Have to give Sandro Artioli right. Q&A: Sonarqube. Security: Checkmarx. If you have the time and money you could as well create the necessary rules for Sonarqube to turn it into a security assessment tool, but that may be complicated ( depends on the language you are using)…