Introducing G2.ai, the future of software buying.Try now
Compare Codacy and SonarQube 
At a Glance
Market Segments
Small-Business (63.0% of reviews)
Enterprise (44.4% of reviews)
Entry-Level Pricing
Free
Free
Codacy
Star Rating
(28)4.6 out of 5
Market Segments
Small-Business (63.0% of reviews)
Entry-Level Pricing
Free
Browse all 3 pricing plansSonarQube
Star Rating
(119)4.4 out of 5
Market Segments
Enterprise (44.4% of reviews)
Entry-Level Pricing
Free
Browse all 4 pricing plansSummary
AI Generated Summary
AI-generated. Powered by real user reviews.
- Users report that Codacy excels in repository integration with a score of 9.6, making it seamless for developers to incorporate into their workflows, while SonarQube Server lags behind at 7.8, which can lead to integration challenges.
- Reviewers mention that Codacy's ease of use is a standout feature, scoring 9.2, which is significantly higher than SonarQube Server's 8.3, indicating that users find Codacy more intuitive and user-friendly.
- G2 users highlight Codacy's superior quality of support with a score of 9.2, compared to SonarQube Server's 8.0, suggesting that Codacy provides more responsive and helpful customer service.
- Users on G2 report that Codacy offers better historical data consolidation with a score of 9.3, which is crucial for tracking code quality over time, while SonarQube Server's score of 7.5 indicates room for improvement in this area.
- Reviewers mention that Codacy's remediation suggestions are rated highly at 8.2, providing actionable insights for developers, whereas SonarQube Server's lower score in this category suggests it may not offer as effective guidance.
- Users say that Codacy's testing integration is exceptional, scoring 9.7, which enhances its functionality in CI/CD pipelines, while SonarQube Server's score of 7.8 indicates it may not integrate as smoothly with testing tools.
Featured Products
Sponsored
Kualitee
(172)
Bug Tracking
Visit Website
Sponsored
Intruder
(182)
Bug Tracking
Visit Website
Sponsored
minware
Bug Tracking
Visit Website
Pricing
Entry-Level Pricing
Codacy
Open Source
Free
Unlimited free code scanning for open-source projects
- Unlimited lines of code in public projects
- Code quality and security scanning across 49 languages and frameworks
- 100% cloud-based analysis via Git - no server or build steps needed
SonarQube
Community Edition
Free
Explore: https://www.sonarsource.com/plans-and-pricing/
- Free
- Popular & classic languages support
- Integration with DevOps platforms
Free Trial
Codacy
Free Trial is available
SonarQube
Free Trial is available
Ratings
Meets Requirements
8.9
19
8.9
102
Ease of Use
9.2
20
8.5
104
Ease of Setup
9.1
13
8.0
63
Ease of Admin
8.9
12
8.5
58
Quality of Support
9.2
14
8.3
85
Has the product been a good partner in doing business?
