Try our new research platform with insights from 80,000+ expert users

SonarQube vs Trend Micro Cloud App Security [EOL] comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 26, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SonarQube
Average Rating
8.0
Reviews Sentiment
7.2
Number of Reviews
134
Ranking in other categories
Application Security Tools (1st), Static Application Security Testing (SAST) (1st), Software Development Analytics (1st)
Trend Micro Cloud App Secur...
Average Rating
8.2
Reviews Sentiment
6.2
Number of Reviews
9
Ranking in other categories
No ranking in other categories
 

Featured Reviews

KH
Sr Software Engineering Supervisor at Mozarc Medical
Gains control over rule customization and achieves reliable vulnerability assessment
The deployment process took me about 2 or 3 hours to deploy SonarQube Server (formerly SonarQube), although I do not remember exactly since it was done about 2 years back. Currently, about 10 of my developers are using SonarQube Server (formerly SonarQube) in my company. I do not have plans to increase the usage of SonarQube Server (formerly SonarQube) in the future as there will not be any requirement to increase. I am a senior software engineer and supervisor at Mozark Medical. My corporate email address is karthik.k.a.r.t.h.i.k.h.a.r.p.a.n.h.a.l.l.i@mozarkmedical.com. Overall, I would rate SonarQube Server (formerly SonarQube) as a 9 out of 10.
Murali Krishnan L - PeerSpot reviewer
Technical Manager (SOC Operations) at Novac Technology Solutions
User-friendly solution with good scalability
We use the solution to block phishing, spam, and impersonated emails The solution's feature for high-profile users' domains helps us detect impersonated emails. Also, its API-based features help in easy integration. The solution is easy to integrate and has the best feature for high-profile…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I find SonarQube Cloud very easy to use and simple to integrate initially."
"I follow Quality Gate's graduation model within organization, and it is extremely helpful for me to benchmark products."
"We have worked with the support from SonarQube and we have had good experiences."
"The solution is stable."
"I like that it has a better dashboard compared to Clockwork. It's also stable."
"The most valuable feature is the security hotspot feature that identifies where your code is prone to have security issues."
"Any developer can easily identify issues using the process flow or steps provided by SonarQube. In terms of integration, SonarQube makes it quite easy, simplifying the steps for users."
"Code Convention: Using the tool to implement some sort of coding convention is really useful and ensures that the code is consistent no matter how many contributors."
"I find Trend Micro Cloud App Security useful for scanning our email boxes. We can scan them one by one, which is a good feature. It's not just gateway-level protection - we integrate the email system with it. They have special protection and parameters for phishing emails."
"Dependable with ease of integration with other security products."
"Our business emails are very important and Trend Micro Cloud App Security has provided a high level of protection. Additionally, there are updating the solution frequently."
"The initial setup is pretty straightforward."
"The most valuable feature of Trend Micro Cloud App Security is its stability across all platforms."
"It has more intelligence features than other vendors."
"Trend Micro Cloud App is easy to use and easy to install."
"Trend Micro has DLP features in it, which separates it from other solutions."
 

