Notifications
Clear all
SAST & Dependency Scanning
1
Posts
1
Users
0
Reactions
2
Views
Topic starter
21/07/2026 7:54 am
Hey all, trying to convince my team lead to standardize on a SAST tool for our .NET APIs and microservices. We're a small team, mostly using Azure DevOps.
I've seen a lot about Snyk and SonarQube. For our use case, which one would be easier to get started with? I'm especially worried about setup time and false positives slowing us down.
Also, how do they handle .NET specifically? I heard Snyk is good for dependencies, but SonarQube might catch more code smells. Is that true? Any experiences with pricing for a team of 5-6 devs? 😅
Still learning