TrustRadius: an HG Insights company

Save this comparison

Save this comparison

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    Mimecast Security Behavior Management

    Score7.9 out of 10
    N/AMimecast Awareness Training equips security teams to identify and reduce human-driven risk across their entire organization. The security awareness and human risk management solution works to continuously inspire awareness, transform behavior, and reduce the likelihood of security incidents caused by human error.N/A

    SonarQube

    Score8.7 out of 10
    N/ASonarQube is an automated code review solution, serving as the verification layer for code quality and SDLC security. SonarQube is used to ensure that code is secure, reliable, and maintainable. It is available through SaaS or self-managed deployment.

    $34

    per month Recommended for teams <50 developers

    Pricing
    Mimecast Security Behavior ManagementSonarQube
    Editions & Modules
    No answers on this topic
    SonarQube Community Build
    $0
    (open source)
    Self-managed: Developer
    Starting at $720 annually
    per year per installation
    Self-managed: Enterprise
    Contact sales for pricing
    per year per installation
    Cloud-based: Enterprise
    Contact sales for pricing
    per year per installation
    Cloud-based: Teams
    Starting at $34 per month
    per month per installation
    Self-managed: Data Center
    Contact sales for pricing
    per year per installation
    Offerings
    Pricing Offerings
    Mimecast Security Behavior ManagementSonarQube
    Free Trial
    NoYes
    Free/Freemium Version
    NoYes
    Premium Consulting/Integration Services
    NoNo
    Entry-level Setup FeeOptionalNo setup fee
    Additional Details——
    More Pricing Information
    Community Pulse
    Mimecast Security Behavior ManagementSonarQube
    Considered Both Products
    Mimecast
    No answer on this topic
    SonarSource Sarl
    No answer on this topic
    Key User Insights
    Would buy again
    75%
    Would buy again
    9 Answers
    100%
    Would buy again
    32 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    11 Answers
    100%
    Delivers good value for the price
    29 Answers
    Happy with the feature set
    83%
    Happy with the feature set
    10 Answers
    100%
    Happy with the feature set
    32 Answers
    Lived up to sales and marketing promises
    82%
    Lived up to sales and marketing promises
    9 Answers
    95%
    Lived up to sales and marketing promises
    18 Answers
    Implementation went as expected
    82%
    Implementation went as expected
    9 Answers
    100%
    Implementation went as expected
    27 Answers
    Features
    Mimecast Security Behavior ManagementSonarQube
    Security
    Comparison of Security features of Mimecast Security Behavior Management and SonarQube
    Feature
    Mimecast Security Behavior Management
    8.2
    12 Ratings
    6% below category average
    SonarQube
    -
    Ratings
    Single sign-on capability8.412 Ratings00 Ratings
    Role-based user permissions8.01 Ratings00 Ratings
    Security Awareness Training
    Comparison of Security Awareness Training features of Mimecast Security Behavior Management and SonarQube
    Feature
    Mimecast Security Behavior Management
    5.9
    12 Ratings
    37% below category average
    SonarQube
    -
    Ratings
    Training Content Library6.912 Ratings00 Ratings
    Multilingual Training Content5.15 Ratings00 Ratings
    Training Gamification7.01 Ratings00 Ratings
    Industry-Specific Security Training4.89 Ratings00 Ratings
    Individualized Security Training Plans5.710 Ratings00 Ratings
    Phishing Simulations7.810 Ratings00 Ratings
    Security Reporting5.212 Ratings00 Ratings
    Integration with Security Tech Stack4.811 Ratings00 Ratings
    Best Alternatives
    Mimecast Security Behavior ManagementSonarQube
    Small Businesses
    No answers on this topic
    No answers on this topic
    Medium-sized Companies
    Hoxhunt
    Score8.9 out of 10
    No answers on this topic
    Enterprises
    Proofpoint Security Awareness Training
    Score10 out of 10
    No answers on this topic
    All AlternativesView all alternativesView all alternatives
    User Ratings
    Mimecast Security Behavior ManagementSonarQube
    Likelihood to Recommend
    7.6
    (12 ratings)
    8.9
    (35 ratings)
    Likelihood to Renew
    5.4
    (2 ratings)
    -
    (0 ratings)
    Usability
    6.0
    (1 ratings)
    9.1
    (2 ratings)
    Availability
    9.1
    (1 ratings)
    -
    (0 ratings)
    Performance
    9.1
    (1 ratings)
    -
    (0 ratings)
    Support Rating
    6.5
    (2 ratings)
    9.0
    (1 ratings)
    Implementation Rating
    7.0
    (1 ratings)
    -
    (0 ratings)
    Configurability
    9.1
    (1 ratings)
    -
    (0 ratings)
    Contract Terms and Pricing Model
    9.1
    (1 ratings)
    -
    (0 ratings)
    Product Scalability
    9.1
    (1 ratings)
    -
    (0 ratings)
    Professional Services
    9.1
    (1 ratings)
    -
    (0 ratings)
    Vendor post-sale
    9.1
    (1 ratings)
    -
    (0 ratings)
    Vendor pre-sale
    9.1
    (1 ratings)
    -
    (0 ratings)
    User Testimonials
    Mimecast Security Behavior ManagementSonarQube
    Likelihood to Recommend
    Mimecast
    Staff is the single most significant danger to the cyber security posture of an organization. Before implementing Mimecast Awareness Training, staff had almost no awareness or concept of IT security or the potential risks. Staff attitudes have improved dramatically since introducing Awareness Training.
    Incentivized
    Read full review
    SonarSource Sarl
    SonarQube is excellent if you start using it at the beginning when developing a new system, in this situation you will be able to fix things before they become spread and expensive to correct. It’s a bit less suitable to use on existing code with bad design as it’s usually too expensive to fix everything and only allows you to ensure the situation doesn’t get worse.
    Incentivized
    Read full review
    Pros
    Mimecast
    • It provides relatable situations in a humourous and entertaining manner
    • It provides a wide range of topics and scenarios
    • Users can easily access the platform and test their knowledge
    • It gives us great tools to capture which users are doing well and the ones needing more attention and safeguarding
    Incentivized
    Read full review
    SonarSource Sarl
    • Detecting bugs and vulnerabilities: SonarQube can identify a wide range of bugs and vulnerabilities in code, such as null pointer exceptions, SQL injection, and cross-site scripting (XSS) attacks. It uses static analysis to analyze the code and identify potential issues, and it can also integrate with dynamic analysis tools to provide even more detailed analysis.
    • Measuring code quality: SonarQube can measure a wide range of code quality metrics, such as cyclomatic complexity, duplicated code, and code coverage. This can help teams understand the quality of their code and identify areas that need improvement.
