CodeSonar offers a potent tool for static code analysis, adept in detecting runtime errors and security vulnerabilities, with a fast deployment process and scalable capabilities. Its quick analysis and efficient web interface provide a strong basis for code quality validation.


| Product | Mindshare (%) |
|---|---|
| CodeSonar | 1.1% |
| SonarQube | 13.6% |
| Checkmarx One | 8.8% |
| Other | 76.5% |
| Company Size | Count |
|---|---|
| Small Business | 5 |
| Midsize Enterprise | 1 |
| Large Enterprise | 1 |
| Company Size | Count |
|---|---|
| Small Business | 110 |
| Midsize Enterprise | 71 |
| Large Enterprise | 284 |
CodeSonar specializes in identifying runtime errors, dead code, and security threats while providing features like code surfing and browsing. It offers a highly efficient web interface, though users find initial setup complex and highlight the need for better static analysis, broader language support beyond C and C++, and an improved licensing model. Despite these challenges, its integration with Jenkins and technical guidance support makes it a reliable choice for teams in defense and software quality assessment. Deployment is quick and easy, yet initial costs are a common concern among users.
What are the key features of CodeSonar?CodeSonar is primarily implemented in industries like defense and companies prioritizing code quality. Teams utilize its static code analysis and threat detection capabilities, integrating with Jenkins for continuous integration workflows. Security checks post-builds and technical support are common, aiding in effective defect management.
| Author info | Rating | Review Summary |
|---|---|---|
| Intigration Developer at ez-Wheel | 4.0 | I found CodeSonar stable and scalable, helping enforce MISRA rules and avoid bad code. However, it is expensive and initial setup, rule application, and upgrades can be difficult, and it lacks an IDE plugin for quick analysis. |
| Engineer at a manufacturing company with 11-50 employees | 5.0 | CodeSonar offers fantastic speed, stability, and support, and I find its GUI user-friendly. However, I believe it needs to become a sound static analysis tool to enhance its market competitiveness and adoption, despite its good runtime error detection. |
| Team Lead at a tech services company with 10,001+ employees | 4.0 | I found CodeSonar very helpful for DevOps, detecting buffer issues and future bugs. While stable, I believe its reporting needs improvement in differentiating C and C++ language standards and MISRA guidelines. |
| Senior Security Specialist at a computer software company with 51-200 employees | 4.5 | I use this stable, easily set up solution for static code analysis, effectively identifying defects and vulnerabilities for customers. While costly, it offers good code surfing and excellent support, fixing quality issues. I'd like more emphasis on security features and code standards. |
| Team Leader in software dept at a tech services company with 11-50 employees | 3.5 | We use CodeSonar for static analysis to identify security threats. Its most valuable feature is threat detection. We previously used open-source tools but switched to CodeSonar for better security and integration. A shared licensing model would benefit our large company. |
| Embedded Software Engineer at a manufacturing company with 201-500 employees | 3.5 | I value CodeSonar for optimizing code by catching dead parts, especially for our memory-limited microcontrollers. While stable and scalable, I wish it offered better coding rules to reduce reliance on other tools like MISRA C. |
| Senior Solutions Architect at a tech vendor with 1-10 employees | 4.5 | I rate CodeSonar 9/10. It's excellent for C/C++ memory leak detection, stable, and supported. I desire improved core architecture scanning, more languages (e.g., Node.js), and better pricing for this valuable tool. |