CodeSonar vs GitGuardian Platform comparison

CodeSecure and GitGuardian are both solutions in the Application Security Tools category. CodeSecure is ranked #32 with an average rating of 7.0, while GitGuardian is ranked #8 with an average rating of 9.0. CodeSecure holds a 1.5% mindshare in AS, compared to GitGuardian’s 0.7% mindshare. Additionally, 87% of CodeSecure users are willing to recommend the solution, compared to 100% of GitGuardian users who would recommend it.

CodeSonar

Read 7 CodeSonar reviews

1,826 Views
1,129 Comparison Views

87% willing to recommend

GitGuardian Platform

Read 28 GitGuardian Platform reviews

2,054 Views
406 Comparison Views

100% willing to recommend

CodeSonar

GitGuardian Platform

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

CodeSonar and GitGuardian Platform compete in software quality and security solutions. GitGuardian Platform appears to have an upper hand, particularly due to its enhanced capabilities and streamlined integration within existing workflows.

Features: CodeSonar provides comprehensive static analysis tools, robust software quality assurance, and detailed defect detection. GitGuardian Platform is recognized for superior secret detection capabilities, real-time incident response, and seamless integration within existing workflows.

Room for Improvement: CodeSonar needs enhanced support for emerging programming languages and improved user interface design, with some users also suggesting better performance metrics. GitGuardian Platform could improve in reducing false positives during secret detection, expanding language support, and optimizing resource usage.

Ease of Deployment and Customer Service: CodeSonar receives mixed feedback on deployment complexity, though its customer service is responsive. GitGuardian Platform is praised for straightforward deployment and proactive customer support, which enhances the overall user experience.

Pricing and ROI: CodeSonar's pricing is considered premium, with ROI emerging over time through cost savings in defect identification. GitGuardian Platform provides competitive pricing with quick ROI due to its immediate positive impact on security posture, justifying the cost for many users.

To learn more, read our detailed CodeSonar vs. GitGuardian Platform Report (Updated: June 2025).

Buyer's Guide

CodeSonar vs. GitGuardian Platform

June 2025

Download the complete report

Helped 860,168 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CodeSonar

Ranking in Application Security Tools

32nd

Average Rating

8.2

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Static Code Analysis (10th)

GitGuardian Platform

Ranking in Application Security Tools

8th

Average Rating

9.0

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (4th), Data Loss Prevention (DLP) (6th), Software Supply Chain Security (4th), DevSecOps (3rd)

Mindshare comparison

As of July 2025, in the Application Security Tools category, the mindshare of CodeSonar is 1.5%, up from 1.0% compared to the previous year. The mindshare of GitGuardian Platform is 0.7%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Mathieu ALBRESPY

Intigration Developer at ez-Wheel

Nice interface, quick to deploy, and easy to expand

This is the first time I've used this kind of software. It was the only one we could apply to analyze with MISRA rules. At my new company, I tried to use Klocwork. I tried to use it, just once so I cannot compare it exactly with CodeSonar. I also have a plugin for my Visual Studio and I try to make it work. It's not easy, however, I don't think that we have this kind of functionality with CodeSonar. It can do some incremental analysis. However, since this feature is also available on CodeSonar, it would be a good idea to have a plugin on Visual Studio just to have a quick analysis.

Read full review

Ney Roman

DevOps Engineer at Deuna App

Facilitates efficient secret management and improves development processes

Regarding the exceptions in GitGuardian Platform, we know that within the platform we have a way to accept a path or a directory from a repository, but it is not that visible at the very beginning. You have to figure out where to search for it, and once you have it, it is really good, but it is not that visible at the beginning. This should be made more exposed. The documentation could be better because it was not that comprehensively documented. When we started working with GitGuardian Platform, it was difficult to find some specific use cases, and we were not aware of that. It might have improved now, but at that time, it was not something we would recommend.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"CodeSonar’s most valuable feature is finding security threats."

"It has been able to scale."

"The most valuable feature of CodeSonar is the catching of dead code. It is helpful."

"The tool is very good for detecting memory leaks."

"What I like best about CodeSonar is that it has fantastic speed, analysis and configuration times. Its detection of all runtime errors is also very good, though there were times it missed a few. The configuration of logs by CodeSonar is also very fantastic which I've not seen anywhere else. I also like the GUI interface of CodeSonar because it's very user friendly and the tool also shows very precise logs and results."

"There is nice functionality for code surfing and browsing."

"The most valuable features of CodeSonar were all the categorized classes provided, and reports of future bugs which might occur in the production code. Additionally, I found the buffer overflow and underflow useful."

"The secrets detection and alerting is the most important feature. We get alerted almost immediately after someone commits a secret. It has been very accurate, allowing us to jump on it right away, then figure out if we have something substantial that has been leaked or whether it is something that we don't have to worry about. This general main feature of the app is great."

"GitGuardian has also helped us develop a security-minded culture. We're serious about shift left and getting better about code security. I think a lot of people are getting more mindful about what a secret is."

