CodeSonar vs GitHub comparison

Read 93 GitHub reviews

2,347 Views
1,098 Comparison Views

100% willing to recommend

CodeSonar

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 6, 2025

GitHub and CodeSonar both operate in the software development tools category. Based on the comparisons, GitHub seems to hold the advantage due to its focus on integration, flexibility, and community support, whereas CodeSonar excels in security and code analysis.

Features: GitHub provides a wide range of features for collaborative development including community support for open-source projects, advanced security, and integration with DevOps tools. It also excels in code versioning and provides a platform for developers to manage, review, and collaborate on code projects. CodeSonar is particularly beneficial for detecting runtime errors, with features like dead code detection and comprehensive logging capabilities, offering in-depth code analysis to enhance security and code quality.

Room for Improvement: GitHub users suggest improvements in integration with project management and CI/CD tools, and enhancements in performance with large files. User interface improvements are also requested. CodeSonar could improve by supporting more programming languages and enhancing static analysis capabilities for broader competition with alternatives like Polyspace. Both could refine user experience and streamline deployment processes.

Ease of Deployment and Customer Service: GitHub primarily operates in the public cloud, making it flexible for cloud, hybrid, and on-premises environments. It benefits from a large support community which complements its satisfactory customer support. CodeSonar offers both cloud and on-premises solutions and is known for strong technical support, though experiences vary. GitHub's community strength contrasts with CodeSonar’s personalized support.

Pricing and ROI: GitHub’s free version for public repositories makes it economical for many, with a user-centric licensing model offering cost-effective solutions for teams. In contrast, CodeSonar's pricing is higher but justified by its advanced analysis capabilities. GitHub's ROI is found in its low-cost usage and efficient code management, while CodeSonar provides returns through enhanced security and reliability despite a higher cost.

To learn more, read our detailed CodeSonar vs. GitHub Report (Updated: April 2025).

CodeSonar vs. GitHub

Download the complete report

Helped 850,236 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CodeSonar

Ranking in Application Security Tools

34th

Average Rating

8.2

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Static Code Analysis (8th)

GitHub

Ranking in Application Security Tools

6th

Average Rating

8.8

Reviews Sentiment

7.5

Number of Reviews

Ranking in other categories

Version Control (3rd)

Mindshare comparison

As of May 2025, in the Application Security Tools category, the mindshare of CodeSonar is 1.5%, up from 0.9% compared to the previous year. The mindshare of GitHub is 0.8%, down from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Mathieu ALBRESPY

Intigration Developer at ez-Wheel

Nice interface, quick to deploy, and easy to expand

This is the first time I've used this kind of software. It was the only one we could apply to analyze with MISRA rules. At my new company, I tried to use Klocwork. I tried to use it, just once so I cannot compare it exactly with CodeSonar. I also have a plugin for my Visual Studio and I try to make it work. It's not easy, however, I don't think that we have this kind of functionality with CodeSonar. It can do some incremental analysis. However, since this feature is also available on CodeSonar, it would be a good idea to have a plugin on Visual Studio just to have a quick analysis.

Read full review

Pervez Roy

Solutions Architect at Small Systems LTD

Very good for collaboration on software projects

We use GitHub for code repository alongside Bitbucket GitHub is very good for collaboration on software projects. We prefer Bitbucket for commercial use, while GitHub is used for open source. You can get the differences, history of changes, and version control for various pull requests. You can…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"What I like best about CodeSonar is that it has fantastic speed, analysis and configuration times. Its detection of all runtime errors is also very good, though there were times it missed a few. The configuration of logs by CodeSonar is also very fantastic which I've not seen anywhere else. I also like the GUI interface of CodeSonar because it's very user friendly and the tool also shows very precise logs and results."

"The most valuable feature of CodeSonar is the catching of dead code. It is helpful."

"The most valuable features of CodeSonar were all the categorized classes provided, and reports of future bugs which might occur in the production code. Additionally, I found the buffer overflow and underflow useful."

"CodeSonar’s most valuable feature is finding security threats."

"It has been able to scale."

"There is nice functionality for code surfing and browsing."

"The tool is very good for detecting memory leaks."

"I have found GitHub stable."

"The most valuable features of GitHub are the ease of integration into Microsoft Azure DevOps. The process that you need to deploy into Microsoft Azure becomes fairly simple and the templates are already available, a lot of the engineers find it easier to use."

"GitHub is pure or open-source; you can access it anywhere. You can have a lot of collateral information. You can make the changes and do the reviews from one place."

"The product helps our team collaborate across different locations."

"You can write the code with AI. But when it comes to implementation, you must upgrade the bits of code that will support this and generate solutions based on that architecture. Then, you need comparable code bits. Therefore, AI can propose how much a specific function can be better optimized. So, AI can help stakeholders reach tasks quicker."

"The solution can scale."

"GitHub's merging feature is much better than that of other products because merging is done daily."

"The learning curve is small."

More GitHub pros

Cons

"In terms of areas for improvement, the use case for CodeSonar was good, but compared to other tools, it seems CodeSonar isn't a sound static analysis tool, and this is a major con I've seen from it. Right now, in the market, people prefer sound static analysis tools, so I would have preferred if CodeSonar was developed into a sound static analysis tool formally, in terms of its algorithms, so then you can see it extensively used in the market because at the moment, here in India, only fifty to sixty customers use CodeSonar. If the product is developed into a sound static analysis tool, it could compete with Polyspace, and from its current fifty customers, that number could go up to a hundred."

