Try our new research platform with insights from 80,000+ expert users

GitGuardian Platform vs SonarQube Cloud (formerly SonarCloud) comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.1
GitGuardian enhances secrets detection efficiency, reduces manual review, integrates seamlessly into workflows, and protects corporate networks efficiently.
Sentiment score
5.7
SonarQube Cloud enhances code understanding, integrates with CI/CD, and offers positive ROI, benefiting large projects economically.
It is easily integrable with the CI/CD pipeline and supports multiple projects with its extensive plugin options.
The product is designed for bigger clients, while smaller companies are often put aside.
 

Customer Service

Sentiment score
8.2
The GitGuardian Platform offers exceptional customer support with quick, knowledgeable service, impressing users with their flexibility and communication.
Sentiment score
7.8
SonarQube Cloud support varies; while integration is easy, users seek better documentation and proactive technical engagement.
The customer service and support for SonarQube Cloud are responsive and helpful.
Integrating it into different solutions is straightforward.
 

Scalability Issues

Sentiment score
7.8
GitGuardian Platform is scalable, integrates seamlessly with workflows, and effectively manages large deployments and growing teams.
Sentiment score
6.4
SonarQube Cloud is scalable and user-friendly, suitable for diverse projects, but has some functionality limitations compared to competitors.
There are limitations, and it seems to have fewer capabilities than Veracode.
It has been used in multiple projects and performs well.
SonarQube Cloud is a scalable product, and I rate its scalability at seven out of ten.
 

Stability Issues

Sentiment score
8.5
GitGuardian Platform is highly stable and reliable, with minimal downtime and consistent, efficient performance praised by users.
Sentiment score
7.9
SonarQube Cloud is stable and reliable, though improvements in user experience, documentation, and CI/CD integration are needed.
It is a quite stable solution.
From my team's feedback, it is almost an eight out of ten.
 

Room For Improvement

Enhancements needed for GitGuardian Platform include improved customization, integration, UI, access controls, secret scanning, and Single Sign-On.
SonarQube Cloud requires better testing, flexibility, UI, integration, and security features to enhance user experience and vulnerability detection.
I need a solution that can bring together three key areas: vulnerabilities, static scanning, and misarchitecture.
Static code analysis is good, but the product lacks dynamic code scanning capabilities, an area where Veracode excels.
I would like to see SonarQube Cloud provide more detailed solutions for fixing code issues, especially solutions related to CVEs.
 

Setup Cost

GitGuardian offers reasonable pricing, scalable for enterprises, with reliable features and a generous free tier for small teams.
SonarQube Cloud's pricing, based on lines of code, is seen as competitive but costly for small businesses.
SonarQube Cloud is roughly equivalent in cost to Veracode, maybe a little cheaper.
From my experience, SonarQube Cloud (formerly SonarCloud) is very expensive for small companies.
We used the open-source version of SonarQube Cloud for its minimum features and did not license its extensive capabilities.
 

Valuable Features

GitGuardian Platform offers extensive secret detection, easy integration, and proactive security with low false-positive rates and user-friendly interface.
SonarQube Cloud offers vulnerability detection, CI/CD integration, detailed reports, and user-friendly dashboards for enhanced code quality management.
It is integrated easily with the CI/CD pipeline, saving time and cost.
The most valuable features of SonarQube Cloud (formerly SonarCloud) include code inspection, addressing technical debt, and identifying security vulnerabilities.
I find SonarQube Cloud very easy to use and simple to integrate initially.
 

Categories and Ranking

GitGuardian Platform
Ranking in Static Application Security Testing (SAST)
5th
Average Rating
9.0
Reviews Sentiment
7.4
Number of Reviews
24
Ranking in other categories
Application Security Tools (7th), Data Loss Prevention (DLP) (6th), Software Supply Chain Security (4th), DevSecOps (4th)
SonarQube Cloud (formerly S...
Ranking in Static Application Security Testing (SAST)
8th
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
15
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Static Application Security Testing (SAST) category, the mindshare of GitGuardian Platform is 0.5%, up from 0.2% compared to the previous year. The mindshare of SonarQube Cloud (formerly SonarCloud) is 5.9%, down from 6.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST)
 

Featured Reviews

Joan Ging - PeerSpot reviewer
It dramatically improved our ability to detect secrets, saved us time, and reduced our mean time to remediation
While they do offer some basic reporting, more comprehensive reporting would be beneficial in the long run. This would allow me to demonstrate the value of the product over time to continue to effectively budget for this subscription, especially as they add features that may come at an additional cost. I appreciate the improvements made to reporting over the past year, but continued development in this area will be appreciated. We have encountered occasional difficulties with the Single Sign-On process. There is room for improvement in its current implementation. It works, but was not quite as smooth as the rest of the GitGuardian experience.
Archana Verma - PeerSpot reviewer
Provides valuable insights on code vulnerabilities and integrates seamlessly with CI/CD pipelines
I find SonarQube Cloud to be very user-friendly with an easy-to-use interface. It provides detailed code smell reports and insights on hotspots, which can later represent security vulnerabilities. It gives precise reports compared to Coverity and has a slightly lower number of false positives. It is integrated easily with the CI/CD pipeline, saving time and cost. It provides information on upcoming vulnerability details and loopholes that might turn into vulnerabilities.
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
850,028 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
22%
Government
13%
Media Company
9%
Financial Services Firm
6%
Computer Software Company
18%
Financial Services Firm
10%
Manufacturing Company
10%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about GitGuardian Internal Monitoring ?
It's also worth mentioning that GitGuardian is unique because they have a free tier that we've been using for the first twelve months. It provides full functionality for smaller teams. We're a smal...
What needs improvement with GitGuardian Internal Monitoring ?
We'd like to request a new GitGuardian feature that automates user onboarding and access control for code repositories. Ideally, when a user contributes to a repository, they would be automatically...
What do you like most about SonarCloud?
Recently, they introduced support for mono reports and microservices, which is a noteworthy development as it provides a more detailed view of each service.
What is your experience regarding pricing and costs for SonarCloud?
From my experience, SonarQube Cloud (formerly SonarCloud) is very expensive for small companies. It would be a great improvement if the price for smaller companies were reduced, as I do not have th...
What needs improvement with SonarCloud?
I need a solution that can bring together three key areas: vulnerabilities, static scanning, and misarchitecture. Currently, to achieve our expectations, we have to use more than one product, as so...
 

Also Known As

GitGuardian Internal Monitoring
No data available
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Automox, 66degrees (ex Cloudbakers), Iress, Now:Pensions, Payfit, Orange, BouyguesTelecom, Seequent, Stedi, Talend, Snowflake... 
Information Not Available
Find out what your peers are saying about GitGuardian Platform vs. SonarQube Cloud (formerly SonarCloud) and other solutions. Updated: April 2025.
850,028 professionals have used our research since 2012.