Introducing G2.ai, the future of software buying.Try now
- Home
- ...
- Interactive Application Security Testing (IAST) Software
- Contrast Security
- SonarQube
- Contrast Security-vs-SonarQube
Compare Contrast Security and SonarQube 
At a Glance
Market Segments
Enterprise (67.3% of reviews)
Enterprise (44.4% of reviews)
Entry-Level Pricing
No pricing available
Free
Contrast Security
Star Rating
(49)4.5 out of 5
Market Segments
Enterprise (67.3% of reviews)
Entry-Level Pricing
No pricing available
Learn more about Contrast SecuritySonarQube
Star Rating
(119)4.4 out of 5
Market Segments
Enterprise (44.4% of reviews)
Entry-Level Pricing
Free
Browse all 4 pricing plansSummary
AI Generated Summary
AI-generated. Powered by real user reviews.
- Users report that SonarQube Server excels in Static Code Analysis with a score of 9.0, highlighting its ability to provide detailed insights into code quality. In contrast, Contrast Security, while still strong, has a slightly lower score of 8.8, indicating that users find SonarQube's analysis more comprehensive.
- Reviewers mention that Contrast Security shines in API / Integrations with a remarkable score of 9.5, making it easier for teams to integrate security into their existing workflows. SonarQube Server, with a score of 7.7, is perceived as less flexible in this area, which may hinder seamless integration for some users.
- G2 users highlight the Quality of Support for Contrast Security, which received a high score of 9.3. Users appreciate the responsiveness and helpfulness of the support team, while SonarQube Server's score of 8.0 suggests that there is room for improvement in customer service.
- Reviewers say that SonarQube Server provides excellent Documentation with a score of 8.9, making it easier for users to understand and utilize the software effectively. In comparison, Contrast Security's documentation received a lower score of 7.6, indicating that users may face challenges in finding the information they need.
- Users on G2 report that Contrast Security offers superior Compliance Testing capabilities, scoring 8.5, which is essential for organizations needing to meet regulatory requirements. SonarQube Server, with a score of 7.1, may not meet the same level of compliance needs for some users.
- Reviewers mention that SonarQube Server's Repository Integration is rated at 7.8, which some users find limiting compared to Contrast Security's higher score of 8.8. This difference suggests that users may find it easier to work with various repositories when using Contrast Security.
Featured Products
Sponsored
DX
(199)
Bug Tracking
Visit Website
Sponsored
minware
Bug Tracking
Visit Website
Sponsored
Axify
(6)
Bug Tracking
Visit Website
Pricing
Entry-Level Pricing
Contrast Security
No pricing availableSonarQube
Community Edition
Free
Explore: https://www.sonarsource.com/plans-and-pricing/
- Free
- Popular & classic languages support
- Integration with DevOps platforms
Free Trial
Contrast Security
Free Trial is available
SonarQube
Free Trial is available
Ratings
Meets Requirements
8.7
40
8.9
102
Ease of Use
8.6
41
8.5
104
Ease of Setup
7.8
27
8.0
63
Ease of Admin
8.9
27
8.5
58
Quality of Support
9.3
39
8.3
85
Has the product been a good partner in doing business?
9.0
27
8.4
52
Product Direction (% positive)
9.1
38
8.5
98
Features by Category
Administration
9.5
7
7.8
15
8.8
8
5.9
16
Analysis
9.0
10
7.5
17
8.8
10
8.2
16
8.8
10
9.0
18
8.7
10
9.1
18
Testing
8.6
7
6.7
14
8.3
7
5.9
15
8.3
5
5.9
17
8.5
8
7.0
14
9.0
7
7.1
13
8.5
9
8.2
17
7.5
10
6.7
17
Agentic AI - Static Application Security Testing (SAST)
Not enough data
Not enough data
Administration
8.7
14
Not enough data
8.5
13
Not enough data
Analysis
8.9
15
Not enough data
8.1
15
Not enough data
8.5
12
Not enough data
8.8
15
Not enough data
8.6
14
Not enough data
Testing
7.9
12
Not enough data
8.3
10
Not enough data
8.1
13
Not enough data
8.1
12
Not enough data
8.2
15
Not enough data
7.0
15
Not enough data
Performance
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Network
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Application
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Vulnerability Scanner
Not enough data
Not enough data
Not enough data
Not enough data
Functionality
Not enough data
7.9
26
Not enough data
8.3
25
Not enough data
8.2
24
Management
Not enough data
7.6
22
Not enough data
7.5
20
Not enough data
7.9
22
Bug Reporting
Not enough data
9.0
7
Not enough data
9.3
7
Not enough data
9.0
7
Bug Monitoring
Not enough data
8.8
7
Not enough data
8.8
7
Not enough data
9.3
7
Agentic AI - Bug Tracking
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Functionality - Software Composition Analysis
8.1
16
Not enough data
8.8
16
Not enough data
9.1
15
Not enough data
Effectiveness - Software Composition Analysis
8.3
16
Not enough data
9.0
16
Not enough data
8.9
16
Not enough data
Documentation
Not enough data
7.8
29
Not enough data
7.5
29
Not enough data
8.2
30
Security
Not enough data
6.9
27
Not enough data
7.0
26
Not enough data
