1. Home
  2. ...
  3. Software Composition Analysis Tools
  4. Mend.io
  5. SonarQube Server (formerly SonarQube)
  6. Mend.io-vs-SonarQube Server (formerly SonarQube)

Compare Mend.io and SonarQube Server (formerly SonarQube)

Save
    Log in to your account
    to save comparisons,
    products and more.
Add Product
Mend.io
Mend.io
(112)
4.3 out of 5
Mend.io
By Mend
SonarQube Server (formerly SonarQube)
SonarQube Server (formerly SonarQube)
(90)
4.4 out of 5
SonarQube Server (formerly SonarQube)
By SonarSource S.A
Get a quote
At a Glance
Mend.io
Mend.io
Star Rating
(112)4.3 out of 5
Market Segments
Small-Business (39.0% of reviews)
Information
Entry-Level Pricing
No pricing available
Learn more about Mend.io
SonarQube Server (formerly SonarQube)
SonarQube Server (formerly SonarQube)
Star Rating
(90)4.4 out of 5
Market Segments
Enterprise (43.8% of reviews)
Information
Entry-Level Pricing
Free
Browse all 4 pricing plans
Featured Products
OX Security
Sponsored
You’re seeing this ad based on the product’s relevance to your search. Sponsored content does not receive preferential treatment in any of G2’s ratings.
OX Security
(50)
Static Code Analysis
Visit WebsiteVisit Website
Axify
Sponsored
You’re seeing this ad based on the product’s relevance to your search. Sponsored content does not receive preferential treatment in any of G2’s ratings.
Axify
(6)
Static Code Analysis
Visit WebsiteVisit Website
minware
Sponsored
You’re seeing this ad based on the product’s relevance to your search. Sponsored content does not receive preferential treatment in any of G2’s ratings.
minware
(0)
Static Code Analysis
Visit WebsiteVisit Website
Pricing
Entry-Level Pricing
Mend.io
No pricing available
SonarQube Server (formerly SonarQube)
Community Edition
Free
Browse all 4 pricing plans
Free Trial
Mend.io
Free Trial is available
SonarQube Server (formerly SonarQube)
Free Trial is available
Ratings
Meets Requirements
8.6
81
8.7
77
Ease of Use
8.3
82
8.3
79
Ease of Setup
8.1
50
7.8
50
Ease of Admin
8.2
50
8.3
46
Quality of Support
8.7
67
8.0
62
Has the product been a good partner in doing business?
8.8
46
8.3
40
Product Direction (% positive)
8.6
75
8.0
74
Features by Category
Static Application Security Testing (SAST)Hide 13 FeaturesShow 13 Features
7.4
15
7.5
17
Administration
7.6
7
7.7
14
7.7
8
6.3
15
Analysis
7.3
11
7.6
16
7.6
11
8.2
15
8.2
11
9.0
17
7.6
11
9.1
17
Testing
7.2
10
7.2
13
Feature Not Available
6.3
14
7.2
9
6.3
16
7.7
10
7.1
13
Feature Not Available
7.6
12
7.4
9
8.5
16
5.0
9
6.6
16
Container SecurityHide 11 FeaturesShow 11 Features
8.2
14
Not enough data
Administration
8.3
7
Not enough data
8.6
7
Not enough data
9.1
9
Not enough data
8.0
10
Not enough data
Monitoring
8.1
6
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Protection
7.9
8
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Software Development Analytics ToolsHide 6 FeaturesShow 6 Features
Not enough data
7.9
26
Functionality
Not enough data
7.8
24
Not enough data
8.3
23
Not enough data
8.3
22
Management
Not enough data
7.5
20
Not enough data
7.6
18
Not enough data
7.8
20
Software Composition AnalysisHide 6 FeaturesShow 6 Features
8.6
53
Not enough data
Functionality - Software Composition Analysis
8.5
45
Not enough data
8.5
47
Not enough data
8.6
44
Not enough data
Effectiveness - Software Composition Analysis
8.2
45
Not enough data
8.8
44
Not enough data
8.6
45
Not enough data
Secure Code ReviewHide 6 FeaturesShow 6 Features
Not enough data
7.5
28
Documentation
Not enough data
7.7
26
Not enough data
7.4
26
Not enough data
8.2
27
Security
Not enough data
6.8
24
Not enough data
7.5
23
Not enough data
8.0
24
Application Security Posture Management (ASPM)Hide 9 FeaturesShow 9 Features
Not enough data
Not enough data
Risk management - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration and efficiency - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Reporting and Analytics - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Software Bill of Materials (SBOM)Hide 6 FeaturesShow 6 Features
Not enough data
Not enough data
Functionality - Software Bill of Materials (SBOM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Management - Software Bill of Materials (SBOM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Cloud SecurityHide 9 FeaturesShow 9 Features
Not enough data
Not enough data
Cloud Visibility
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Categories
Categories
Shared Categories
Mend.io
Mend.io
SonarQube Server (formerly SonarQube)
SonarQube Server (formerly SonarQube)
Mend.io and SonarQube Server (formerly SonarQube) are categorized as Static Application Security Testing (SAST)
Unique Categories
Mend.io
SonarQube Server (formerly SonarQube)
Reviews
Reviewers' Company Size
Mend.io
Mend.io
Small-Business(50 or fewer emp.)
39.0%
Mid-Market(51-1000 emp.)
34.3%
Enterprise(> 1000 emp.)
26.7%
SonarQube Server (formerly SonarQube)
SonarQube Server (formerly SonarQube)
Small-Business(50 or fewer emp.)
20.2%
Mid-Market(51-1000 emp.)
36.0%
Enterprise(> 1000 emp.)
43.8%
Reviewers' Industry
Mend.io
Mend.io
Computer Software
33.3%
Information Technology and Services
14.3%
Financial Services
6.7%
Telecommunications
4.8%
Computer & Network Security
4.8%
Other
36.2%
SonarQube Server (formerly SonarQube)
SonarQube Server (formerly SonarQube)
Computer Software
23.6%
Information Technology and Services
22.5%
Financial Services
7.9%
Hospital & Health Care
4.5%
Computer & Network Security
4.5%
Other
37.1%
Most Helpful Reviews
Mend.io
Mend.io
Most Helpful Favorable Review
Anuradha W.
AW
Anuradha W.
Verified User in Computer Software

