Try our new research platform with insights from 80,000+ expert users

SonarQube Server (formerly SonarQube) vs Spirent CyberFlood comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SonarQube Server (formerly ...
Ranking in Application Security Tools
1st
Ranking in Static Application Security Testing (SAST)
1st
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
114
Ranking in other categories
Software Development Analytics (1st)
Spirent CyberFlood
Ranking in Application Security Tools
35th
Ranking in Static Application Security Testing (SAST)
32nd
Average Rating
8.4
Reviews Sentiment
6.6
Number of Reviews
5
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of May 2025, in the Application Security Tools category, the mindshare of SonarQube Server (formerly SonarQube) is 24.5%, down from 27.0% compared to the previous year. The mindshare of Spirent CyberFlood is 0.1%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Wang Dayong - PeerSpot reviewer
Easy to integrate and has a plug-in that supports both C and C++ languages
The product provides false reports sometimes. It also fails to understand the context of the code. It reports that a line of code has issues without considering its relation with the previous line. The product should improve the report quality. While it asks us to improve the code quality, it would be good if it also suggests how to improve the quality.
Jos Badimo - PeerSpot reviewer
Test assurance improves compliance and products with good performance
The user interface could be improved to facilitate easier navigation. The most significant issue I encounter with the solution is the user interface. It would be beneficial if I could remain on one screen most of the time. Even if the system navigates me to another screen, it should effectively return me to the main screen.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"If code coverage is a low number then that's of great value to me."
"This has improved our organization because it has helped to find Security Vulnerabilities."
"The solution can verify vulnerabilities, code smells, and hotspots. It makes the software more secure and it helps make a junior or novice developer sharper."
"There is a free version."
"It has very good scalability and stability."
"It easily ties into our continuous integration pipeline."
"Some of the static code analysis capabilities are the most beneficial."
"We use this solution for qualitative coding. We make use of the SonarLint plugin as well as the dashboard."
"CyberFlood is flexible."
"The feature I find most valuable is the traffic generator."
"The testing compliance feature is particularly impressive."
"Our customers use it to check for unauthorized file transfer."
"The testing compliance feature is particularly impressive."
"CyberFlood's best features are its user-friendliness and scheduling function."
 

Cons

"In the next release, I would like to have notifications because now, it is a bit difficult. I think that's a feature which we could add there and it would benefit the users as well. For every full request, they should be able to see their bugs or vulnerability directly on the surface."
"If there was an official Docker image of SonarQube that could easily integrate into the pipeline would help the user to plug in and plug out and use it directly without any custom configuration. I am not sure if this is being offered already in an update but it would be very helpful."
"The documentation is not clear and it needs to be updated."
"Having performance regression would be a helpful add on or ability to be able to do during the scan."
"There needs to be a shareable reporting piece or something we can click and generate easily."
"The product's pricing could be lower."
"A little bit more emphasis on security and a bit more security scanning features would be nice."
"Ease of use/interface."
"CyberFlood's accessibility and support for multiple browsers could be better."
"The user interface could be improved to facilitate easier navigation."
"The solution needs more ports, more speed, and more gigabytes."
"The initial setup is not straightforward and can be quite challenging."
"Sometimes, when you configure parameters the hardware can't run, it will get stuck at those points without telling you what happened. It would be helpful if the error reporting provided more details about why the test setting is not running. It would be nice if there were a space in the hardware module for you to add some external hardware for more rigorous testing."
"I would also like to see updates on a more frequent schedule."
 

Pricing and Cost Advice

"The development license cost is reasonable, and we've had no concerns about SonarQube when it comes to cost."
"On the pricing side, it's 3,000 Euros for 1 million lines of code."
"There is both a free and licensed version. The free version has limitations on development languages and support."
"It's an open-source product."
"As a user and a consumer of this solution, it can be pricey for my company to support and use, even though there are many benefits. For this reason, we use the free version. In the future, as our product cycles develop and evolve at a more steady pace, we hope to invest in the licensing for this tool."
"We are using the Community edition of SonarQube."
"Get the paid version which allows the customized dashboard and provides technical support."
"The licence is standard open source licensing"
"CyberFlood is reasonably priced."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
851,451 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
15%
Manufacturing Company
13%
Government
6%
Computer Software Company
16%
Manufacturing Company
14%
Comms Service Provider
10%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

Is SonarQube the best tool for static analysis?
I am not very familiar with SonarQube and their solutions, so I can not answer. But if you are asking me about which tools that are the best for for Static Code Analysis, I suggest you have a look...
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What needs improvement with Spirent CyberFlood?
The user interface could be improved to facilitate easier navigation. The most significant issue I encounter with the solution is the user interface. It would be beneficial if I could remain on one...
What is your primary use case for Spirent CyberFlood?
I have been using the solution for a year now. The customers I work with are focused on both custom test assurance and test automation. The solution is utilized in the financial services sector and...
 

Also Known As

Sonar
CyberFlood Virtual, Spirent Mu Dynamics Application Security Testing, Mu Dynamics Application Security Testing
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Information Not Available
Digicel
Find out what your peers are saying about SonarQube Server (formerly SonarQube) vs. Spirent CyberFlood and other solutions. Updated: April 2025.
851,451 professionals have used our research since 2012.