Compare CAST Application Intelligence Platform vs. SonarQube
CAST Application Intelligence Platform is ranked 2nd in Software Development Analytics with 1 review while SonarQube is ranked 1st in Software Development Analytics with 14 reviews. CAST Application Intelligence Platform is rated 5.0, while SonarQube is rated 7.4. The top reviewer of CAST Application Intelligence Platform writes "Source code has to be fed. Used for controlling the technical debt and code quality". On the other hand, the top reviewer of SonarQube writes "Great birds-eye view dashboard with detailed code metrics in the drill-down". CAST Application Intelligence Platform is most compared with SonarQube, Checkmarx and Micro Focus Fortify on Demand, whereas SonarQube is most compared with Veracode, Checkmarx and Micro Focus Fortify on Demand.
 |
Most Helpful Review | |||
| |||
Quotes From Members
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
Pros | |
Used for controlling the technical debt and code quality. It supports most programming languages. | The most valuable features are the dashboard reports and the ease of integrating it with Jenkins. Strong code evaluation for budget-minded clients. If code coverage is a low number then that's of great value to me. SonarQube is good for checking and maintaining code quality. Using SonarQube has helped us to identify areas of technical debt to work on, resulting in better code, fewer vulnerabilities, and fewer bugs. We advise all of our developers to have this solution in place. If you want to have your code scanned and timed then this is a good tool. We have the software metrics that SonarQube gives us, which is something we did not have before. This helps us work towards aiming coding standards to empower us to move in the direction of better code quality. SonarQube provides targets and metrics for that. |
Cons | |
It has very few plugins to access different code repositories, so source code has to be fed. Implementation could be made more simpler as it is complex. | Although it has Sonar built into it, it is still lacking. Customization features of identifying a particular attack still need to be worked on. To give you an example: if we want to scan and do a false positive analysis, those types of features are missing. If we want to rescan something from a particular point that is a feature that is also missing. It’s in our queue. That will hopefully save a lot of time. Expression of common vulnerabilities and exposures is not always current. I don't believe you can have metrics of code quality based upon code analysis. I don't think it's possible for a computer to do it. I would like to see more options for security, beyond the basics like SQL injection. The solution is a bit lacking on the security side, in terms of finding and identifying vulnerabilities. I would like to see dynamic code analysis in the next version of the software. The reporting is good, but I am not able to download a specific report as a PDF, so downloading reports is something that should be looked at. We've been using the Community Edition, which means that we get to use it at our leisure, and they're kind enough to literally give it to us. However, it takes a fair amount of effort to figure out how to get everything up and running. Since we didn't go with the professional paid version, we're not entitled to support. Of course that could be self-correcting if we were to make the step to buy into this and really use it. Then their technical support would be available to us to make strides for using it better. |
Pricing and Cost Advice | |
Information Not Available | A low cost long-term solution for non-critical situations. We are using the free, unlicensed version. The costs for this application, for the kind of job it does, are pretty decent. We're using their free Community Edition version. Some of the plugins that were previously free are not free now. The price point on SonarQube is good. |
 Use our free recommendation engine to learn which Software Development Analytics solutions are best for your needs. 390,232 professionals have used our research since 2012. | |
Ranking  | |
Views 4,914 Comparisons 3,674 Reviews 1 Average Words per Review 129 Avg. Rating 5.0 | Views 66,297 Comparisons 55,497 Reviews 14 Average Words per Review 577 Avg. Rating 7.4 |
Top Comparisons | |
 Compared 74% of the time.  Compared 7% of the time.  Compared 6% of the time. |  Compared 29% of the time. Compared 19% of the time. Compared 15% of the time. |
Also Known As | |
| CAST AIP | Sonar |
Learn | |
| CAST | SonarQube Video Not Available |
Overview | |
CAST Application Intelligence Platform (AIP), a result of over $130M in R&D investment over two decades, is an enterprise-grade software measurement and quality analysis solution designed to analyze multi-tiered, multi-technology applications for technical vulnerabilities and adherence to architectural and coding standards and then provide business relevant information to the IT organization through various dashboards and products built with end users in mind.
CAST’s underlying system-level analysis technology assesses both the health of an application, as measured through numerous health factors, as well as specific structural and system-level defects that drive performance and stability issues providing true system level analysis. | SonarQube is the central place to manage code quality, offering visual reporting on and across projects and enabling to replay the past to follow metrics evolution |
Offer | |
Learn more about CAST Application Intelligence Platform | Learn more about SonarQube |
Sample Customers | |
| Steria, T-Systems MMS, Atos Origin, Accenture, Capgemini | Bank of America, Siemens, Cognizant, Thales, Cisco, eBay |
Top Industries | |
Software R&D Company45% Government12% Comms Service Provider8% Insurance Company6% | Financial Services Firm36% Healthcare Company7% Government7% Wireless Company7% Software R&D Company36% Comms Service Provider12% Financial Services Firm8% Media Company6% |
Company Size | |
No Data Available | Small Business22% Midsize Enterprise22% Large Enterprise56% Small Business17% Midsize Enterprise3% Large Enterprise80% |
See also CAST Application Intelligence Platform Reviews, SonarQube Reviews, and our list of Best Software Development Analytics Companies.
We monitor all Software Development Analytics reviews to prevent fraudulent reviews and keep review quality high. We do not post
reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference
with LinkedIn, and personal follow-up with the reviewer when necessary.