Compare software

CodeQL vs SonarQube: catalog facts
CodeQLSonarQube
Freemium

Free for research and open source code; other use falls under GitHub's CodeQL terms.

Freemium

Free starting option, with paid plans for larger teams and more features.

Command line Web, Self-hosted
  • Queries follow data flow from source to sink across a codebase
  • Finds every variant of a known bug pattern
  • Self-hosted server or managed cloud option
  • Tracks technical debt and reliability as well as security
  • Free use is limited to research and open source code
  • Writing custom queries means learning the QL language
  • Running the server yourself needs infrastructure and maintenance
  • Advanced features are in paid plans
Downloadable app Self-hosted, Hosted service
Closed source Closed source
License: GitHub CodeQL Terms and Conditions License not stated
Not stated if an account is needed Not stated if an account is needed
Not stated if it works offline Not stated if it works offline

Checked September 24, 2026

Checked September 24, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.