EVERYTHING XIAOMI
Get listed
CodeSonar logo

CodeSonar

CodeSonar is a static application security testing tool for finding security and quality defects in source code and compiled binaries.

Place
#13 of 24
Score
6.0
CodeSonar's website

What CodeSonar is

CodeSonar is a static application security testing tool for finding security and quality defects in source code and compiled binaries. It supports C/C++, Java, C#, Kotlin, Python, Go, Rust, JavaScript, and TypeScript. Its analysis uses abstract interpretation and symbolic execution to explore feasible execution paths across procedures and modules. It can also examine binaries in mixed-language environments, including when source code is missing. Security coverage includes OWASP Top 10, SANS/CWE 25, SEI CERT C/C++, and DISA STIG; supported coding standards include MISRA-C, MISRA-C++, AUTOSAR C++, JSF++, and CERT. Named integrations include Visual Studio, GitLab, Jira, Jenkins, and VS Code, with support for pull request scans, custom security rules, IDEs, and CI/CD. A report builder exports PDF, HTML, or XML. AdaCore offers on-premises and air-gapped deployment, including on workstations, DevOps pipelines, and private clouds. CodeSonar is pre-qualified for projects to ISO 26262, IEC 61508, and EN 50128 safety levels; AdaCore also reports project qualification up to DO-178B/C DAL-A using DO-330. Pricing is on request, and a trial is available.

Good

  • Analyzes source code and compiled binaries.
  • Supports ten listed programming languages.
  • Includes named security coverage and coding standards.
  • Exports reports in PDF, HTML, or XML.
  • Offers on-premises and air-gapped deployment.

Watch out

  • Pricing is available on request.
  • A trial must be requested.
  • Supported Linux distributions require glibc 2.39 or higher.

Who it suits

CodeSonar may suit teams seeking static security and quality analysis across supported languages, including projects that need binary analysis or specific coding standards. Its deployment options include on-premises and air-gapped environments.

Verdict

CodeSonar covers source and binary analysis, with integrations for development tools and CI/CD workflows.

Plans and prices

From CodeSonar's own pricing page, checked 8 Oct 2026.

All about pricing
PlanPriceWhat it gives you
CodeSonarPriced on requestFlexible licensing options based on usage size, team needs, and deployment configuration

The facts

Each one read from CodeSonar's own pages, with the date it was checked.

What it does

Analysis
Abstract interpretation and symbolic execution explore feasible execution paths across procedures and modules to detect defects.checked 8 Oct 2026
Binary analysis
CodeSonar can analyze compiled binaries and mixed-language environments, including cases where source code is missing.checked 8 Oct 2026
Coding standards
Supported standards include MISRA-C, MISRA-C++, AUTOSAR C++, JSF++, and CERT.checked 8 Oct 2026
Deployment
AdaCore says its tools can be installed on premises or in air-gapped environments, including on developer workstations, DevOps pipelines, and private clouds.checked 8 Oct 2026
Integrations
The product page identifies Visual Studio, GitLab, Jira, Jenkins, and VS Code integrations, and says CodeSonar integrates with project management, CI/CD workflows, and developer IDEs.checked 8 Oct 2026
Languages
It supports C/C++, Java, C#, Kotlin, Python, Go, Rust, JavaScript, and TypeScript.checked 8 Oct 2026
Purpose
CodeSonar is a static application security testing solution that finds security and quality defects in code.checked 8 Oct 2026
Reporting
Its custom report builder can export reports in PDF, HTML, or XML.checked 8 Oct 2026
Safety qualification
AdaCore says CodeSonar is pre-qualified for projects to ISO 26262, IEC 61508, and EN 50128 safety levels, and has been qualified in projects for DO-178B/C up to DAL-A using DO-330.checked 8 Oct 2026
Security coverage
Security coverage includes OWASP Top 10, SANS/CWE 25, SEI CERT C/C++, and DISA STIG.checked 8 Oct 2026
Support
AdaCore says its engineering team is directly accessible through support and that customers can speak with the developers of the technology.checked 8 Oct 2026
Supported operating systems
CodeSonar runs on supported 64-bit Windows versions, including Windows Server, and 64-bit Linux distributions with glibc 2.39 or higher.checked 8 Oct 2026

The company

Founded
1994checked 28 Sep 2026
Headquarters
New York, United States and Paris, Francechecked 28 Sep 2026
Maker
AdaCore says it began in 1994 as an Ada compiler company focused on Unix systems.checked 8 Oct 2026

Money

Trial
AdaCore invites customers to request a trial to evaluate CodeSonar in their environment.checked 8 Oct 2026

Alternatives to CodeSonar

All alternatives
  1. 1Semgrep Code logo

    Semgrep Code

    Free planOpen sourceWebAPIExtensionLinux
    8.3From $15 a month
    Visit
  2. 2

    MobSF

    Free planOpen sourceWebAPILinuxmacOS
    8.2From $2,999.99 a year
    Visit
  3. 3GitHub CodeQL logo

    GitHub CodeQL

    Free planWebExtensionLinuxmacOS
    7.5From $30 a month
    Visit
  4. 4

    gosec

    Free planOpen sourceAPILinuxmacOSSelf-hosted
    7.2Free plan
    Visit
  5. 5

    Horusec

    Free planWebAPIExtensionLinux
    6.6Free plan
    Visit
  6. 6

    Xygeni

    Free planWebAPIExtensionLinux
    6.6Free plan
    Visit