"It's fantastic. We have checked a couple of other vendors and seen their results, which are quite inferior to the amount of detail that the GitGuardian Platform provides. With instantaneous notifications connected to our Slack platform, it allows us to deal quickly with incidents."

"It enables us to identify leaks that happened in the past and remediate current leaks as they happen in near real-time. When I say "near real-time," I mean within minutes. These are industry-leading remediation timelines for credential leaks. Previously, it might have taken companies years to get credentials detected or remediated. We can do it in minutes."

"The entire GitGuardian solution is valuable. The product is doing its job and showing us many things. We get many false positives, but the ability to automatically display potential leaks when developers commit is valuable. The dashboards show you recent and historical commits, and we have a full scan that shows historical leaked secrets."

"The most valuable feature is its ability to automate both downloading the repository and generating a Software Bill of Materials directly from it."

"GitGuardian has many features that fit our use cases. We have our internal policies on secret exposure, and our code is hosted on GitLab, so we need to prevent secrets from reaching GitLab because our customers worry that GitLab is exposed. One of the great features is the pre-receive hook. It prevents commits from being pushed to the repository by activating the hook on the remotes, which stops the developers from pushing to the remote. The secrets don't reach GitLab, and it isn't exposed."

"The most valuable feature of GitGuardian is that it finds tokens and passwords. That's why we need this tool. It minimizes the possibility of security violations that we cannot find on our own."

More GitGuardian Platform pros

Cons

"In a future release, the solution should upgrade itself to the current trends and differentiate between the languages. If there are any classifications that can be set for these programming languages that would be helpful rather than having everything in the generic category."

"In terms of areas for improvement, the use case for CodeSonar was good, but compared to other tools, it seems CodeSonar isn't a sound static analysis tool, and this is a major con I've seen from it. Right now, in the market, people prefer sound static analysis tools, so I would have preferred if CodeSonar was developed into a sound static analysis tool formally, in terms of its algorithms, so then you can see it extensively used in the market because at the moment, here in India, only fifty to sixty customers use CodeSonar. If the product is developed into a sound static analysis tool, it could compete with Polyspace, and from its current fifty customers, that number could go up to a hundred."

"There could be a shared licensing model for the users."

"CodeSonar could improve by having better coding rules so we did not have to use another solution, such as MISRA C."

"It was expensive."

"The scanning tool for core architecture could be improved."

"It would be beneficial for the solution to include code standards and additional functionality for security."

"It took us a while to get new patterns introduced into the pattern reporting process."

"For some repositories, there are a lot of incidents. For example, one repository says 255 occurrences, so I assume these are 255 alerts and nobody is doing anything about them. These could be false positives. However, I cannot assess it correctly, because I haven't been closing these false positives myself. From the dashboard, I can see that for some of the repositories, there have been a lot of closing of these occurrences, so I would assume there are a lot of false positives. A ballpark estimate would be 60% being false positives. One of the arguments from the developers against this tool is the number of false positives."

"The documentation could be improved because when we started working with GitGuardian, it was difficult to find specific use cases."

"The analytics in GitGuardian Platform have a significant opportunity to better reflect the value provided to security teams and demonstrate actual activity occurring."

"An area for improvement is the front end for incidents. The user experience in this area could be much better."

"There are some features that are lacking in GitGuardian. The more we grow and the more engineers we have, the more it will become difficult to assign an incident because the assignment is not automatic. I know they are working on that and we are waiting for it."

"One of our current challenges is that the GitGuardian platform identifies encrypted secrets and statements as sensitive information even though they're secured."

"It would be nice if they supported detecting PII or had some kind of data loss prevention feature."

More GitGuardian Platform cons

Pricing and Cost Advice

"Pricing is a bit costly."

"The application’s pricing is high compared to other tools."

"Our organization purchased a license to use the solution."

"The solution's price depends on the number of licenses needed and the source code for the project."

"It's a little bit expensive."

"You get what you pay for. It's one of the more expensive solutions, but it is very good, and the low false positive rate is a really appealing factor."

"The internal side is cheap per user. It is annual pricing based on the number of users."

"We have seen a return on investment. The amount of time that we would have spent manually doing this definitely outpaces the cost of GitGuardian. It is saving us about $35,000 a year, so I would say the ROI is about $20,000 a year."

"GitGuardian is on the pricier side."

"We don't have a huge number of users, but its yearly rate was quite reasonable when compared to other per-seat solutions that we looked at... Having a free plan for a small number of users was really great. If you're a small team, I don't see why you wouldn't want to get started with it."

"It's competitively priced compared to others. Overall, the secret detection sector is expensive, but we are very happy with the value we get."

"With GitGuardian, we didn't need any middlemen."

More GitGuardian Platform pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

860,168 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

23%

Computer Software Company

12%

University

10%

Financial Services Firm

Computer Software Company

22%

Government

16%

Media Company

Financial Services Firm

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about CodeSonar?

CodeSonar’s most valuable feature is finding security threats.

See all answers

What is your experience regarding pricing and costs for CodeSonar?

The application’s pricing is high compared to other tools. I rate its pricing a four out of ten.

See all answers

What needs improvement with CodeSonar?

