CodeSonar

Paid#7 of 30 in Application Security TestingStatic Application Security Testing SoftwareStatic Application Security Testing SastSAST Tools

CodeSonar: Whole-program static analysis for teams prioritizing code defects, vulnerabilities, and standards checks. Ranked #7 of 30 in Application Security Testing by our editors (8.6/10); pricing: Pricing on request; best for safety-critical teams needing deep static analysis.

8.6/10★★★★☆Editor score

Visit AdaCore

CodeSonar8.6 Visit AdaCore

At a glance

• Editor score
  8.6 / 10
• Pricing
  Pricing on request
• Best for
  Safety-critical teams needing deep static analysis
• Facts checked
  24 Sep 2026

• Where it wins

  • Analyzes execution paths with abstract interpretation and symbolic execution
  • Tracks tainted data and detects memory defects across whole programs
  • Supports coding standards and compiled-binary, mixed-language analysis

• Where it doesn't

  • Focused on static analysis rather than a broad range of AppSec testing types
  • Pricing requires contacting sales
  • Documentation is the listed support channel

Our verdict on CodeSonar

CodeSonar is a static analysis and application security testing tool for C/C++ and other languages. AdaCore positions it for enterprise, embedded, safety-critical, and high-integrity software projects. Its whole-program analysis uses abstract interpretation and symbolic execution to examine execution paths for bugs, vulnerabilities, and compliance issues. That emphasis makes it a fit for teams that need deep code analysis and standards checks, rather than a general-purpose suite spanning many AppSec testing approaches.

Analysis capabilities include memory modeling, code-defect detection, and taint analysis that tracks flows of untrusted data. Security coverage includes OWASP Top 10, CWE, CERT, and DISA STIG, while coding-standard support includes MISRA C/C++, CERT, AUTOSAR C++, and JSF++. CodeSonar also analyzes compiled binaries and mixed-language code. These features suit complex or safety-sensitive codebases where teams need to inspect execution paths and align reviews with defined standards. Teams seeking broader testing coverage should compare tools focused on other AppSec testing types.

The centralized hub keeps analysis history and supports warning review, assignment, and comparison across projects. Integrations include Visual Studio, VS Code, Eclipse, GitLab, GitHub, Jira, and Jenkins; an HTTP API supports interaction with the hub. Deployment is available as self-hosted or cloud. According to AdaCore's pricing approach, prospects request pricing or contact sales rather than selecting a published list-price plan. Documentation is the listed support channel. CodeSonar is best suited to mid-market and enterprise teams that value depth in static analysis and a managed review workflow; teams wanting a wider AppSec suite or a published self-service price may prefer an alternative.

Your product? Our editors can test CodeSonar in depth and publish a review, labelled as paid · from $149/mo →

CodeSonar pricing

CodeSonar fact sheet

CodeSonar integrations

CodeSonar lists 9 integrations on its own site.

• Visual Studio
• Visual Studio Code
• GitLab
• Jira
• Jenkins
• Eclipse
• GitHub
• Keycloak
• Okta

Alternatives to CodeSonar

• OFOpenText Fortify Software Security PlatformA broad AppSec suite for teams centralizing testing, tracking, and remediation.9.3
• OZOWASP ZAPFree, flexible DAST for web apps and APIs, with scanning and automation options.9.1
• Checkmarx OneEnterprise-focused SAST with pull-request, IDE, CI/CD, SCA and governance workflows.9.0

See all CodeSonar alternatives →

CodeSonar vs the competition

• OFCodeSonar vs OpenText Fortify Software Security Platform
• OZCodeSonar vs OWASP ZAP
• CodeSonar vs Checkmarx One
• CodeSonar vs Burp Suite Enterprise Edition
• CodeSonar vs Rapid7 InsightAppSec
• CodeSonar vs Klocwork

Compare CodeSonar with any tool side by side →

Featured on iTechGuides

CodeSonar is listed in our Application Security Testing directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/codesonar/"><img src="https://www.itechguides.com/best/badge/codesonar.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update