Cons

"I need a solution that can bring together three key areas: vulnerabilities, static scanning, and misarchitecture. Currently, to achieve our expectations, we have to use more than one product, as some products excel at scanning for vulnerabilities but are poor at checking code quality."
"I have found this solution creates more noise than competitors."
"It should be user-friendly."
"The learning curve can be fairly steep at first, but then, it's not an entry-level type of application. It's not like an introduction to C programming. You should know not just C programming and how to make projects but also how to apply its findings to the bigger picture. I've had users who said that they wish it was easier to understand how to configure, but I don't know if that's doable because what it's doing is a very complicated thing. I don't know if it is possible to make a complicated thing trivially simple."
"It requires advanced heuristics to recognize more complex constructs that could be disregarded as issues."
"We've been using the Community Edition, which means that we get to use it at our leisure, and they're kind enough to literally give it to us. However, it takes a fair amount of effort to figure out how to get everything up and running. Since we didn't go with the professional paid version, we're not entitled to support. Of course that could be self-correcting if we were to make the step to buy into this and really use it. Then their technical support would be available to us to make strides for using it better."
"SonarQube Server (formerly SonarQube) could be improved on the reporting front. Instead of grouping, I would prefer to scan the code as part of development and then generate a report on a daily basis among different units or projects, which is currently complicated."
"If there was an official Docker image of SonarQube that could easily integrate into the pipeline would help the user to plug in and plug out and use it directly without any custom configuration. I am not sure if this is being offered already in an update but it would be very helpful."
"The price of the solution could improve by being lower."
"There is room for improvement in the DLP component of Trend Micro Cloud App Security."
"The granulation of the policy setup needs to be better. Right now, it is too basic."
"For improvements, I think it would be great if Trend Micro Cloud App Security could enhance their product to be a single SASE solution. It should be similar to competitors like Palo Alto."
"Documentation could be improved; product cost is quite high."
"The solution's technical support services could be better."
"It would be great if Trend Mail Cloud App Security would be joined with a web security solution, making it a multiple-network solution."
"In the next release, I would like to see the cost go down."
 

Pricing and Cost Advice

"We are using the free, unlicensed version."
"We're using their free Community Edition version."
"SonarQube enterprise, I am not sure of the price but from what I understand they are charging a fee. It's is not clear if it is an annual fee or a one-off."
"SonarQube is a cost-effective solution."
"The price of SonarCloud could be less expensive. We are using the community version and the price should be more reasonable."
"We're using the Community Edition, and we don't pay for anything."
"The price point on SonarQube is good."
"As a user and a consumer of this solution, it can be pricey for my company to support and use, even though there are many benefits. For this reason, we use the free version. In the future, as our product cycles develop and evolve at a more steady pace, we hope to invest in the licensing for this tool."
"The solution's price is mid-ranged."
"The product's pricing is reasonable compared to other vendors."
"The cost of the license is on the high side. It's a yearly subscription."
"The pricing of the solution could be better."
"The price of Trend Micro Cloud App Security is expensive for regular users. There are not any hidden fees. First-time users of the solution should purchase implementation packages or professional services."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
884,656 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Manufacturing Company
14%
Computer Software Company
12%
Government
5%
Performing Arts
13%
Manufacturing Company
10%
Computer Software Company
7%
Financial Services Firm
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business41
Midsize Enterprise24
Large Enterprise79
By reviewers
Company SizeCount
Small Business6
Midsize Enterprise1
Large Enterprise2
 

Questions from the Community

Is SonarQube the best tool for static analysis?
I am not very familiar with SonarQube and their solutions, so I can not answer. But if you are asking me about which tools that are the best for for Static Code Analysis, I suggest you have a look...
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
How would you decide between Coverity and Sonarqube?
We researched Coverity, but in the end, we chose SonarQube. SonarQube is a tool for reviewing code quality and security. It helps to guide our development teams during code reviews by providing rem...
What needs improvement with Trend Micro Cloud App Security?
For improvements, I think it would be great if Trend Micro Cloud App Security could enhance their product to be a single SASE solution. It should be similar to competitors like Palo Alto. The solut...
What is your primary use case for Trend Micro Cloud App Security?
We use the solution for cloud data protection, particularly for email and file-sharing systems. It integrates with Microsoft Office 365 and Google Suite to scan mailboxes for spam, viruses, and phi...
What advice do you have for others considering Trend Micro Cloud App Security?
We chose the solution because they've been Gartner leaders for over 15 years, have a good customer base, and are a well-established company. I'd rate the product an eight out of ten.
 

Also Known As

Sonar, SonarQube Cloud
No data available
 

Interactive Demo

Demo not available
 

Overview

 

Sample Customers

Snowflake, Booking.com, Deutsche Bank, AstraZeneca, and Ford Motor Company.
MedImpact Healthcare Systems, ClubCorp USA, Copa Airlines, Aava, Azra Solutions, BSN INET Co, Ltd, Carhartt
Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools. Updated: February 2026.
884,656 professionals have used our research since 2012.