CodeSonar vs GitLab comparison

Read 85 GitLab reviews

3,135 Views
2,310 Comparison Views

97% willing to recommend

CodeSonar

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

GitLab and CodeSonar compete in the software development category. GitLab generally holds the upper hand due to its ease of integration and comprehensive tool suite, while CodeSonar is preferred for its powerful static analysis capabilities.

Features: GitLab integrates CI/CD pipelines, version control, and has strong community support, making it ideal for collaborative environments. CodeSonar offers advanced static analysis and identifies complex programming defects, focusing on in-depth code analysis.

Room for Improvement: GitLab could enhance performance in large repositories, streamline permissions management, and improve overall speed. CodeSonar could be more user-friendly, offer comprehensive documentation, and enhance accessibility for broader users.

Ease of Deployment and Customer Service: GitLab is praised for seamless cloud-based deployment and strong customer service. CodeSonar has a complex deployment process but offers reliable support for users who manage to set it up effectively.

Pricing and ROI: GitLab offers competitive pricing with satisfactory ROI for teams of various sizes. CodeSonar, while priced higher, delivers ROI tied to its feature set, catering to users prioritizing advanced code safety.

To learn more, read our detailed CodeSonar vs. GitLab Report (Updated: June 2025).

CodeSonar vs. GitLab

Download the complete report

Helped 860,592 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CodeSonar

Ranking in Application Security Tools

32nd

Average Rating

8.2

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

Static Code Analysis (10th)

GitLab

Ranking in Application Security Tools

10th

Average Rating

8.4

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Build Automation (1st), Release Automation (2nd), Static Application Security Testing (SAST) (7th), Rapid Application Development Software (11th), Software Composition Analysis (SCA) (5th), Enterprise Agile Planning Tools (2nd), Fuzz Testing Tools (2nd), DevSecOps (1st)

Mindshare comparison

As of July 2025, in the Application Security Tools category, the mindshare of CodeSonar is 1.5%, up from 1.0% compared to the previous year. The mindshare of GitLab is 2.7%, down from 2.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Application Security Tools

Featured Reviews

Mathieu ALBRESPY

Intigration Developer at ez-Wheel

Nice interface, quick to deploy, and easy to expand

This is the first time I've used this kind of software. It was the only one we could apply to analyze with MISRA rules. At my new company, I tried to use Klocwork. I tried to use it, just once so I cannot compare it exactly with CodeSonar. I also have a plugin for my Visual Studio and I try to make it work. It's not easy, however, I don't think that we have this kind of functionality with CodeSonar. It can do some incremental analysis. However, since this feature is also available on CodeSonar, it would be a good idea to have a plugin on Visual Studio just to have a quick analysis.

Read full review

Rohit Kesharwani

Manager, Engineering at 7-Eleven

Improved agility and time to market with CI/CD enhancements

The CI/CD pipelines in GitLab ( /products/gitlab-reviews ) are highly valuable. Another important feature is the single source of repository, allowing efficient repository management and source code management. GitLab provides manageability by allowing us to manage source code effectively through separate repositories. Additionally, GitLab enables the creation of individual CI/CD pipelines for each repository, making software more agile. By integrating GitLab as a DevOps platform, we have enhanced agility, improved our time to market, and different teams can work collaboratively on various projects.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"CodeSonar’s most valuable feature is finding security threats."

"It has been able to scale."

"There is nice functionality for code surfing and browsing."

"The most valuable feature of CodeSonar is the catching of dead code. It is helpful."

"What I like best about CodeSonar is that it has fantastic speed, analysis and configuration times. Its detection of all runtime errors is also very good, though there were times it missed a few. The configuration of logs by CodeSonar is also very fantastic which I've not seen anywhere else. I also like the GUI interface of CodeSonar because it's very user friendly and the tool also shows very precise logs and results."

"The tool is very good for detecting memory leaks."

"The most valuable features of CodeSonar were all the categorized classes provided, and reports of future bugs which might occur in the production code. Additionally, I found the buffer overflow and underflow useful."

"It is scalable."

"It streamlines our DevOps processes with automated CI/CD pipelines."

"The best thing is that as the developers work on separate tasks, all of the code goes there and the other team members don't have to wait on each other to finish."

"GitLab's best features are continuous integration and fast deployment."

"The merging feature makes it easy later on for the deployment."

"GitLab is being used as a repository for our codebase and it is a one stop DevOps tool we use in our team."

"GitLab offers a good interface for doing code reviews between two colleagues."

"GitLab's source control is excellent."

More GitLab pros

Cons

"It would be beneficial for the solution to include code standards and additional functionality for security."

"There could be a shared licensing model for the users."

"It was expensive."

"In terms of areas for improvement, the use case for CodeSonar was good, but compared to other tools, it seems CodeSonar isn't a sound static analysis tool, and this is a major con I've seen from it. Right now, in the market, people prefer sound static analysis tools, so I would have preferred if CodeSonar was developed into a sound static analysis tool formally, in terms of its algorithms, so then you can see it extensively used in the market because at the moment, here in India, only fifty to sixty customers use CodeSonar. If the product is developed into a sound static analysis tool, it could compete with Polyspace, and from its current fifty customers, that number could go up to a hundred."

"CodeSonar could improve by having better coding rules so we did not have to use another solution, such as MISRA C."

"The scanning tool for core architecture could be improved."