8.0
27
Generative AI
Not enough data
Not enough data
Application Security Posture Management (ASPM)Hide 11 FeaturesShow 11 Features
Not enough data
Not enough data
Risk management - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration and efficiency - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Reporting and Analytics - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
AI Compliance
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Risk Management & Monitoring
Not enough data
Not enough data
Not enough data
Not enough data
AI Lifecycle Management
Not enough data
Not enough data
Access Control and Security
Not enough data
Not enough data
Collaboration and Communication
Not enough data
Not enough data
Agentic AI - AI Governance Tools
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Runtime Application Self-Protection (RASP) ToolsHide 4 FeaturesShow 4 Features
Not enough data
Not enough data
Threat Detection & Response - Runtime Application Self-Protection (RASP)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Static Code Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Cloud Visibility
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Interactive Application Security Testing (IAST)Hide 1 FeatureShow 1 Feature
Not enough data
Not enough data
Agentic AI - Interactive Application Security Testing (IAST)
Not enough data
Not enough data
Categories
Categories
Shared Categories
Contrast Security and SonarQube are categorized as Static Application Security Testing (SAST)
Unique Categories
Contrast Security is categorized as Software Composition Analysis, Dynamic Application Security Testing (DAST), Runtime Application Self-Protection (RASP) Tools, Vulnerability Scanner, and Interactive Application Security Testing (IAST)
SonarQube is categorized as Secure Code Review, Software Development Analytics Tools, Static Code Analysis, Bug Tracking, AI Governance Tools, and Application Security Posture Management (ASPM)
Reviews
Reviewers' Company Size
Contrast Security
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
SonarQube
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Small-Business
(50 or fewer emp.)
Mid-Market
(51-1000 emp.)
Enterprise
(> 1000 emp.)
Reviewers' Industry
Insurance
14.3%
Information Technology and Services
10.2%
Telecommunications
8.2%
Financial Services
8.2%
Computer Software
8.2%
Other
51.0%
Information Technology and Services
25.6%
Computer Software
22.2%
Financial Services
6.8%
Hospital & Health Care
3.4%
Computer & Network Security
3.4%
Other
38.5%
Most Helpful Reviews
Contrast Security
Most Helpful Favorable Review
Verified User in Insurance
Contrast delivers easy and fast vulnerability data about our applications (IDE environments) that continues through production with the RASP functionality.
Most Helpful Critical Review
Verified User in Hospital & Health Care
Less robust features for .NET-based workloads: Azure functions/serverless not available (only app services), Azure DevOps integrations work but are not intensive, Contrast support are generally less-knowledgeable on .NET environments (optimized for Java &...
SonarQube
Most Helpful Favorable Review
Kevin B.
Verified User in Computer Software
What I love about SonarQube is how it digs deep into my code and finds hidden issues which are not as obvious when writing the code, especially bugs and security problems, across different programming languages. It hooks up smoothly with my CI/CD pipelines,...
Most Helpful Critical Review
Verified User in Computer Software
no real support whatsoever for the $20k price tag; set up can be hellish if you haven't been through it before. With a database that has prevented updates to newer versions
Verified User in Insurance
Contrast delivers easy and fast vulnerability data about our applications (IDE environments) that continues through production with the RASP functionality.
Kevin B.
Verified User in Computer Software
What I love about SonarQube is how it digs deep into my code and finds hidden issues which are not as obvious when writing the code, especially bugs and security problems, across different programming languages. It hooks up smoothly with my CI/CD pipelines,...
Verified User in Hospital & Health Care
Less robust features for .NET-based workloads: Azure functions/serverless not available (only app services), Azure DevOps integrations work but are not intensive, Contrast support are generally less-knowledgeable on .NET environments (optimized for Java &...
Verified User in Computer Software
no real support whatsoever for the $20k price tag; set up can be hellish if you haven't been through it before. With a database that has prevented updates to newer versions
Discussions
Contrast Security has no discussions with answers
SonarQube has no discussions with answers
Hunting for software insights?
With over 2.5 million reviews, we can provide the specific details that help you make an informed software buying decision for your business. Finding the right product is important, let us help.
