# SonarQube alternatives: what AI models name instead, November 2026

Gane Index, November 2026 Edition. 111 of the 252 answers in the 1 category where SonarQube holds a standing named it neither first nor as an alternative; these are the first choices those answers made. Page: https://www.gane.ai/index/it/vendors/sonarqube/alternatives

## Named instead, most often (every category and segment added)

- Semgrep AppSec Platform: 25
- Checkmarx One: 13
- CodeQL: 2
- GitHub Advanced Security: 2
- Veracode Static Analysis: 2
- Aikido Security: 1

## Static application security testing

**Small business**: 28 of 84 answers did not name SonarQube (SonarQube is #2 of 14 at 14%).

- Semgrep AppSec Platform: first choice in 12 of those 28
- CodeQL: first choice in 1 of those 28
- Snyk Code: first choice in 1 of those 28

**Mid-market**: 36 of 84 answers did not name SonarQube (SonarQube is #2 of 11 at 11%).

- Semgrep AppSec Platform: first choice in 9 of those 36
- Checkmarx One: first choice in 1 of those 36
- CodeQL: first choice in 1 of those 36
- GitHub Advanced Security: first choice in 1 of those 36

**Enterprise**: 47 of 84 answers did not name SonarQube (SonarQube is #3 of 10 at 12%).

- Checkmarx One: first choice in 12 of those 47
- Semgrep AppSec Platform: first choice in 4 of those 47
- Veracode Static Analysis: first choice in 2 of those 47
- Aikido Security: first choice in 1 of those 47
- Black Duck: first choice in 1 of those 47
- GitHub Advanced Security: first choice in 1 of those 47
- GitLab SAST: first choice in 1 of those 47
- Snyk: first choice in 1 of those 47

Published under CC BY 4.0. The output is the models' output; nothing here is a recommendation by the index.