"In a future release, the solution should upgrade itself to the current trends and differentiate between the languages. If there are any classifications that can be set for these programming languages that would be helpful rather than having everything in the generic category."

"Some of the scripts that we encountered in GitLab were not fully functional and threw up errors."

"GitLab should work on improving their user interface for GitOps as it is lagging behind."

"The solution could improve by providing more integration into the CI/CD pipeline, an autocomplete search tool, and more supporting documentation."

"You need to have a good knowledge of the product in order to use it."

"I would like to see better integration with project management tools such as Jira."

"I rate the support from GitLab a four out of five."

"GitLab can improve by integrating with more tools, such as servers with Docker."

"There are missing search features, particularly when searching repositories or applying filters. Additionally, I have encountered issues with the deployment of CI/CD pipelines, especially dealing with variable environments."

More GitLab cons

Pricing and Cost Advice

"Pricing is a bit costly."

"The solution's price depends on the number of licenses needed and the source code for the project."

"Our organization purchased a license to use the solution."

"The application’s pricing is high compared to other tools."

"GitLab is cheap."

"The solution's standard license is paid annually. They have changed the pricing model and it used to be better. There is a free version available."

"We are using the open-source version."

"In terms of the pricing for GitLab, on a scale of one to five, with one being expensive and five being cheap, I'm rating pricing for the solution a four. It could still be cheaper because right now, my company has a small team, and sometimes it's difficult to use a paid product for a small team. You'd hope the team will grow and scale, but currently, you're paying a high license fee for a small team. I'm referring to the GitLab license that has premium features and will give you all features. This can be a problem for management to approve the high price of the license for a team this small."

"GitLab is comparatively expensive, but it provides value because it's feature-rich."

"The solution is free."

"I think that we pay approximately $100 USD per month."

"The solution is based on a licensing model that includes technical support and is paid annually."

More GitLab pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

860,592 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

23%

Computer Software Company

12%

University

10%

Financial Services Firm

13%

Computer Software Company

13%

Educational Organization

12%

Government

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What do you like most about CodeSonar?

CodeSonar’s most valuable feature is finding security threats.

What is your experience regarding pricing and costs for CodeSonar?

The application’s pricing is high compared to other tools. I rate its pricing a four out of ten.

What needs improvement with CodeSonar?

Our license model allows one user per license. Currently, we have limitations for VPN profiles. We can’t share the key with other users. There could be a shared licensing model for the users. It wi...

What do you like most about GitLab?

I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.

What is your experience regarding pricing and costs for GitLab?

The pricing and cost are on par with other tools and are neither too expensive nor cheap.

What needs improvement with GitLab?

One significant feature we lack is the configuration that enforces code reviews, which simplifies the development life cycle. Unfortunately, this is available only at a higher license level than we...

SonarQube Server (formerly SonarQube) vs CodeSonar

Comparisons

Compared 55% of the time

Coverity vs CodeSonar

Compared 23% of the time

Polyspace Code Prover vs CodeSonar

Compared 7% of the time

Axivion Static Code Analysis vs CodeSonar

Compared 3% of the time

Understand vs CodeSonar

Compared 3% of the time

More CodeSonar Competitors

Microsoft Azure DevOps vs GitLab

Compared 24% of the time

GitHub CoPilot vs GitLab

Compared 16% of the time

SonarQube Server (formerly SonarQube) vs GitLab

Compared 6% of the time

TeamCity vs GitLab

Compared 5% of the time

Tekton vs GitLab

Compared 5% of the time

More GitLab Competitors

Product Reports

Application Security Tools

Download CodeSonar product report

Download GitLab product report

Also Known As

No data available

Fuzzit

Overview

GrammaTech enables organizations to develop software applications more efficiently, on-budget, and on-schedule by helping to eliminate harmful defects that can cause system failures, enable data breaches, and ultimately increase corporate liabilities in today’s connected world. GrammaTech is the developer of CodeSonar, the most powerful source and binary code analysis solution available today. Extraordinarily precise, CodeSonar finds, on average, 2 times more serious defects in software than other static analysis solutions. Designed for organizations with zero tolerance for defects and vulnerabilities in their applications, CodeSonar provides static analysis for applications where reliability and security are paramount - widely used by software developers in avionics, medical, automotive, industrial control, and other mission-critical applications. Some of GrammaTech's customers include Toyota, GE, Hyundai, Kawasaki, LG, Lockheed Martin, NASA, Northrop Grumman, Panasonic, and Samsung.

CodeSecure

GitLab is a complete DevOps platform that enables teams to collaborate and deliver software faster.

It provides a single application for the entire DevOps lifecycle, from planning and development to testing, deployment, and monitoring.

With GitLab, teams can streamline their workflows, automate processes, and improve productivity.

Sample Customers

Viveris, Micrel Medical Devices, Olympus, SOFTEQ, SONY

1. NASA 2. IBM 3. Sony 4. Alibaba 5. CERN 6. Siemens 7. Volkswagen 8. ING 9. Ticketmaster 10. SpaceX 11. Adobe 12. Intuit 13. Autodesk 14. Rakuten 15. Unity Technologies 16. Pandora 17. Electronic Arts 18. Nordstrom 19. Verizon 20. Comcast 21. Philips 22. Deutsche Telekom 23. Orange 24. Fujitsu 25. Ericsson 26. Nokia 27. General Electric 28. Cisco 29. Accenture 30. Deloitte 31. PwC 32. KPMG

CodeSonar vs. GitLab