SonarCloud: cybersecurity software

SonarCloud has the benefit of winning your developer's hearts due to its initial product focus on bug squashing and the ability to ingest a wide variety of reports. While the SAST functionalities are newer, they robust enough to warrant the add-on to their code health scanning. Great choice for developer only teams with low risk products.

What SonarCloud is

SonarCloud has the benefit of winning your developer's hearts due to its initial product focus on bug squashing and the ability to ingest a wide variety of reports. While the SAST functionalities are newer, they robust enough to warrant the add-on to their code health scanning. Great choice for developer only teams with low risk products. The vendor site is sonarcloud.io. This profile is an entry in the oneNorma directory, not a vendor landing page.

What SonarCloud covers

SonarCloud is in the catalog for these capabilities. Categories: SAST. Catalog tags: Hands-on, Open Source, and Best for Startups.

How to evaluate SonarCloud in a security program

Use SonarCloud as a stack candidate, not as diligence evidence. The oneNorma score for SonarCloud is 4.5/10 (percentile 27). If the real gap is in SAST, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what sonarcloud.io publishes. Contrast it with pentesting and Security Cloud & Compliance.

Classification

Categories

SAST

Tags

Hands-onOpen SourceBest for Startups

Capabilities by category

SAST

Enterprise

Frequently asked questions

What is SonarCloud?

SonarCloud has the benefit of winning your developer's hearts due to its initial product focus on bug squashing and the ability to ingest a wide variety of reports. While the SAST functionalities are newer, they robust enough to warrant the add-on to their code health scanning. Great choice for developer only teams with low risk products. Site: sonarcloud.io.

Which categories does SonarCloud fall into?

SonarCloud appears in the oneNorma directory under SAST. Use those labels to compare it with other vendors for the same problem, not as an official ranking.

Does oneNorma resell or implement SonarCloud?

No. The SonarCloud profile (sonarcloud.io) is for inventory and comparison. oneNorma delivers offensive and compliance evidence (pentesting, cloud compliance), not a vendor license.

Other cybersecurity vendors

More profiles from the vendor directory.