"In a future release, the solution should upgrade itself to the current trends and differentiate between the languages. If there are any classifications that can be set for these programming languages that would be helpful rather than having everything in the generic category."

"It was expensive."

"CodeSonar could improve by having better coding rules so we did not have to use another solution, such as MISRA C."

"There could be a shared licensing model for the users."

"The scanning tool for core architecture could be improved."

"It would be beneficial for the solution to include code standards and additional functionality for security."

"Specifically, I want the solution to offer AI-based merging support, as it is the only area where the product has certain shortcomings."

"There can be conflict issues when two developers work on the same file or line of code, and it would be great to see that improved, possibly with an AI solution."

"From the recruiting standpoint, I would like to see email IDs and phone numbers and a brief introduction about their profile."

"One thing GitHub could do is probably the same thing as what Sourcetree does. When solving merge conflicts, it would be helpful to have tooltips within the actions to know what changes could happen next when resolving a conflict."

"The solution's cost is high and should be reduced."

"Regarding improvements, I preferred the tool's earlier pricing model, which limited storage and the number of repositories instead of the number of users, which was more convenient from a customer perspective. I've also experienced issues with GitHub servers being unable to support moving repositories, which caused problems. For basic plans, no support was available to help resolve these issues. I think GitHub should provide more support for smaller businesses to help with these problems."

"I would like to see integration with Slack such that all of the changes made in GitHub are reflected there."

"The solution should have less integration with the AI part, but it needs to add features with other automation tools so that it can be easily integrated."

More GitHub cons

Pricing and Cost Advice

"The application’s pricing is high compared to other tools."

"Our organization purchased a license to use the solution."

"Pricing is a bit costly."

"The solution's price depends on the number of licenses needed and the source code for the project."

"The tool offers a free program. As you go, you can upgrade from the community version to the professional one. I believe it costs about ten dollars per person, per month."

"The private repositories are free, which is very good."

"I am using the free version of the solution. However, there are some costs my organization pays."

"Regarding pricing, I'd rate it eight out of ten. It's decent and not too expensive, and small businesses can also afford it. With AWS taking CodeCommit out of the market, I don't see many competitors for small companies in terms of GitHub."

"The licensing model from GitHub is very clear."

"It is open-source. There is no license for GitHub."

"I use the free version of the tool."

"My company purchased it. Before, we used to receive the free version, but then they purchased some of the features."

More GitHub pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

850,236 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

25%

Computer Software Company

13%

University

Financial Services Firm

13%

Computer Software Company

12%

Manufacturing Company

12%

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about CodeSonar?

CodeSonar’s most valuable feature is finding security threats.

What is your experience regarding pricing and costs for CodeSonar?

The application’s pricing is high compared to other tools. I rate its pricing a four out of ten.

What needs improvement with CodeSonar?

Our license model allows one user per license. Currently, we have limitations for VPN profiles. We can’t share the key with other users. There could be a shared licensing model for the users. It wi...

What do you like most about GitHub?

The control is the most valuable feature as developers can work on a single code.

What is your experience regarding pricing and costs for GitHub?

The pricing of GitHub depends on the choice of solutions, such as building one's own GitHub Runners to save money or using GitHub's Runners with extra costs. The pricing is considered reasonable an...

What needs improvement with GitHub?

There are still areas for improvement with GitHub Actions and their deployment workflows, as they have made significant progress but are not yet polished. Occasionally, stability can be an issue, t...

SonarQube Server (formerly SonarQube) vs CodeSonar

Comparisons

Compared 60% of the time

Coverity vs CodeSonar

Compared 21% of the time

Polyspace Code Prover vs CodeSonar

Compared 8% of the time

Klocwork vs CodeSonar

Compared 3% of the time

Understand vs CodeSonar

Compared 3% of the time

More CodeSonar Competitors

Bitbucket vs GitHub

Compared 17% of the time

Fortify on Demand vs GitHub

Compared 13% of the time

Snyk vs GitHub

Compared 13% of the time

AWS CodeCommit vs GitHub

Compared 10% of the time

Checkmarx One vs GitHub

Compared 8% of the time

More GitHub Competitors

Product Reports

Application Security Tools

Download CodeSonar product report

Download GitHub product report

Overview

GrammaTech enables organizations to develop software applications more efficiently, on-budget, and on-schedule by helping to eliminate harmful defects that can cause system failures, enable data breaches, and ultimately increase corporate liabilities in today’s connected world. GrammaTech is the developer of CodeSonar, the most powerful source and binary code analysis solution available today. Extraordinarily precise, CodeSonar finds, on average, 2 times more serious defects in software than other static analysis solutions. Designed for organizations with zero tolerance for defects and vulnerabilities in their applications, CodeSonar provides static analysis for applications where reliability and security are paramount - widely used by software developers in avionics, medical, automotive, industrial control, and other mission-critical applications. Some of GrammaTech's customers include Toyota, GE, Hyundai, Kawasaki, LG, Lockheed Martin, NASA, Northrop Grumman, Panasonic, and Samsung.

CodeSecure

GitHub is a web-based Git repository hosting service. It offers all of the distributed revision control and source code management (SCM) functionality of Git as well as adding its own features. Unlike Git, which is strictly a command-line tool, GitHub provides a Web-based graphical interface and desktop as well as mobile integration. It also provides access control and several collaboration features such as bug tracking, feature requests, task management, and wikis for every project.

Sample Customers

Viveris, Micrel Medical Devices, Olympus, SOFTEQ, SONY

Dominion Enterprises, NASA, Braintree, SAP, CyberAgent

CodeSonar vs. GitHub