Our license model allows one user per license. Currently, we have limitations for VPN profiles. We can’t share the key with other users. There could be a shared licensing model for the users. It wi...

See all answers

What do you like most about GitGuardian Internal Monitoring ?

It's also worth mentioning that GitGuardian is unique because they have a free tier that we've been using for the first twelve months. It provides full functionality for smaller teams. We're a smal...

See all answers

What is your experience regarding pricing and costs for GitGuardian Internal Monitoring ?

It's competitively priced compared to others. Overall, the secret detection sector is expensive, but we are happy with the value we get.

See all answers

What needs improvement with GitGuardian Internal Monitoring ?

GitGuardian Platform does what it is designed to do, but it still generates many false positives. We utilize the automated playbooks from GitGuardian Platform, and we are enhancing them. We will pr...

See all answers

Comparisons

SonarQube Server (formerly SonarQube) vs CodeSonar

Compared 55% of the time

Coverity vs CodeSonar

Compared 23% of the time

Polyspace Code Prover vs CodeSonar

Compared 7% of the time

Axivion Static Code Analysis vs CodeSonar

Compared 3% of the time

Understand vs CodeSonar

Compared 3% of the time

More CodeSonar Competitors

SonarQube Server (formerly SonarQube) vs GitGuardian Platform

Compared 24% of the time

Snyk vs GitGuardian Platform

Compared 18% of the time

GitGuardian Public Monitoring vs GitGuardian Platform

Compared 16% of the time

GitHub Advanced Security vs GitGuardian Platform

Compared 13% of the time

Cycode vs GitGuardian Platform

Compared 8% of the time

More GitGuardian Platform Competitors

Product Reports

Buyer's Guide

Application Security Tools

June 2025

Download CodeSonar product report

Buyer's Guide

GitGuardian Platform

June 2025

Download GitGuardian Platform product report

Also Known As

No data available

GitGuardian Internal Monitoring

Overview

GrammaTech enables organizations to develop software applications more efficiently, on-budget, and on-schedule by helping to eliminate harmful defects that can cause system failures, enable data breaches, and ultimately increase corporate liabilities in today’s connected world. GrammaTech is the developer of CodeSonar, the most powerful source and binary code analysis solution available today. Extraordinarily precise, CodeSonar finds, on average, 2 times more serious defects in software than other static analysis solutions. Designed for organizations with zero tolerance for defects and vulnerabilities in their applications, CodeSonar provides static analysis for applications where reliability and security are paramount - widely used by software developers in avionics, medical, automotive, industrial control, and other mission-critical applications. Some of GrammaTech's customers include Toyota, GE, Hyundai, Kawasaki, LG, Lockheed Martin, NASA, Northrop Grumman, Panasonic, and Samsung.

CodeSecure

GitGuardian helps organizations detect and fix vulnerabilities in source code at every step of the software development lifecycle. With GitGuardian’s policy engine, security teams can monitor and enforce rules across their VCS, DevOps tools, and infrastructure-as-code configurations.

Widely adopted by developer communities, GitGuardian is used by more than 500,000 developers and is the #1 app in the security category on the GitHub Marketplace. GitGuardian is also trusted by leading companies, including Instacart, Genesys, Orange, Iress, Beyond Identity, NOW: Pensions, and Stedi.

GitGuardian Platform includes automated secrets detection and remediation. By reducing the risks of secrets exposure across the SDLC, GitGuardian helps software-driven organizations strengthen their security posture and comply with frameworks and standards.

Its detection engine is trained against more than a billion public GitHub commits every year, and it covers 350+ types of secrets such as API keys, database connection strings, private keys, certificates, and more.

GitGuardian brings security and development teams together with automated remediation playbooks and collaboration features to resolve incidents fast and in full. By pulling developers closer to the remediation process, organizations can achieve higher incident closing rates and shorter fix times.

The platform integrates across the DevOps toolchain, including native support for continuously scanning VCS platforms like GitHub, Gitlab, Azure DevOps and Bitbucket or CI/CD tools like Jenkins, CircleCI, Travis CI, GitLab pipelines, and many more. It also integrates with ticketing and messaging systems like Splunk, PagerDuty, Jira and Slack to support teams with their incident remediation workflows. GitGuardian is offered as a SaaS platform but can also be hosted on-premise for organizations operating in highly regulated industries or with strict data privacy requirements.

GitGuardian

Sample Customers

Viveris, Micrel Medical Devices, Olympus, SOFTEQ, SONY

Automox, 66degrees (ex Cloudbakers), Iress, Now:Pensions, Payfit, Orange, BouyguesTelecom, Seequent, Stedi, Talend, Snowflake...

Buyer's Guide

CodeSonar vs. GitGuardian Platform

June 2025

Free Report: CodeSonar vs. GitGuardian Platform

Find out what your peers are saying about CodeSonar vs. GitGuardian Platform and other solutions. Updated: June 2025.

DOWNLOAD NOW

860,168 professionals have used our research since 2012.

See our CodeSonar vs. GitGuardian Platform report.

See our list of best Application Security Tools vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.