Try our new research platform with insights from 80,000+ expert users

GitGuardian Platform vs SonarQube Cloud (formerly SonarCloud) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.1
GitGuardian Platform offers financial benefits by enhancing security, automating detection, and saving resources, with annual savings around $20,000.
Sentiment score
5.7
SonarQube Cloud enhances code understanding, integrates with CI/CD, and offers positive ROI, benefiting large projects economically.
I can certainly say that we have saved significant time and resources in terms of people and automation.
The majority of our incidents for critical detectors and important secret types are remediated automatically or proactively by developers through GitGuardian's notification system, without security team involvement.
It is easily integrable with the CI/CD pipeline and supports multiple projects with its extensive plugin options.
The product is designed for bigger clients, while smaller companies are often put aside.
 

Customer Service

Sentiment score
8.2
GitGuardian Platform's support is highly rated for responsiveness, effectiveness, and approachable communication, with scores from eight to ten.
Sentiment score
7.8
SonarQube Cloud support varies; while integration is easy, users seek better documentation and proactive technical engagement.
I would rate their technical support a nine out of ten.
I would rate the technical support as excellent.
The customer service and support for SonarQube Cloud are responsive and helpful.
Integrating it into different solutions is straightforward.
 

Scalability Issues

Sentiment score
7.8
GitGuardian Platform efficiently manages large deployments, ensuring security integration, though some users desire improvements in scalability and provisioning.
Sentiment score
6.4
SonarQube Cloud is scalable and user-friendly, suitable for diverse projects, but has some functionality limitations compared to competitors.
In terms of scalability, I would rate it around a ten out of ten, as it handles all the repositories and commit activity we have.
I would rate it a ten out of ten for scalability.
Currently, what GitGuardian Platform is doing works effectively.
There are limitations, and it seems to have fewer capabilities than Veracode.
It has been used in multiple projects and performs well.
SonarQube Cloud is a scalable product, and I rate its scalability at seven out of ten.
 

Stability Issues

Sentiment score
8.3
GitGuardian Platform is stable and reliable, with consistent performance, effective support, and minor downtime issues efficiently managed.
Sentiment score
7.9
SonarQube Cloud is stable and reliable, though improvements in user experience, documentation, and CI/CD integration are needed.
We set up a lot of the repository, so GitGuardian is a required check.
The SaaS platform has experienced two significant moments of downtime or instability in the last six months, requiring notices and retrospectives.
I would rate the stability of the GitGuardian Platform as excellent with no downtimes.
From my team's feedback, it is almost an eight out of ten.
It is a quite stable solution.
 

Room For Improvement

GitGuardian Platform needs better customization, integration, automation, reporting, access controls, mobile app, and analytics for user satisfaction.
SonarQube Cloud requires better testing, flexibility, UI, integration, and security features to enhance user experience and vulnerability detection.
Another thing that would be good to see is some more metrics on the usage of the GitGuardian pre-push hooks.
The self-healing activity by developers isn't reflected in the analytics, requiring us to collect this data ourselves.
We are looking for better metrics and audit data, wanting more features such as knowing which users are creating the most secrets or committing the most secrets, what repository, what directory, and who is not checking in secrets.
I would like to see SonarQube Cloud provide more detailed solutions for fixing code issues, especially solutions related to CVEs.
I need a solution that can bring together three key areas: vulnerabilities, static scanning, and misarchitecture.
Static code analysis is good, but the product lacks dynamic code scanning capabilities, an area where Veracode excels.
 

Setup Cost

Enterprise users find GitGuardian Platform offers good value with comprehensive security features, though some view it as slightly expensive.
SonarQube Cloud's pricing, based on lines of code, is seen as competitive but costly for small businesses.
Overall, the secret detection sector is expensive, but we are happy with the value we get.
It's fairly priced, as it performs a lot of analysis and is a valuable tool.
SonarQube Cloud is roughly equivalent in cost to Veracode, maybe a little cheaper.
From my experience, SonarQube Cloud (formerly SonarCloud) is very expensive for small companies.
We used the open-source version of SonarQube Cloud for its minimum features and did not license its extensive capabilities.
 