    • Providing actionable insights: SonarQube provides detailed information about issues in the code, including the file and line number where the issue occurs and the severity of the issue. This makes it easy for developers to understand and address issues in the code.
    • Integrating with other tools: SonarQube can be integrated with a wide range of development tools and programming languages, such as Git, Maven, and Java. This allows teams to use SonarQube in their existing development workflow and take advantage of its powerful code analysis capabilities.
    • Managing technical debt: SonarQube provides metrics and insights on the technical debt on the codebase, enabling teams to better prioritize issues to improve the quality of the code.
    • Compliance with coding standards: SonarQube can check the code against industry standards like OWASP, CWE and more, making sure the code is compliant with security and coding standards.
    Incentivized
    Read full review
    Cons
    Mimecast
    • I would like to see better reporting for "Targeted Training"
    • Phishing Training Templates need to be more robust with the capability to spoof trusted domains.
    • Mimecast should also provide more Phishing Training Templates to customize.
    • To add custom modules to "Company Wide Training"
    Incentivized
    Read full review
    SonarSource Sarl
    • Importing a new custom quality profile on SonarQube is a bit tricky, it can be made easier
    • Every second time when we want to rerun the server, we have to restart the whole system, otherwise, the server stops and closes automatically
    • When we generate a new report a second time and try to access the report, it shows details of the old report only and takes a lot of time to get updated with the details of the new and fresh report generated
    Incentivized
    Read full review
    Likelihood to Renew
    Mimecast
    I’ve parked the slider at a solid 10 because the platform keeps proving its worth every quarter. Staff phishing‑click rates have plunged from double digits to low single digits, our audit team finally stopped chasing overdue modules, and—bonus—engagement surveys show people actually enjoy the bite‑sized, comedic flavoured content. The built‑in reporting lets me walk straight into the boardroom with clean metrics. Minimal admin, measurable behaviour change, and zero eye‑rolls from end‑users—hard to ask for more.
    Incentivized
    Read full review
    SonarSource Sarl
    No answers on this topic
    Usability
    Mimecast
    I pegged usability at a full‑blown 10 because even my least tech‑savvy colleagues—think “still double‑clicks web links” level—navigate the portal without ringing the help‑desk. Single‑sign‑on drops them straight into the next module, the interface looks like Netflix for cyber nerds, and the progress bar shouts “two minutes left” instead of burying them in menus. On the admin side, I spin up campaigns in three clicks, clone content on the fly, and the drag‑and‑drop scheduling means I can rejig a whole quarter’s plan during the time it takes the kettle to boil. Zero training manuals, zero grumbles, zero excuses—just smooth sailing from login to completion.
    Incentivized
    Read full review
    SonarSource Sarl
    It can improve in some user experience and usability parts, like the code view and the way we assign issues it's a bit hidden and not highlighted
    Incentivized
    Read full review
    Reliability and Availability
    Mimecast
    Its the best, hands down. Great, easy to use and on point content that injects some humour into the training makes it relevent whilst staying engaging. We have seen our engagement scores almost double since using Mimecast, with completion rates across the buisness above 90% compared to previous scores on less than 50%.
    Incentivized
    Read full review
    SonarSource Sarl
    No answers on this topic
    Performance
    Mimecast
    The product is quick and responsive. Emails alert the staff of new training content and provides a direct link to the training video. They watch, learn and than answer a brief question to test their knowledge. This feeds into the users risk profile in which additional training can be automatically applied based on a risk scores.
    Incentivized
    Read full review
    SonarSource Sarl
    No answers on this topic
    Support Rating
    Mimecast
    We have had a couple of instances where we needed to contact customer support for our minecast cyber awareness training. The team were great and easy to deal with. The problem in itself was minor, and turned out to be our issues and understanding setup, however the mimecase team walked us through the issue and it was resolved exceptionally quick.
    Incentivized
    Read full review
    SonarSource Sarl
    We we easily able to integrate the SonarQube steps into our TFS process via the Microsoft Marektplace, we didn't have the need to call SonarQube support. We've used their online documentation and community forum if we ran into any issues.
    Incentivized
    Read full review
    Implementation Rating
    Mimecast
    I gave implementation a rock‑solid 10 because, frankly, it was smoother than a servo sausage roll at 2 a.m. SSO clicked in on the first try, directory sync hoovered up all the user data without mangling job titles, and change comms went out on time—no “surprise training” backlash. Key insight: involve your internal comms or HR crew from day zero so the launch emails feel like a friendly nudge, not a phishing attempt. We also ran a pilot with our most cynical techs; their nit‑picks helped us tweak permissions before unleashing it on the masses. Finally, schedule the baseline phishing test after staff receive the kickoff memo—sounds obvious, but it spares you the angry “gotcha” emails and makes the resulting metrics actually meaningful.
    Incentivized
    Read full review
    SonarSource Sarl
    No answers on this topic
    Alternatives Considered
    Mimecast
    Mimecast's content is much higher quality. KnowBe4's sales tactics are much more pushy. Customer service has been better with Mimecast in general, though Mimecast's UX/UI is a lot more confusing a less user-friendly to navigate than KnowBe4. It is difficult to group individuals together, let alone manage if the directory integration is not used.
    Incentivized
    Read full review
    SonarSource Sarl
    SonarQube is an open-source. It's a scalable product. The costs for this application, for the kind of job it does, are pretty descent. Pipeline scan is more secured in SonarQube. Its a very good tool and its support multiple languages. Its main core competency is of static code analysis and that is why SonarQube exists and it does it exceedingly well. The quality of scan on code convention, best practices, coding standards, unit test coverage etc makes them one of the best competent tool in the market
    Incentivized
    Read full review
    Contract Terms and Pricing Model
    Mimecast
    Honestly, the pricing model is about as painless as a public‑holiday Monday—straightforward per‑user cost, no sneaky “module packs” hiding in the fine print, and the nonprofit discount went down a treat. If I had to nit‑pick for the sake of continuous improvement, I’d love two tweaks:


    Seat‑band granularity. The jump between tiers can feel like falling off a cliff when you’re hovering near the threshold; a smaller step (say, every 50 users) would soften the blow on fast‑growing teams.


    Mid‑term seat reductions. We negotiated a generous +10 % buffer, but if headcount ever drops, a pro‑rata credit instead of waiting for renewal would be ace.


    Minor quibbles, though—the value’s still a raging 10/10.
    Incentivized
    Read full review
    SonarSource Sarl
    No answers on this topic
    Scalability
    Mimecast
    Mimecast Awareness Training is so easy to use, a child could set it up. One of the major benefits of the platform is its ability to easily prepare a years worth of content. As new users enter the organisation, its integration with Microsoft makes it easy to onboard the user and have then catch up on training.
    Incentivized
    Read full review
    SonarSource Sarl
    No answers on this topic
    Professional Services
    Mimecast
    I’m handing professional services a loud 10 because they rocked up like a pit‑crew at Bathurst and had us race‑ready in record time. Two half‑day workshops, and suddenly we’d nailed SSO, tuned the Azure AD connector, and had a fistful of custom phishing templates dripping with Aussie‑isms (Bunnings receipts, anyone?). Their consultant even whipped up a cheeky PowerShell script to clean up dodgy display‑name attributes, saving our sys‑ops hours of beard‑scratching. On top of that, they translated our dull “Information Handling” policy into bite‑sized language for the learner splash screens—legal loved it, staff actually read it. Zero scope creep, crystal‑clear handover docs, and follow‑up calls that felt more like mentoring than billable hours. Worth every cent.
    Incentivized
    Read full review
    SonarSource Sarl
    No answers on this topic
    Return on Investment
    Mimecast
    • We have established a measurable increase in awareness for users to the business
    • Quicker onboarding for new employees and getting up to speed in terms of awareness
    • Real world reduction in users live bad links and bad email interaction
    Incentivized
    Read full review
    SonarSource Sarl
    • Positive ROI from the standpoint of flagging several issues that would have otherwise likely been unaddressed and caused more time to be spent closer to launch
    • Slightly positive ROI from time-saving perspective (it's an automated check which is nice, but depending on the issues it finds, can take developers time to investigate and resolve)
    Read full review
    ScreenShots

    SonarQube Screenshots

    Screenshot of Projects.Screenshot of Static Application Security Testing.Screenshot of Software Composition Analysis.