9.1
9
8.4
52
Product Direction (% positive)
8.3
20
8.5
98
Features by Category
Protect
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Feature Not Available
Not enough data
Execute
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Administration
Not enough data
7.8
15
Not enough data
5.9
16
Analysis
Not enough data
7.5
17
Not enough data
8.2
16
Not enough data
9.0
18
Not enough data
9.1
18
Testing
Not enough data
6.7
14
Not enough data
5.9
15
Not enough data
5.9
17
Not enough data
7.0
14
Not enough data
7.1
13
Not enough data
8.2
17
Not enough data
6.7
17
Agentic AI - Static Application Security Testing (SAST)
Not enough data
Not enough data
Dynamic Application Security Testing (DAST)Hide 13 FeaturesShow 13 Features
Not enough data
Not enough data
Administration
Not enough data
Not enough data
Not enough data
Not enough data
Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Testing
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Functionality
Not enough data
7.9
26
Not enough data
8.3
25
Not enough data
8.2
24
Management
Not enough data
7.6
22
Not enough data
7.5
20
Not enough data
7.9
22
Bug Reporting
Not enough data
9.0
7
Not enough data
9.3
7
Not enough data
9.0
7
Bug Monitoring
Not enough data
8.8
7
Not enough data
8.8
7
Not enough data
9.3
7
Agentic AI - Bug Tracking
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Functionality - Software Composition Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Effectiveness - Software Composition Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Documentation
Not enough data
7.8
29
Not enough data
7.5
29
Not enough data
8.2
30
Security
Not enough data
6.9
27
Not enough data
7.0
26
Not enough data
8.0
27
Generative AI
Not enough data
Not enough data
Application Security Posture Management (ASPM)Hide 11 FeaturesShow 11 Features
Not enough data
Not enough data
Risk management - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration and efficiency - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Reporting and Analytics - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
AI Compliance
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Risk Management & Monitoring
Not enough data
Not enough data
Not enough data
Not enough data
AI Lifecycle Management
Not enough data
Not enough data
Access Control and Security
Not enough data
Not enough data
Collaboration and Communication
Not enough data
Not enough data
Agentic AI - AI Governance Tools
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Static Code Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Cloud Visibility
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Categories
Categories
Shared Categories
Codacy and SonarQube are categorized as Static Application Security Testing (SAST) and Static Code Analysis
Unique Categories
Codacy is categorized as Application Shielding, Software Composition Analysis, and Dynamic Application Security Testing (DAST)
SonarQube is categorized as Secure Code Review, Software Development Analytics Tools, Bug Tracking, AI Governance Tools, and Application Security Posture Management (ASPM)
Reviews
Reviewers' Company Size
Codacy
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
SonarQube
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Small-Business
(50 or fewer emp.)
Mid-Market
(51-1000 emp.)
Enterprise
(> 1000 emp.)
Reviewers' Industry
Computer Software
29.6%
Information Technology and Services
14.8%
Program Development
7.4%
Financial Services
7.4%
Security and Investigations
3.7%
Other
37.0%
Information Technology and Services
25.6%
Computer Software
22.2%
Financial Services
6.8%
Hospital & Health Care
3.4%
Computer & Network Security
3.4%
Other
38.5%
Most Helpful Reviews
Codacy
Most Helpful Favorable Review
Daniel W.
Verified User in Computer Software
I'm an open source project maintainer. Given that I'm already donating thousands of hours of my time on my project, I absolutely love products which offer their tools free to Open Source projects. There are a variety of CI tools available, and no one tool...
Most Helpful Critical Review
SonarQube
Most Helpful Favorable Review
Kevin B.
Verified User in Computer Software
What I love about SonarQube is how it digs deep into my code and finds hidden issues which are not as obvious when writing the code, especially bugs and security problems, across different programming languages. It hooks up smoothly with my CI/CD pipelines,...
Most Helpful Critical Review
Verified User in Computer Software
no real support whatsoever for the $20k price tag; set up can be hellish if you haven't been through it before. With a database that has prevented updates to newer versions
Daniel W.
Verified User in Computer Software
I'm an open source project maintainer. Given that I'm already donating thousands of hours of my time on my project, I absolutely love products which offer their tools free to Open Source projects. There are a variety of CI tools available, and no one tool...
Kevin B.
Verified User in Computer Software
What I love about SonarQube is how it digs deep into my code and finds hidden issues which are not as obvious when writing the code, especially bugs and security problems, across different programming languages. It hooks up smoothly with my CI/CD pipelines,...
Verified User in Computer Software
no real support whatsoever for the $20k price tag; set up can be hellish if you haven't been through it before. With a database that has prevented updates to newer versions
Discussions
Codacy has no discussions with answers
SonarQube has no discussions with answers
Hunting for software insights?
With over 2.5 million reviews, we can provide the specific details that help you make an informed software buying decision for your business. Finding the right product is important, let us help.
