Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

SonarQube ServerApiiro SAST2 of 3 products

Side-by-side comparison of SonarQube Server, Apiiro SAST
Product	SonarQube Server by SonarSource View product	Apiiro SAST by Apiiro View product
Overview
What it is	SonarQube Server is a self-managed code quality & security platform for on-premises code quality and secure development lifecycle. See features and SAST alternatives.	What does Apiiro SAST do? It covers context-aware static analysis and AST false-positive reduction. See typical use cases, cloud deployment and how it compares to rivals.
Product type	Self-Managed Code Quality & Security Platform	Context-Aware Static Code Analysis
Best for	Cross-industry, Financial Services, Automotive, Government, Software & Technology, Public Sector	Software Development, Enterprise, SaaS, FinTech
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	CloudOn-Premise	SaaSCloud
Deployment details	Self-managed (on-premises or private cloud); Self-managed on Windows, Linux, Docker or Kubernetes	Cloud (SaaS); Git; Cloud SaaS; CI/CD pipelines
Data residency	Customer-controlled	US; EU; Global
Key features
What it offers	Self-managed deployment Branch and pull request analysis Quality gates Taint analysis and SAST Security reports (OWASP, CWE, PCI DSS, STIG) Portfolio dashboards High availability (Data Center Edition) On-premises code quality	Context-aware static analysis AST false-positive reduction Data flow tracing Automated PR comments SAST Application Security Testing
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: yes	SSO: yes
Role-based access (RBAC)	RBAC: yes	RBAC: yes
Multi-tenant	Multi-tenant: yes	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	WindowsLinuxDockerKubernetes	Source repositoriesBuild servers
Compliance	Supports OWASP Top 10, CWE Top 25, PCI DSS, OWASP ASVS and STIG reporting	SOC 2ISO 27001CWE/SANS Top 25
Integrations & coverage
Integrations	GitHubGitLabBitbucketAzure DevOpsJenkinsLDAPSAML identity providersSonarQube for IDE	GitHubGitLabBitbucketJenkins
Industries	Cross-industryFinancial ServicesAutomotiveGovernmentSoftware & TechnologyPublic Sector	Software DevelopmentEnterpriseSaaSFinTech
Regions	Global	Global
Vendor
Company	SonarSource	Apiiro
Headquarters	Geneva, Switzerland	New York, New York, USA
Company size	1,000+	51-200
Founded	2008	2019

SonarQube Server

by SonarSource

View product

Apiiro SAST

by Apiiro

View product

Overview

What it is

SonarQube Server

SonarQube Server is a self-managed code quality & security platform for on-premises code quality and secure development lifecycle. See features and SAST alternatives.

Apiiro SAST

What does Apiiro SAST do? It covers context-aware static analysis and AST false-positive reduction. See typical use cases, cloud deployment and how it compares to rivals.

Product type

SonarQube Server

Self-Managed Code Quality & Security Platform

Apiiro SAST

Context-Aware Static Code Analysis

Best for

SonarQube Server

Cross-industry, Financial Services, Automotive, Government, Software & Technology, Public Sector

Apiiro SAST

Software Development, Enterprise, SaaS, FinTech

Pricing

Pricing model

SonarQube Server

Contact Vendor

Apiiro SAST

Contact Vendor

Free trial

SonarQube Server

Apiiro SAST

Deployment

Deployment options

SonarQube Server

CloudOn-Premise

Apiiro SAST

SaaSCloud

Deployment details

SonarQube Server

Self-managed (on-premises or private cloud); Self-managed on Windows, Linux, Docker or Kubernetes

Apiiro SAST

Cloud (SaaS); Git; Cloud SaaS; CI/CD pipelines

Data residency

SonarQube Server

Customer-controlled

Apiiro SAST

US; EU; Global

Key features

What it offers

SonarQube Server

Self-managed deployment
Branch and pull request analysis
Quality gates
Taint analysis and SAST
Security reports (OWASP, CWE, PCI DSS, STIG)
Portfolio dashboards
High availability (Data Center Edition)
On-premises code quality

Apiiro SAST

Context-aware static analysis
AST false-positive reduction
Data flow tracing
Automated PR comments
SAST
Application Security Testing

Platform & access

API access

SonarQube Server

Apiiro SAST

Single sign-on (SSO)

SonarQube Server

Apiiro SAST

Role-based access (RBAC)

SonarQube Server

Apiiro SAST

Multi-tenant

SonarQube Server

Apiiro SAST

Mobile app

SonarQube Server

Apiiro SAST

Supported platforms

SonarQube Server

WindowsLinuxDockerKubernetes

Apiiro SAST

Source repositoriesBuild servers

Compliance

SonarQube Server

Supports OWASP Top 10, CWE Top 25, PCI DSS, OWASP ASVS and STIG reporting

Apiiro SAST

SOC 2ISO 27001CWE/SANS Top 25

Integrations & coverage

Integrations

SonarQube Server

GitHubGitLabBitbucketAzure DevOpsJenkinsLDAPSAML identity providersSonarQube for IDE

Apiiro SAST

GitHubGitLabBitbucketJenkins

Industries

SonarQube Server

Cross-industryFinancial ServicesAutomotiveGovernmentSoftware & TechnologyPublic Sector

Apiiro SAST

Software DevelopmentEnterpriseSaaSFinTech

Regions

SonarQube Server

Global

Apiiro SAST

Global

Vendor

Company

SonarQube Server

SonarSource

Apiiro SAST

Apiiro

Headquarters

SonarQube Server

Geneva, Switzerland

Apiiro SAST

New York, New York, USA

Company size

SonarQube Server

1,000+

Apiiro SAST

51-200

Founded

SonarQube Server

2008

Apiiro SAST

2019