CodeSonar vs GitHub comparison

Read 94 GitHub reviews

2,247 Views
920 Comparison Views

100% willing to recommend

CodeSonar

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 6, 2025

GitHub and CodeSonar both operate in the software development tools category. Based on the comparisons, GitHub seems to hold the advantage due to its focus on integration, flexibility, and community support, whereas CodeSonar excels in security and code analysis.

Features: GitHub provides a wide range of features for collaborative development including community support for open-source projects, advanced security, and integration with DevOps tools. It also excels in code versioning and provides a platform for developers to manage, review, and collaborate on code projects. CodeSonar is particularly beneficial for detecting runtime errors, with features like dead code detection and comprehensive logging capabilities, offering in-depth code analysis to enhance security and code quality.

Room for Improvement: GitHub users suggest improvements in integration with project management and CI/CD tools, and enhancements in performance with large files. User interface improvements are also requested. CodeSonar could improve by supporting more programming languages and enhancing static analysis capabilities for broader competition with alternatives like Polyspace. Both could refine user experience and streamline deployment processes.

Ease of Deployment and Customer Service: GitHub primarily operates in the public cloud, making it flexible for cloud, hybrid, and on-premises environments. It benefits from a large support community which complements its satisfactory customer support. CodeSonar offers both cloud and on-premises solutions and is known for strong technical support, though experiences vary. GitHub's community strength contrasts with CodeSonar’s personalized support.

Pricing and ROI: GitHub’s free version for public repositories makes it economical for many, with a user-centric licensing model offering cost-effective solutions for teams. In contrast, CodeSonar's pricing is higher but justified by its advanced analysis capabilities. GitHub's ROI is found in its low-cost usage and efficient code management, while CodeSonar provides returns through enhanced security and reliability despite a higher cost.

To learn more, read our detailed CodeSonar vs. GitHub Report (Updated: June 2025).

CodeSonar vs. GitHub

Download the complete report

Helped 860,168 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CodeSonar

Ranking in Application Security Tools

32nd

Average Rating

8.2

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Static Code Analysis (10th)

GitHub

Ranking in Application Security Tools

7th

Average Rating

8.8

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

Version Control (3rd)

Mindshare comparison

As of July 2025, in the Application Security Tools category, the mindshare of CodeSonar is 1.5%, up from 1.0% compared to the previous year. The mindshare of GitHub is 0.9%, down from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Mathieu ALBRESPY

Intigration Developer at ez-Wheel

Nice interface, quick to deploy, and easy to expand

This is the first time I've used this kind of software. It was the only one we could apply to analyze with MISRA rules. At my new company, I tried to use Klocwork. I tried to use it, just once so I cannot compare it exactly with CodeSonar. I also have a plugin for my Visual Studio and I try to make it work. It's not easy, however, I don't think that we have this kind of functionality with CodeSonar. It can do some incremental analysis. However, since this feature is also available on CodeSonar, it would be a good idea to have a plugin on Visual Studio just to have a quick analysis.

Read full review

Pervez Roy

Solutions Architect at Small Systems LTD

Very good for collaboration on software projects

We use GitHub for code repository alongside Bitbucket GitHub is very good for collaboration on software projects. We prefer Bitbucket for commercial use, while GitHub is used for open source. You can get the differences, history of changes, and version control for various pull requests. You can…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The tool is very good for detecting memory leaks."

"The most valuable features of CodeSonar were all the categorized classes provided, and reports of future bugs which might occur in the production code. Additionally, I found the buffer overflow and underflow useful."

"What I like best about CodeSonar is that it has fantastic speed, analysis and configuration times. Its detection of all runtime errors is also very good, though there were times it missed a few. The configuration of logs by CodeSonar is also very fantastic which I've not seen anywhere else. I also like the GUI interface of CodeSonar because it's very user friendly and the tool also shows very precise logs and results."

"CodeSonar’s most valuable feature is finding security threats."

"There is nice functionality for code surfing and browsing."

"The most valuable feature of CodeSonar is the catching of dead code. It is helpful."

"It has been able to scale."

"The version control functionality for this solution has been most valuable, especially when managing projects with multiple versions."

"Our code is secure."

"The product has a very user-friendly interface and user-friendly security."

"There are no issues. It's simple, easy, and fully compatible from my perspective with Git."

"The support team is good."

"The most valuable feature of the solution is the version control field."

"The most valuable features of GitHub include its ability to integrate with Jira and multiple CI/CD platforms like Techton, allowing for seamless project management."

"The technical support of the solution is good, and our company has used it for GitHub upgrades."

More GitHub pros

Cons

"CodeSonar could improve by having better coding rules so we did not have to use another solution, such as MISRA C."

"It was expensive."

"In a future release, the solution should upgrade itself to the current trends and differentiate between the languages. If there are any classifications that can be set for these programming languages that would be helpful rather than having everything in the generic category."

"In terms of areas for improvement, the use case for CodeSonar was good, but compared to other tools, it seems CodeSonar isn't a sound static analysis tool, and this is a major con I've seen from it. Right now, in the market, people prefer sound static analysis tools, so I would have preferred if CodeSonar was developed into a sound static analysis tool formally, in terms of its algorithms, so then you can see it extensively used in the market because at the moment, here in India, only fifty to sixty customers use CodeSonar. If the product is developed into a sound static analysis tool, it could compete with Polyspace, and from its current fifty customers, that number could go up to a hundred."

