Try our new research platform with insights from 80,000+ expert users

SonarQube Cloud (formerly SonarCloud) vs Spirent CyberFlood comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 15, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SonarQube Cloud (formerly S...
Ranking in Static Application Security Testing (SAST)
10th
Average Rating
8.2
Reviews Sentiment
6.2
Number of Reviews
16
Ranking in other categories
No ranking in other categories
Spirent CyberFlood
Ranking in Static Application Security Testing (SAST)
29th
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
5
Ranking in other categories
Application Security Tools (32nd)
 

Mindshare comparison

As of August 2025, in the Static Application Security Testing (SAST) category, the mindshare of SonarQube Cloud (formerly SonarCloud) is 4.5%, down from 6.2% compared to the previous year. The mindshare of Spirent CyberFlood is 0.4%, up from 0.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST)
 

Featured Reviews

Archana Verma - PeerSpot reviewer
Provides valuable insights on code vulnerabilities and integrates seamlessly with CI/CD pipelines
I find SonarQube Cloud to be very user-friendly with an easy-to-use interface. It provides detailed code smell reports and insights on hotspots, which can later represent security vulnerabilities. It gives precise reports compared to Coverity and has a slightly lower number of false positives. It is integrated easily with the CI/CD pipeline, saving time and cost. It provides information on upcoming vulnerability details and loopholes that might turn into vulnerabilities.
Jos Badimo - PeerSpot reviewer
Test assurance improves compliance and products with good performance
The user interface could be improved to facilitate easier navigation. The most significant issue I encounter with the solution is the user interface. It would be beneficial if I could remain on one screen most of the time. Even if the system navigates me to another screen, it should effectively return me to the main screen.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Its dashboard provides a unified view of various code quality metrics, including code duplication, unit test coverage, and security hotspots."
"The most valuable features of SonarCloud are the ability to discover vulnerabilities, security weak points, security hotspots, and all the feedback that comes into the feature branch. You can deploy the code with the security, you can eliminate the problem at the developer level rather than identifying the problem in the productions."
"The solution provides continuous code analysis which has improved the quality of our code. It can raise alarms on vulnerabilities with immediate reports on the dashboard. Few things are false positives and we can customize the rules."
"I find SonarQube Cloud very easy to use and simple to integrate initially."
"I find SonarQube Cloud to be very user-friendly with an easy-to-use interface."
"It is the best product we use for easy integration into YAML pipelines for scanning."
"The SaaS solution for checking code without execution and dealing with security issues is valuable."
"The most valuable feature of SonarCloud is its overall performance."
"Our customers use it to check for unauthorized file transfer."
"CyberFlood's best features are its user-friendliness and scheduling function."
"The testing compliance feature is particularly impressive."
"CyberFlood is flexible."
"The testing compliance feature is particularly impressive."
"The feature I find most valuable is the traffic generator."
 

Cons

"We had some issues with the scanner."
"SonarQube Cloud needs improvements in dynamic code analysis. Static code analysis is good, but the product lacks dynamic code scanning capabilities, an area where Veracode excels."
"CI/CD pipeline is part of a whole chain of design, development, and production, and it's becoming increasingly crucial to optimize the various tools across different stages. However, it's still a silo approach because the full integration is missing. This isn't just an issue with SonarCloud. It's a general problem with tooling."
"The UI can be improved. Additionally, in future updates, I would like to see SonarQube Cloud provide more detailed solutions for fixing code issues, especially solutions related to CVEs."
"It would be helpful if notifications could go out to an extra person."
"SonarQube Cloud could improve its vulnerability detection compared to Veracode. Additionally, it has fewer capabilities, which prompted us to use Veracode."
"I need a solution that can bring together three key areas: vulnerabilities, static scanning, and misarchitecture. Currently, to achieve our expectations, we have to use more than one product, as some products excel at scanning for vulnerabilities but are poor at checking code quality."
"Reporting features are missing in SonarCloud."
"The user interface could be improved to facilitate easier navigation."
"I would also like to see updates on a more frequent schedule."
"CyberFlood's accessibility and support for multiple browsers could be better."
"The initial setup is not straightforward and can be quite challenging."
"Sometimes, when you configure parameters the hardware can't run, it will get stuck at those points without telling you what happened. It would be helpful if the error reporting provided more details about why the test setting is not running. It would be nice if there were a space in the hardware module for you to add some external hardware for more rigorous testing."
"The solution needs more ports, more speed, and more gigabytes."
 

Pricing and Cost Advice

"Previously, the pricing was 17,000 euros for five million lines analyzed. However, they now charge $15,000 per one million lines, significantly increasing the cost."
"The current pricing is quite cheap."
"The price of SonarCloud could be less expensive. We are using the community version and the price should be more reasonable."
"The price of SonarCloud is not expensive, it goes by the lines of code. 1 million lines per code are approximately 4,000 USD per year. If you need 2 million lines of code you would double the annual cost."
"While not extremely cheap, it aligns well with market standards and offers good value."
"I rate the pricing a five out of ten."
"I am using the free version of the solution."
"CyberFlood is reasonably priced."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
865,384 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
10%
Manufacturing Company
9%
Insurance Company
6%
Manufacturing Company
18%
Comms Service Provider
13%
Computer Software Company
9%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about SonarCloud?
Recently, they introduced support for mono reports and microservices, which is a noteworthy development as it provides a more detailed view of each service.
What is your experience regarding pricing and costs for SonarCloud?
From my experience, SonarQube Cloud (formerly SonarCloud) is very expensive for small companies. It would be a great improvement if the price for smaller companies were reduced, as I do not have th...
What needs improvement with SonarCloud?
I need a solution that can bring together three key areas: vulnerabilities, static scanning, and misarchitecture. Currently, to achieve our expectations, we have to use more than one product, as so...
What needs improvement with Spirent CyberFlood?
The user interface could be improved to facilitate easier navigation. The most significant issue I encounter with the solution is the user interface. It would be beneficial if I could remain on one...
What is your primary use case for Spirent CyberFlood?
I have been using the solution for a year now. The customers I work with are focused on both custom test assurance and test automation. The solution is utilized in the financial services sector and...
What advice do you have for others considering Spirent CyberFlood?
The language barrier and time difference pose significant issues with customer support. The price is competitive. The biggest benefits I find are test assurance, the reliability of the test results...
 

Also Known As

No data available
CyberFlood Virtual, Spirent Mu Dynamics Application Security Testing, Mu Dynamics Application Security Testing
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Information Not Available
Digicel
Find out what your peers are saying about SonarQube Cloud (formerly SonarCloud) vs. Spirent CyberFlood and other solutions. Updated: July 2025.
865,384 professionals have used our research since 2012.