Rapid7 AppSpider vs SonarCloud comparison

Rapid7 AppSpider

Read 13 Rapid7 AppSpider reviews

1,234 Views
912 Comparison Views

100% willing to recommend

SonarCloud

Read 10 SonarCloud reviews

10,608 Views
8,072 Comparison Views

100% willing to recommend

Rapid7 AppSpider

SonarCloud

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Rapid7 AppSpider and SonarCloud based on real PeerSpot user reviews.

Find out in this report how the two Static Application Security Testing (SAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Rapid7 AppSpider vs. SonarCloud Report (Updated: May 2024).

Buyer's Guide

Rapid7 AppSpider vs. SonarCloud

May 2024

Download the complete report

Helped 787,779 peers since 2012

Categories and Ranking

Rapid7 AppSpider

Ranking in Static Application Security Testing (SAST)

26th

Average Rating

7.8

Number of Reviews

Ranking in other categories

No ranking in other categories

SonarCloud

Ranking in Static Application Security Testing (SAST)

10th

Average Rating

8.4

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of June 2024, in the Static Application Security Testing (SAST) category, the mindshare of Rapid7 AppSpider is 0.4%, down from 0.7% compared to the previous year. The mindshare of SonarCloud is 11.5%, up from 8.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Unique Categories:

No other categories found

Featured Reviews

Andrei Bigdan

Executive Manager at B2B-Solutions LLC

May 4, 2023

Useful vulnerability reporting data, flexible, and simple implementation

I am using Rapid7 AppSpider for vulnerability assessment The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate all the reports exactly what we want in a…

Read full review

Huzaifa Asif

Cloud Engineer | Solution Architect at Respond.io

Dec 12, 2023

A comprehensive code quality management offering all-in-one functionality, including static code analysis, security assessments, and code optimization, while providing valuable insights for developers

There's room for improvement in the configuration process, particularly during the initial setup phase. Setting up features like mono reports can be challenging, and the existing documentation could use improvement in providing clearer instructions. I found myself needing to engage with support multiple times to navigate through certain aspects. Additionally, it would be beneficial if it could streamline the integration process for new features. Enhancing documentation on how to integrate these features seamlessly would go a long way in improving user experience. The introduction of an auto-commit functionality would be a valuable addition. Some other tools offer this feature, allowing for the automatic creation of pull requests to address identified issues. This functionality significantly reduces the manual effort required.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature is the reporting, which is compliant with international standards."

"The entire solution is interactive and has a point-and-click user experience, which makes it easy to find items or drill down on information. You don't need specialized skills to use the product."

"What I like most about AppSpider is that it's easy to use and its automated scan gives me all the details I need to know when it comes to vulnerabilities and their solutions."

"When it is set up properly, it can do scanning on web apps with multiple engines automatically."

"I would say that it is stable, as I am not aware of any major issues."

"It is really accurate and the rate of false positives is very low."

"The initial deployment is very straightforward and simple. The product is stable if configured properly."

"I like the ability the product has to detect vulnerabilities quickly, when it has been released in our environment, then displaying them to us."

More Rapid7 AppSpider pros

"The most valuable features of SonarCloud are the ability to discover vulnerabilities, security weak points, security hotspots, and all the feedback that comes into the feature branch. You can deploy the code with the security, you can eliminate the problem at the developer level rather than identifying the problem in the productions."

"The reports from SonarCloud are very good."

"The most valuable feature of SonarCloud is its overall performance."

"The solution provides continuous code analysis which has improved the quality of our code. It can raise alarms on vulnerabilities with immediate reports on the dashboard. Few things are false positives and we can customize the rules."

"SonarCloud is overall a good tool for identifying code smells, bugs, and code duplication, but we've found that using Android Lint is more effective for our needs."

"For what it is meant to do, it works pretty well."

"I'm not implementing the solutions. However, I've talked to the people who deploy the tools, and they are happy with how easy setting up SonarCloud is."

"Recently, they introduced support for mono reports and microservices, which is a noteworthy development as it provides a more detailed view of each service."

More SonarCloud pros

Cons

"The dashboard and interface are crucial and they need some improvement."

"The tech support is responsive but issues remain unresolved."

"Support response times are slow and can be improved."

"The enterprise interface is too simple. It should be more customizable."

"One of the challenges I have with AppSpider is that it gives you a lot of false positives, especially when compared to other solutions."

"This price of this solution is a little bit expensive."

"There are some glitches with stability, and it is an area for improvement."

"The performance of the solution could improve. When I compare the speed it is slower than others on the market. There are some tricks we use to help speed up the solution."

More Rapid7 AppSpider cons

"The solution needs to improve its customization and flexibility."

"We had some issues with the scanner."

"CI/CD pipeline is part of a whole chain of design, development, and production, and it's becoming increasingly crucial to optimize the various tools across different stages. However, it's still a silo approach because the full integration is missing. This isn't just an issue with SonarCloud. It's a general problem with tooling."