"The scanning tool for core architecture could be improved."

"It would be beneficial for the solution to include code standards and additional functionality for security."

"There could be a shared licensing model for the users."

"There is a bit of a learning curve."

"GitHub could improve in resolving conflicts when multiple developers modify the same line of code."

"I would like to see more security where a plugin was available for us to update in relation to security."

"If something has to be moved into approvals, and if they don't approve it in a few hours, then they should move the approval request to some other user, or they should have a way to escalate it."

"There is room for improvement in terms of interface."

"The sign in process is a bit difficult."

"The GitHub repository needs an upgraded user interface and overall UI improvements."

"We want to incorporate management comments within GitHub, making it more like a product management tool. We haven't done that yet. Another change we're considering is migrating from GitHub to Azure DevOps, especially now that Microsoft has introduced it."

More GitHub cons

Pricing and Cost Advice

"The solution's price depends on the number of licenses needed and the source code for the project."

"Pricing is a bit costly."

"Our organization purchased a license to use the solution."

"The application’s pricing is high compared to other tools."

"We are currently paying nothing for GitHub."

"Regarding pricing, I'd rate it eight out of ten. It's decent and not too expensive, and small businesses can also afford it. With AWS taking CodeCommit out of the market, I don't see many competitors for small companies in terms of GitHub."

"The private repositories are free, which is very good."

"We pay a licensing fee for GitHub, which could be cheaper."

"We have an enterprise licensing agreement, and I am not part of the finance department so I can't say how much it costs."

"I haven't had to pay anything for GitHub, I use the free version."

"The tool offers a free program. As you go, you can upgrade from the community version to the professional one. I believe it costs about ten dollars per person, per month."

"It's cheaper than Bitbucket."

More GitHub pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

860,168 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

23%

Computer Software Company

12%

University

10%

Financial Services Firm

13%

Computer Software Company

12%

Manufacturing Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about CodeSonar?

CodeSonar’s most valuable feature is finding security threats.

What is your experience regarding pricing and costs for CodeSonar?

The application’s pricing is high compared to other tools. I rate its pricing a four out of ten.

What needs improvement with CodeSonar?

Our license model allows one user per license. Currently, we have limitations for VPN profiles. We can’t share the key with other users. There could be a shared licensing model for the users. It wi...

What do you like most about GitHub?

The control is the most valuable feature as developers can work on a single code.

What is your experience regarding pricing and costs for GitHub?

I am not aware about the pricing, so I will not be able to give feedback.

What needs improvement with GitHub?

Sometimes we do not get the exact solution, and the suggested solution does not work, so GitHub could improve in that area. We have used GitHub mainly for the code generation part. That is the only...

SonarQube Server (formerly SonarQube) vs CodeSonar

Comparisons

Compared 55% of the time

Coverity vs CodeSonar

Compared 23% of the time

Polyspace Code Prover vs CodeSonar

Compared 7% of the time

Axivion Static Code Analysis vs CodeSonar

Compared 3% of the time

Understand vs CodeSonar

Compared 3% of the time

More CodeSonar Competitors

Bitbucket vs GitHub

Compared 16% of the time

Snyk vs GitHub

Compared 12% of the time

OpenText Core Application Security vs GitHub

Compared 10% of the time

AWS CodeCommit vs GitHub

Compared 8% of the time

Atlassian SourceTree vs GitHub

Compared 7% of the time

More GitHub Competitors

Product Reports

Application Security Tools

Download CodeSonar product report

Download GitHub product report

Overview

GrammaTech enables organizations to develop software applications more efficiently, on-budget, and on-schedule by helping to eliminate harmful defects that can cause system failures, enable data breaches, and ultimately increase corporate liabilities in today’s connected world. GrammaTech is the developer of CodeSonar, the most powerful source and binary code analysis solution available today. Extraordinarily precise, CodeSonar finds, on average, 2 times more serious defects in software than other static analysis solutions. Designed for organizations with zero tolerance for defects and vulnerabilities in their applications, CodeSonar provides static analysis for applications where reliability and security are paramount - widely used by software developers in avionics, medical, automotive, industrial control, and other mission-critical applications. Some of GrammaTech's customers include Toyota, GE, Hyundai, Kawasaki, LG, Lockheed Martin, NASA, Northrop Grumman, Panasonic, and Samsung.

CodeSecure

GitHub is a web-based Git repository hosting service. It offers all of the distributed revision control and source code management (SCM) functionality of Git as well as adding its own features. Unlike Git, which is strictly a command-line tool, GitHub provides a Web-based graphical interface and desktop as well as mobile integration. It also provides access control and several collaboration features such as bug tracking, feature requests, task management, and wikis for every project.

Sample Customers

Viveris, Micrel Medical Devices, Olympus, SOFTEQ, SONY

Dominion Enterprises, NASA, Braintree, SAP, CyberAgent

CodeSonar vs. GitHub