployment details
SonarQube Advanced Security
Self-managed (SonarQube Server); Cloud (SonarQube Cloud); Add-on for SonarQube Server Enterprise and SonarQube Cloud EnterpriseVeracode Platform
Cloud (SaaS); Multi-Engine; Multi-tenant cloud platformData residency
SonarQube Advanced Security
Customer-controlled (Server); EU or US region (Cloud)Veracode Platform
US; EU; GlobalKey features
What it offers
SonarQube Advanced Security
- Software composition analysis (SCA)
- Vulnerable and malicious package detection
- License compliance
- SBOM generation
- Advanced SAST with third-party data flow
- Secrets detection
- Pull request and quality gate enforcement
- Open source dependency risk
Veracode Platform
- Comprehensive AppSec platform
- SAST, DAST, SCA, IAST
- Developer security training (Security Labs)
- Reporting
- Application Security
- SAST
- DAST
- SCA
Platform & access
API access
SonarQube Advanced Security
API access: yesVeracode Platform
API access: yesSingle sign-on (SSO)
SonarQube Advanced Security
SSO: yesVeracode Platform
SSO: yesRole-based access (RBAC)
SonarQube Advanced Security
RBAC: yesVeracode Platform
RBAC: yesMulti-tenant
SonarQube Advanced Security
Multi-tenant: yesVeracode Platform
Multi-tenant: yesMobile app
SonarQube Advanced Security
Mobile app: noVeracode Platform
Mobile app: noSupported platforms
SonarQube Advanced Security
Veracode Platform
Compliance
SonarQube Advanced Security
Veracode Platform
Integrations & coverage
Integrations
SonarQube Advanced Security
Veracode Platform
Industries
SonarQube Advanced Security
Veracode Platform
Regions
SonarQube Advanced Security
Veracode Platform
Vendor
Company
SonarQube Advanced Security
SonarSourceVeracode Platform
VeracodeHeadquarters
SonarQube Advanced Security
Geneva, SwitzerlandVeracode Platform
Burlington, Massachusetts, USACompany size
SonarQube Advanced Security
1,000+Veracode Platform
1,000+Founded
SonarQube Advanced Security
2008Veracode Platform
2006