--- description: 검증된 사용 후기를 확인하고 SonarQube 사용성, 특징, 가격, 장점과 단점에 대한 자세한 정보를 확인해보세요! 비슷한 경쟁 제품도 확인이 가능합니다. image: https://gdm-localsites-assets-gfprod.imgix.net/images/capterra/og_logo-e5a8c001ed0bd1bb922639230fcea71a.png?auto=format%2Cenhance%2Ccompress title: SonarQube 가격, 사용 후기, 평점 | 켑테라 Capterra --- Breadcrumb: [홈](/) > [지속적 통합 소프트웨어](/directory/31119/continuous-integration/software) > [SonarQube](/software/210481/sonarqube) # SonarQube Canonical: https://www.capterra.co.kr/software/210481/sonarqube Page: 1 / 4\ 다음: [Next page](https://www.capterra.co.kr/software/210481/sonarqube?page=2) > SonarQube는 모든 규모의 개발 팀이 워크플로 내에서 코드 품질 및 코드 보안 문제를 해결할 수 있도록 지원합니다. > > Verdict: Rated **4.5/5** by 67 users. Top-rated for **추천 가능성**. ----- ## Overview ### SonarQube은(는) 누가 사용하나요? SonarQube는 깔끔하고 안전한 애플리케이션을 개발하려는 모든 개발자를 대상으로 합니다. SonarQube는 모든 규모의 개발 팀이 워크플로 내에서 코드 품질 및 코드 보안 문제를 해결할 수 있도록 지원합니다. ## Quick Stats & Ratings | Metric | Rating | Detail | | **종합** | **4.5/5** | 67 리뷰 | | 사용 편의성 | 4.2/5 | Based on overall reviews | | 고객 지원 | 4.0/5 | Based on overall reviews | | 비용 대비 가치 | 4.4/5 | Based on overall reviews | | 특징 | 4.4/5 | Based on overall reviews | | Recommendation percentage | 90% | (9/10 추천 가능성) | ## 공급업체 정보 - **회사**: SonarSource - **Location**: Geneva, 스위스 ## Commercial Context - **시작 가격**: US$720.00 - **Pricing model**: (Free version available) (무료 체험판) - **Target Audience**: 자영업, 2~10, 11~50, 51~200, 201~500, 501~1,000, 1,001~5,000, 5,001~10,000, 10,000+ - **Deployment & Platforms**: 클라우드, SaaS, 웹 기반, Mac(데스크톱), Windows(데스크톱), Linux(데스크톱), Windows(온프레미스), Linux(온프레미스) - **Supported Languages**: 영어 - **Available Countries**: 남아프리카, 네덜란드, 뉴질랜드, 독일, 미국, 브라질, 스웨덴, 스위스, 스페인, 싱가포르, 아랍에미리트, 아일랜드, 영국, 오스트레일리아, 이탈리아, 인도, 일본, 캐나다, 프랑스, 필리핀 ## 특징 - API - Real-Time Analytics - 그래픽 사용자 인터페이스 - 대시보드 - 디버깅 - 애플리케이션 보안 - 워크플로 관리 - 지속적 배달 - 지속적 배포 - 취약성 스캔 - 통합 개발 환경 - 품질 보증 - 협업 도구 ## Integrations (5 total) - Bitbucket - GitHub - GitLab - Jenkins - Microsoft Azure ## Support Options - 이메일/지원 센터 - FAQ/포럼 - 전화 지원 ## Category - [지속적 통합 소프트웨어](https://www.capterra.co.kr/directory/31119/continuous-integration/software) ## 관련 범주 - [지속적 통합 소프트웨어](https://www.capterra.co.kr/directory/31119/continuous-integration/software) - [애플리케이션 개발 소프트웨어](https://www.capterra.co.kr/directory/30082/application-development/software) - [정적 애플리케이션 보안 테스트(SAST) 소프트웨어](https://www.capterra.co.kr/directory/32818/static-application-security-testing-%28sast%29/software) ## 대안 1. [Jira](https://www.capterra.co.kr/software/19319/jira) — 4.4/5 (15367 reviews) 2. [GitHub](https://www.capterra.co.kr/software/129067/github) — 4.8/5 (6170 reviews) 3. [Coverity](https://www.capterra.co.kr/software/163552/coverity-static-code-analysis) — 3.5/5 (6 reviews) ## 리뷰 ### "Code Analysis and ensuing security against threats" — 5.0/5 > **Sachin** | *2022년 5월 23일* | 컴퓨터 소프트웨어 | Recommendation rating: 9.0/10 > > **장점**: Feature like Code Analysis and publishing those analysis report to end user. You can use default Quality Gates and Quality Profiles for scanning of your code. In case you want to modify these you can do that and define your own rule. Whenever there's commit in repo you just need to configure the task in your continuous integration pipeline if it passed the parameter only then commit will happens the master/main branch otherwise it will not. With these features you can eliminate the security threats and ensure that developers are following good practices while developing their code. I have integrated it with Azure DevOps. > > **단점**: Only thing which I can think can be improved is logging of events. Sometime it becomes hard to debug the issues. Other then that, I think over all this fulfills all the requirements. > > Overall experience with Sonarqube is pretty wholesome integration came handy with my CI/CD tools such as Azure Devops and Jenkins. Provides insights against vulnerabilities and common threats so that necessary actions can be taken by developers to ensure the security and good coding practices to follow. Features like PR decoration allows to get results in CI/CD tools itself if passed then only commit happens to master branch. ----- ### "SonarQube is Great for Developers\!" — 5.0/5 > **검증된 리뷰어** | *2022년 12월 23일* | 고등 교육 | Recommendation rating: 8.0/10 > > **장점**: It is simple for developers to recognize their code smells, unused lines of code, errors, problems with the third-party libraries they are using, etc. information and the precise location of the issue. It also offers answers to those problems. As a result, figuring out the problems and fixing them is simple. This will be a terrific tool for developers. Except that, we can introduce our own rules for checking the code quality. It could identify the code issues that are vulnerable to cyber attacks such as XSS, SQL