G2 Vendor Directory

SonarQube vs. Invicti

A side-by-side comparison based on G2 review data.

MetricSonarQube

by SonarSource Sàrl

Invicti

by Invicti Security

Overall rating4.44.5
Review count15572
Ease of use8.79.3
Ease of setup8.49.2
Quality of support8.49.0
Meets requirements9.09.2
NPS64.05228872.463768
Small Business17.6%23.9%
Mid-Market40.5%29.6%
Enterprise41.8%46.5%
Total page views1,802725
Total LLM citations29,228303

SonarQube

Sonar, the industry standard for code verification and automated code review, helps reduce outages, improve security, and lower risks associated with AI and agentic coding. As an independent verification platform, Sonar enables organizations to securely develop at the speed of AI. Sonar is the foundation for high-performance software engineering, analyzing over 750 billion lines of code daily to ensure applications are secure, reliable, and maintainable.

Pros

  • Code Quality
  • Features
  • Issue Identification
  • Ease of Use
  • Easy Integrations
  • Integrations

Invicti

Invicti (formerly known as Netsparker) is an enterprise application and API security testing platform that helps organizations secure thousands of web applications and APIs at scale while dramatically reducing the risk of attack. Combining advanced DAST and IAST capabilities in a single platform, Invicti enables security teams to continuously identify, prioritize, and remediate vulnerabilities across complex modern environments with confidence and automation.

Pros

  • Ease of Use
  • Scanning Technology
  • Vulnerability Detection
  • Reporting Quality
  • Features
  • Vulnerability Identification