What users are saying about

CAST Highlight vs SonarQube

CAST Highlight
2 Ratings
SonarQube
38 Ratings

CAST Highlight

2 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>
Score 9.5 out of 100

Based on 2 reviews and ratings

SonarQube

38 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow noopener'>trScore algorithm: Learn more.</a>
Score 8.6 out of 100

Based on 38 reviews and ratings

Likelihood to Recommend

CAST Highlight

I think CAST is a great tool to give insight into your applications. The tool can be met with resistance from team members as the tool is going to expose defects that should be addressed. Out of the box, it may need some tailoring to focus on certain areas so that you are not overwhelmed with defects the first time you scan your code. But ultimately, you will want to eliminate all defects in the code and have all violations turned on.

Read full review

Gene Baker | TrustRadius Reviewer
Gene Baker
View all 1 answers on this topic

SonarQube

We have a headache every time when making a new commit+push, because:
  • Check rules could be tight and motivate developers to change the source code.
  • Sonar rules insist on their own rules and no way for trade.
  • Sometimes we missed that some piece of code does not cover by the test, so we need to return to the task again
  • SonarCube + SonarLint helps us to achieve the best quality source code but takes so much time for it.

Read full review

Aleksei Jegorov | TrustRadius Reviewer
Aleksei Jegorov
View all 13 answers on this topic

Pros

CAST Highlight

  • Identifies common coding vulnerabilities.
  • Compares code to industry best practices.
  • Assesses the code for data privacy compliance.

Read full review

Gene Baker | TrustRadius Reviewer
Gene Baker
View all 1 answers on this topic

SonarQube

  • Best thing about it is that it offers an online instance (SonarCloud) where we can dry run an open source project by forking a github repository
  • Provides detailed analysis of the stacks that it checks for bugs and issues in code stacks.
  • Provides a good amount of documentation on how for configuration and installation and how to use it.
  • Provides a strong integration with azure devops and jenkins for creating DSL pipelines.

Read full review

Arush Soel | TrustRadius Reviewer
Arush Soel
View all 13 answers on this topic

Cons

CAST Highlight

  • Code scans could be faster. A large application may need to be broken down into smaller sub-applications in order to facilitate faster code scans.
  • We spent a lot of time trying to figure out how to best structure our code base in the application for ultimate performance.

Read full review

Gene Baker | TrustRadius Reviewer
Gene Baker
View all 1 answers on this topic

SonarQube

  • SonarQube motivates us to get a big team to write these endless tests to cover everything.
  • Integration with Jira and Jenkins has some tricky moments.
  • Setup process could take a lot of time.
  • Sometimes check rules could be very strict, like 'too many parameters in constructor.'

Read full review

Aleksei Jegorov | TrustRadius Reviewer
Aleksei Jegorov
View all 13 answers on this topic

Support Rating

CAST Highlight

CAST Highlight 10.0
Based on 1 answer
Tech support and pro services are top-notch.

Read full review

Gene Baker | TrustRadius Reviewer
Gene Baker
View all 1 answers on this topic

SonarQube

SonarQube 9.0
Based on 2 answers
We we easily able to integrate the SonarQube steps into our TFS process via the Microsoft Marektplace, we didn't have the need to call SonarQube support. We've used their online documentation and community forum if we ran into any issues.

Read full review

Anonymous | TrustRadius Reviewer
Verified User
View all 2 answers on this topic

Alternatives Considered

CAST Highlight

These other tools only do a part of what CAST does. CAST gives a comprehensive view into the code looking at all aspects, code quality, security, maintainability, vulnerability, privacy, reuse, etc. These other tools only focus on one or two dimensions.

Read full review

Gene Baker | TrustRadius Reviewer
Gene Baker
View all 1 answers on this topic

SonarQube

SonarQube is an open-source. It's a scalable product. The costs for this application, for the kind of job it does, are pretty descent. Pipeline scan is more secured in SonarQube. Its a very good tool and its support multiple languages. Its main core competency is of static code analysis and that is why SonarQube exists and it does it exceedingly well. The quality of scan on code convention, best practices, coding standards, unit test coverage etc makes them one of the best competent tool in the market

Read full review

Debobrata Bose | TrustRadius Reviewer
Debobrata Bose
View all 13 answers on this topic

Return on Investment

CAST Highlight

  • I believe once we had the tool working for our code base, we immediately saw positive ROI.
  • We spent some time getting to where our code code be scanned efficiently but some of that was trying to do things ourselves instead of fully utilizing Cast Professional Services. I highly recommend to do an engagement with CAST to have them help setup the tool in your environment or to run it in the cloud for you.

Read full review

Gene Baker | TrustRadius Reviewer
Gene Baker
View all 1 answers on this topic

SonarQube

  • Our client is quite pleased with the demonstration of this tools
  • Our organisation is using a community edition right now but is planning to migrate to a enterprise version to use it commercially.
  • It is quite a costly tool but our organisation is willing to buy it for its enhanced features and security

Read full review

Arush Soel | TrustRadius Reviewer
Arush Soel
View all 13 answers on this topic

Pricing Details

CAST Highlight

General

Free Trial
—
Free/Freemium Version
—
Premium Consulting/Integration Services
—
Entry-level set up fee?
No

CAST Highlight Editions & Modules

—
Additional Pricing Details
—

SonarQube

General

Free Trial
Yes
Free/Freemium Version
Yes
Premium Consulting/Integration Services
Yes
Entry-level set up fee?
No

SonarQube Editions & Modules

Edition
CommunityFree
Developer EDITIONStarts at $1502
Enterprise EDITIONStarts at $20,0003
Data Center EDITIONStarts at $130,0004
  1. 100,000 Lines of Code
  2. 1 Million Lines of Code
  3. 20 Million Lines of Code
Additional Pricing Details
—

Add comparison