Name: SonarQube Advanced Security
Brand: Sonar

SonarQube Advanced Security by Sonar — Product Research | aVenture

SonarQube Advanced Security is an enterprise extension of the SonarQube platform that adds software composition analysis and advanced SAST to core quality and security analysis. It identifies known vulnerabilities in direct and transitive open source dependencies, prioritizing them by severity and exploitability, and detects malicious packages entering the CI/CD pipeline.

The add-on provides automated license detection and policy enforcement, software bill of materials export in CycloneDX and SPDX formats, and dependency-aware taint analysis that traces data flow across third-party libraries for Java and C#. Findings integrate into the SonarQube workflow with security reporting for standards including OWASP, CWE, and PCI DSS.

SonarQube Advanced Security - Direct Competitors

Attribute	SonarQube Advanced Security	Codacy - Code Quality and Security Platform	GitHub Advanced Security	Semgrep Code	Snyk Code
Provider	Sonar sonarsource.com457M raised · Series B	Codacy codacy.com16M raised · Series B	GitHub7.8B raised	Semgrep semgrep.dev93M raised · Series C	Snyk snyk.io1.2B raised · Series B
Founded	2008	2012	2008	2017	2015
Sells To	Enterprise, Software Developers	Developer	Enterprise	Enterprise	Enterprise
Pricing Model	B2B Subscription, Freemium	B2B Subscription, Subscription	Recurring, Software, Usage-based	Recurring, SaaS	Recurring, Software
Ownership	Privately Held, Venture Capital	—	Acquired, Equity, Venture Capital	Private Equity, Venture Capital	Venture Capital