"SonarCloud can improve the false positives. Sometimes the gates sometimes act a little weird. We then need to manually go and mark the false positive."

"The documentation needs improvement on optimizing build time for seamless CI/CD integration with our Android apps."

"The reports could improve by providing more information. We are not able to use the reports in our operation until they are improved. Additionally, if the vendor provided more customization capabilities it would be a benefit."

"I've been told by the developers that the solution is too limited. It's not testing enough within the containers."

"There's room for improvement in the configuration process, particularly during the initial setup phase."

More SonarCloud cons

Pricing and Cost Advice

"It is expensive if you want to buy the Enterprise version that is able to scan multiple applications at once."

"AppSpider is closed-source software and you need to acquire a license in order to use it."

"The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor."

"The licensing cost depends on the number of users."

"The price is pretty fair."

"While not extremely cheap, it aligns well with market standards and offers good value."

"The current pricing is quite cheap."

"I rate the pricing a five out of ten."

"The price of SonarCloud is not expensive, it goes by the lines of code. 1 million lines per code are approximately 4,000 USD per year. If you need 2 million lines of code you would double the annual cost."

"I am using the free version of the solution."

"The price of SonarCloud could be less expensive. We are using the community version and the price should be more reasonable."

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

787,779 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

15%

Government

Manufacturing Company

Computer Software Company

18%

Financial Services Firm

10%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about Rapid7 AppSpider?

The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate a...

See all answers

What is your experience regarding pricing and costs for Rapid7 AppSpider?

The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor. The price of the s...

See all answers

What needs improvement with Rapid7 AppSpider?

The performance of the solution could improve. When I compare the speed it is slower than others on the market. There are some tricks we use to help speed up the solution.

See all answers

What do you like most about SonarCloud?

Recently, they introduced support for mono reports and microservices, which is a noteworthy development as it provides a more detailed view of each service.

See all answers

What is your experience regarding pricing and costs for SonarCloud?

I would rate the price an eight out of ten because it's reasonable. While not extremely cheap, it aligns well with market standards and offers good value. It's an all-inclusive package where you pa...

See all answers

What needs improvement with SonarCloud?

See all answers

Comparisons

Rapid7 InsightAppSec vs Rapid7 AppSpider

Compared 30% of the time

OWASP Zap vs Rapid7 AppSpider

Compared 14% of the time

Acunetix vs Rapid7 AppSpider

Compared 13% of the time

Invicti vs Rapid7 AppSpider

Compared 10% of the time

Qualys Web Application Scanning vs Rapid7 AppSpider

Compared 6% of the time

More Rapid7 AppSpider Competitors

SonarQube vs SonarCloud

Compared 78% of the time

Veracode vs SonarCloud

Compared 7% of the time

Checkmarx One vs SonarCloud

Compared 4% of the time

GitLab vs SonarCloud

Compared 3% of the time

OWASP Zap vs SonarCloud

Compared 2% of the time

More SonarCloud Competitors

Product Reports

Buyer's Guide

Rapid7 AppSpider

June 2024

Download Rapid7 AppSpider product report

Buyer's Guide

SonarCloud

May 2024

Download SonarCloud product report

Also Known As

AppSpider

No data available

Learn More

Rapid7

Sonar

Interactive Demo

Demo not available

Rapid7

Sonar

Overview

SPAs, APIs, mobile—the evolution of application technology is measured in months, not years. Is your web application security testing tool designed to keep up? AppSpider lets you collect all the information needed to test all the apps so that you aren’t left with gaping application risks.

Our dynamic application security testing (DAST) solution crawls to the deepest, darkest corners of even the most modern and complex apps to effectively test for risk and get you the insight you need to remediate faster. With AppSpider on your side (or, rather, all of your sides), you’ll be able to scan all the apps today and always be ready for whatever comes next.

SonarCloud is a cloud-based alternative of the SonarQube platform, offering continuous code quality and security analysis as a service. SonarCloud integrates seamlessly with popular version control and CI/CD platforms such as GitHub, Bitbucket, and Azure DevOps. It provides static code analysis to identify and help remediate issues such as bugs and security vulnerabilities. SonarCloud enables developers to receive immediate feedback on their code within their development environment, facilitating the maintenance of high-quality code standards, and promoting a culture of continuous improvement in software development projects. It helps produce software that is secure, reliable, and maintainable. SonarCloud is free for open-source projects and is offered as a paid subscription for private projects, priced per lines of code.

Sample Customers

Microsoft

Buyer's Guide

Rapid7 AppSpider vs. SonarCloud

May 2024

Free Report: Rapid7 AppSpider vs. SonarCloud

Find out what your peers are saying about Rapid7 AppSpider vs. SonarCloud and other solutions. Updated: May 2024.

DOWNLOAD NOW

787,779 professionals have used our research since 2012.

See our Rapid7 AppSpider vs. SonarCloud report.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.