TrustRadius: an HG Insights company

CAST Highlight vs. SonarQube for IDE

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    CAST Highlight

    Score9 out of 10
    Enterprise companies (1,001+ employees)
    CAST headquartered in New York offers Highlight, an application portfolio management solution providing software component analysis , application security, application benchmarking, and technical due diligence.

    $25,000

    per year

    SonarQube for IDE

    Score8.1 out of 10
    N/ASonarQube for IDE is a free IDE plugin that helps developers by detecting and highlighting issues in their code in real time. Like a spell checker, SonarLint detects Bugs, code smells, and Security Vulnerabilities as code is written, and offers guidance.

    $0

    Pricing
    CAST HighlightSonarQube for IDE
    Editions & Modules
    Cloud
    25k
    Portfolio Size 25
    SCA
    $26k
    Portfolio Size 25
    Complete
    33k
    Portfolio Size 25
    No answers on this topic
    Offerings
    Pricing Offerings
    CAST HighlightSonarQube for IDE
    Free Trial
    YesYes
    Free/Freemium Version
    NoYes
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional DetailsAnnual Pricing by Size of Application Portfolio—
    More Pricing Information
    User Ratings
    CAST HighlightSonarQube for IDE
    Likelihood to Recommend
    10.0
    (1 ratings)
    8.0
    (1 ratings)
    Support Rating
    10.0
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    CAST HighlightSonarQube for IDE
    Likelihood to Recommend
    CAST
    I think CAST is a great tool to give insight into your applications. The tool can be met with resistance from team members as the tool is going to expose defects that should be addressed. Out of the box, it may need some tailoring to focus on certain areas so that you are not overwhelmed with defects the first time you scan your code. But ultimately, you will want to eliminate all defects in the code and have all violations turned on.
    Incentivized
    Read full review
    SonarSource Sarl
    No answers on this topic
    Pros
    CAST
    • Identifies common coding vulnerabilities.
    • Compares code to industry best practices.
    • Assesses the code for data privacy compliance.
    Incentivized
    Read full review
    SonarSource Sarl
    • SonarLint highlights all the issues in our codes and also displays the severity of each issue.
    • SonarLint also provides suggestions for how to fix those code issues which are highlighted.
    • SonarLint starts the processing of the file as soon as it is opened and highlights all the issues which it found.
    • When we fix the issue, we don't even need to create a new build or generate fresh code quality report, as soon as we save the file with the changes, it does the processing again and shows the result if the issue is fixed or not.
    • SonarLint saves a lot of time and effort by saving us from doing fresh build every time and generating new code quality report every time, thus increasing the efficiency and output which is in return beneficial for the client.
    Incentivized
    Read full review
    Cons
    CAST
    • Code scans could be faster. A large application may need to be broken down into smaller sub-applications in order to facilitate faster code scans.
    • We spent a lot of time trying to figure out how to best structure our code base in the application for ultimate performance.
    Incentivized
    Read full review
    SonarSource Sarl
    • Sometimes, SonarLint does not highlight the issues in the code correctly.
    • The severity of the issues highlighted is according to the default rules set, we should also be given authority to set the severity of the issues.
    • The default fixes which SonarLint provides should be more enhanced and there should be more fixes available.
    • Sometimes it takes a lot of time for processing of the file when any new file is loaded or changes are saved in a file.
    Incentivized
    Read full review
    Support Rating
    CAST
    Tech support and pro services are top-notch.
    Incentivized
    Read full review
    SonarSource Sarl
    No answers on this topic
    Alternatives Considered
    CAST
    These other tools only do a part of what CAST does. CAST gives a comprehensive view into the code looking at all aspects, code quality, security, maintainability, vulnerability, privacy, reuse, etc. These other tools only focus on one or two dimensions.
    Incentivized
    Read full review
    SonarSource Sarl
    SonarLint works along with SonarQube
    Incentivized
    Read full review
    Return on Investment
    CAST
    • I believe once we had the tool working for our code base, we immediately saw positive ROI.
    • We spent some time getting to where our code code be scanned efficiently but some of that was trying to do things ourselves instead of fully utilizing Cast Professional Services. I highly recommend to do an engagement with CAST to have them help setup the tool in your environment or to run it in the cloud for you.
    Incentivized
    Read full review
    SonarSource Sarl
    • SonarLint helps in achieving all the business requirements in a more efficient way.
    • It reduces the manual and redundant work which we would have to do else every time if we did not use SonarLint.
    • SonarLint helps in maintaining code quality, and thus also highlights the loopholes for the cyber attacks and phishing attacks.
    • SonarLint makes work easy and helps the developer to invest less time in manual work thereby increasing their capacity to deliver the maximum output to the client.
    Incentivized
    Read full review
    ScreenShots

    CAST Highlight Screenshots

    Screenshot of Application Portfolio ManagementScreenshot of Software Composition AnalysisScreenshot of Portfolio Advisor for Open SourceScreenshot of Portfolio Advisor for CloudScreenshot of Cloud Migration Blockers and Boosters

    SonarQube for IDE Screenshots

    Screenshot of where SonarQube for IDE identifies and highlights issues in a Java project within VS Code. It also explains why this is an issue, how to fix it, and offers more educational content to help developers grow. SonarLint uncovers issues in over 30 languages, frameworks and IaC platforms. SonarLint is available for VS Code, Visual Studio, Eclipse and JetBrains IDEs.Screenshot of how when connected to either SonarCloud or SonarQube the developer can leverage  SonarQube for IDE to identify complex bugs, share code quality expectations with their team, perform deeper issue analysis, enjoy smart notifications, and unlock additional language analysis opportunities. Connecting is easy and guided for a rapid setup, as seen here in the image.