Injection, etc. > > **단점**: It was difficult to use the SonarQube on-premise application. Once we pushed a new code section, the server needed to restart in order for the application to work. > > We could identify many code related issues that are presented in our code and improve the quality of the application that we are developing. As a overall, SonarQube tool is able to add a value to our applications. ----- ### "Great tool for improving code quality" — 4.0/5 > **검증된 리뷰어** | *2026년 5월 9일* | 정보 기술 및 서비스 | Recommendation rating: 6.0/10 > > **장점**: What I liked most about SonarQube is how helpful it is for improving code quality and catching issues early in development. The vulnerability detection is one of its strongest features because it points out security risks, bugs, and code smells before they become bigger problems. It also integrates well with source code management and CI/CD pipelines, which makes it easier to include code analysis as part of the normal development workflow. That saves time and helps maintain cleaner code across projects. The platform has a bit of a learning curve in the beginning, especially when configuring rules and understanding reports, but after some use it becomes much easier to manage. The dashboard is detailed and gives a clear overview of code health. From a value for money perspective, it feels worth it for teams that care about code quality and security. It helps reduce issues before deployment, which can save a lot of time later. > > **단점**: One thing I liked least about SonarQube is that the initial setup can take time, especially when configuring quality rules and integrating it with existing workflows. It is not something that feels fully plug and play. Scans on bigger projects can also be a bit slow at times, which can affect development speed during heavy usage. Another small issue is that some warnings feel too strict or unnecessary, so developers still need to manually review results instead of trusting every suggestion directly. For new users, understanding all the settings and customization options can also take a while, so there is definitely a learning curve before getting the most out of the tool. ----- ### "Never use SonarQube" — 1.0/5 > **Zach** | *2025년 2월 13일* | 컴퓨터 및 네트워크 보안 | Recommendation rating: 0.0/10 > > **장점**: There is nothing about this company that I would ever recommend. > > **단점**: Of all the terrible things about this service and company, it's their customer support that takes the cake\! > > This service is a complete scam. Let's start with how it ended. I canceled my account, only to find out that it did not actually cancel. So I contacted support. It took them 2 months to resolve my request and they continued billing my card when the account was 100% not in use and I had no access to it. Now they refuse to refund my money. This is after they increased the cost of my plan by 3x without my approval (which is what prompted me to want to leave). In order to try to reduce my cost, our engineering team attempted to discsonnect some unused repos... nope, not possible. NEVER use this service. You absolutely cannot trust them. It's unbelievable that their system cannot be canceled and yet somehow it's my fault and I continue to get billed while their support team takes weeks to respond. ----- ### "Smooth experience for code reviewers" — 4.0/5 > **검증된 리뷰어** | *2026년 4월 3일* | 건강, 웰빙 및 피트니스 | Recommendation rating: 8.0/10 > > **장점**: It makes our team consistent. For example, one of our devs was notorious for PRs with high cognitive complexity in their functions. Now, all we need to do in our azure pipelines is ensure that all sonarqube code smells are solved before they can merge their work to main. > > **단점**: Sometimes it can create a loop in code smells. For example, if there are many commands in a Dockerfile, it will ensure that commands are merged together (but not necessarily correctly), which causes the dev to break the commands apart again. And the loop goes on until it is silenced. > > Overall, it's made our team much more consistent and efficient.PRs are a smoother process because the code smells are already fixed. ----- Page: 1 / 4\ 다음: [Next page](https://www.capterra.co.kr/software/210481/sonarqube?page=2) ## Links - [View on Capterra](https://www.capterra.co.kr/software/210481/sonarqube) ## This page is available in the following languages | Locale | URL | | de | | | de-AT | | | de-CH | | | en | | | en-AE | | | en-AU | | | en-CA | | | en-GB | | | en-IE | | | en-IL | | | en-IN | | | en-NZ | | | en-SG | | | en-ZA | | | es | | | es-AR | | | es-CL | | | es-CO | | | es-CR | | | es-DO | | | es-EC | | | es-MX | | | es-PA | | | es-PE | | | fr | | | fr-BE | | | fr-CA | | | fr-LU | | | it | | | ja | | | ko | | | nl | | | nl-BE | | | pt | | | pt-PT | | ----- ## Structured Data