Really impressed with their service, and the response time when an unknown library needed resolution. Very detailed information for most of the open source dependencies. Dependency version history and their vulnerabilities have been helpful. UI and...

Most Helpful Critical Review
Mohit P.
MP
Mohit P.
Verified User in Financial Services

It would be great if an auto dependency resolution/management is provided for any finding.

SonarQube Server (formerly SonarQube)
SonarQube Server (formerly SonarQube)
Most Helpful Favorable Review
DK
Dimitar K.
Verified User in Computer Software

The tool is really good for Static Code Analysis - detecting bugs, vulnerabilities and code smells. CI/CD pipeline integrations are really usesfull and cruical as part of the SDLC. Another great feature is the custom rules - for the advanced users. Apart...

Most Helpful Critical Review
Verified User
G
Verified User in Medical Devices

My experience as a SonarSource customer shows that they manifest little interest in small customers. In addition, their quality policy is poor when it comes to fixing major bugs in their code. For instance, this ticket has now been open for 1 year without...

Alternatives
Mend.io
Mend.io Alternatives
Snyk
Snyk
Add Snyk
GitHub
GitHub
Add GitHub
GitLab
GitLab
Add GitLab
Veracode Application Security Platform
Veracode Application Security Platform
Add Veracode Application Security Platform
SonarQube Server (formerly SonarQube)
SonarQube Server (formerly SonarQube) Alternatives
Embold
Embold
Add Embold
GitHub
GitHub
Add GitHub
GitLab
GitLab
Add GitLab
Coverity
Coverity
Add Coverity
Discussions
Mend.io
Mend.io Discussions
What is a contributing developer?
1 comment
Official Response from Mend.io
“Contributing Developer” means any employee or contractor who at any point (1) accesses or uses the WhiteSource product; (2) develops the code to be scanned...Read more
Do you offer an on-premise option?
1 comment
Official Response from Mend.io
WhiteSource is a cloud-based service, but we also offer an on-premise option, if necessary. It’s important to emphasize that we do not scan your code. We...Read more
Why are you pricing per contributing developers?
1 comment
Official Response from Mend.io
WhiteSource automates and manages open source components throughout the Software Development Life Cycle (SDLC). Therefore, pricing based on the number of...Read more
See all discussions
SonarQube Server (formerly SonarQube)
SonarQube Server (formerly SonarQube) Discussions
Monty the Mongoose crying
SonarQube Server (formerly SonarQube) has no discussions with answers
See all discussions
Ask Mend.io a QuestionContact Mend.io
Ask SonarQube Server (formerly SonarQube) a QuestionContact SonarQube Server (formerly SonarQube)

Spotlight Categories

Add Product
Mend.io
Mend.io
SonarQube Server (formerly SonarQube)
SonarQube Server (formerly SonarQube)
Get a quote