Valuable Features

GitGuardian Platform provides automatic secrets detection and integration tools for efficient incident management and agile collaboration across development environments.
SonarQube Cloud offers vulnerability detection, CI/CD integration, detailed reports, and user-friendly dashboards for enhanced code quality management.
One of the best features of the solution is the ability to use pre-push hooks.
A high number of our exposures are remediated by developers before security needs to step in, as the self-healing playbook process engages them automatically.
GitGuardian Platform performs the capability to detect secrets in real time exceptionally, as it activates from the commit and can detect it immediately.
I find SonarQube Cloud very easy to use and simple to integrate initially.
It gives precise reports compared to Coverity and has a slightly lower number of false positives.
I use SonarQube Cloud (formerly SonarCloud) to check the quality of developer code and identify vulnerabilities.
 

Categories and Ranking

GitGuardian Platform
Ranking in Static Application Security Testing (SAST)
9th
Average Rating
9.0
Reviews Sentiment
7.4
Number of Reviews
28
Ranking in other categories
Application Security Tools (13th), Data Loss Prevention (DLP) (9th), Software Supply Chain Security (6th), DevSecOps (5th)
SonarQube Cloud (formerly S...
Ranking in Static Application Security Testing (SAST)
10th
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
15
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of June 2025, in the Static Application Security Testing (SAST) category, the mindshare of GitGuardian Platform is 0.5%, up from 0.2% compared to the previous year. The mindshare of SonarQube Cloud (formerly SonarCloud) is 5.4%, down from 6.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST)
 

Featured Reviews

Ney Roman - PeerSpot reviewer
Facilitates efficient secret management and improves development processes
Regarding the exceptions in GitGuardian Platform, we know that within the platform we have a way to accept a path or a directory from a repository, but it is not that visible at the very beginning. You have to figure out where to search for it, and once you have it, it is really good, but it is not that visible at the beginning. This should be made more exposed. The documentation could be better because it was not that comprehensively documented. When we started working with GitGuardian Platform, it was difficult to find some specific use cases, and we were not aware of that. It might have improved now, but at that time, it was not something we would recommend.
Archana Verma - PeerSpot reviewer
Provides valuable insights on code vulnerabilities and integrates seamlessly with CI/CD pipelines
I find SonarQube Cloud to be very user-friendly with an easy-to-use interface. It provides detailed code smell reports and insights on hotspots, which can later represent security vulnerabilities. It gives precise reports compared to Coverity and has a slightly lower number of false positives. It is integrated easily with the CI/CD pipeline, saving time and cost. It provides information on upcoming vulnerability details and loopholes that might turn into vulnerabilities.
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
859,129 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
22%
Government
16%
Media Company
7%
Financial Services Firm
6%
Computer Software Company
17%
Financial Services Firm
10%
Manufacturing Company
9%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about GitGuardian Internal Monitoring ?
It's also worth mentioning that GitGuardian is unique because they have a free tier that we've been using for the first twelve months. It provides full functionality for smaller teams. We're a smal...
What is your experience regarding pricing and costs for GitGuardian Internal Monitoring ?
It's fairly priced, as it performs a lot of analysis and is a valuable tool.
What needs improvement with GitGuardian Internal Monitoring ?
We'd love to see notification updates in Slack, as the system does not provide feedback on updates to incidents, which can be problematic when developers resolve issues. ie. if a developer commits ...
What do you like most about SonarCloud?
Recently, they introduced support for mono reports and microservices, which is a noteworthy development as it provides a more detailed view of each service.
What is your experience regarding pricing and costs for SonarCloud?
From my experience, SonarQube Cloud (formerly SonarCloud) is very expensive for small companies. It would be a great improvement if the price for smaller companies were reduced, as I do not have th...
What needs improvement with SonarCloud?
I need a solution that can bring together three key areas: vulnerabilities, static scanning, and misarchitecture. Currently, to achieve our expectations, we have to use more than one product, as so...
 

Also Known As

GitGuardian Internal Monitoring
No data available
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Automox, 66degrees (ex Cloudbakers), Iress, Now:Pensions, Payfit, Orange, BouyguesTelecom, Seequent, Stedi, Talend, Snowflake... 
Information Not Available
Find out what your peers are saying about GitGuardian Platform vs. SonarQube Cloud (formerly SonarCloud) and other solutions. Updated: June 2025.
859,129 professionals have used our research since 2012.