SonarQube AI CodeFix alternatives
SonarQube AI CodeFix is listed under Code security. These 32 agents share at least one category with it, ranked by the number of shared framework tags, then by same primary category.
| # | Agent | Category | Shared framework tags | Compare |
|---|---|---|---|---|
| 1 | Aikido AI AutoFix Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ. | Code security | — | SonarQube AI CodeFix vs Aikido AI AutoFix |
| 2 | Amazon Q Developer security scanning Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes. | Code security | — | SonarQube AI CodeFix vs Amazon Q Developer security scanning |
| 3 | Checkmarx One Assist Family of agentic AppSec agents on Checkmarx One (Developer Assist in the IDE, plus triage/remediation). Checkmarx Ltd’s registered office is Ramat Gan, Israel. | Code security | — | SonarQube AI CodeFix vs Checkmarx One Assist |
| 4 | Claude Code security review Anthropic automated security review in Claude Code: the /security-review command and the anthropics/claude-code-security-review GitHub Action for pull-request comments. | Code security | — | SonarQube AI CodeFix vs Claude Code security review |
| 5 | Codacy AI Reviewer Hybrid AI pull-request reviewer from Codacy (Lisbon). Combines static analysis with LLM context; vendor pages include security-vulnerability feedback and suggested fixes. | Code security | — | SonarQube AI CodeFix vs Codacy AI Reviewer |
| 6 | Cursor Bugbot Cursor’s AI pull-request reviewer. Official docs say it identifies bugs, security issues and code-quality problems and comments with explanations and suggested fixes. | Code security | — | SonarQube AI CodeFix vs Cursor Bugbot |
| 7 | Devin Cognition’s autonomous coding agent. Listed here only for documented Snyk MCP/CLI scanning and SonarQube/Snyk/Checkmarx IDE plugins — not as a dedicated security product. | Code security | — | SonarQube AI CodeFix vs Devin |
| 8 | Factory Droids Factory’s Droid coding agents. Listed here only because Factory’s own pages document Snyk Studio integration for scan/fix/verify inside Droid workflows. | Code security | — | SonarQube AI CodeFix vs Factory Droids |
| 9 | GitHub Copilot Autofix LLM-generated suggested fixes for GitHub code-scanning alerts (CodeQL). Part of GitHub Code Security / Advanced Security; no separate Copilot subscription is required. | Code security | — | SonarQube AI CodeFix vs GitHub Copilot Autofix |
| 10 | GitHub Copilot coding agent GitHub Copilot’s coding agent. Listed here only for the official workflow that assigns Dependabot security alerts to Copilot (or other agents) to open a draft fix PR. | Code security | — | SonarQube AI CodeFix vs GitHub Copilot coding agent |
| 11 | GitLab Duo Vulnerability Resolution GitLab Duo features that explain SAST vulnerabilities and open merge requests with proposed AI remediations, including an agentic resolution flow. | Code security | — | SonarQube AI CodeFix vs GitLab Duo Vulnerability Resolution |
| 12 | Semgrep Multimodal Semgrep’s AI layer (successor branding to Semgrep Assistant) for detection, triage, remediation guidance and optional autofix on the Semgrep AppSec Platform. | Code security | — | SonarQube AI CodeFix vs Semgrep Multimodal |
| 13 | Tembo Agent orchestration platform (not a dedicated AppSec scanner) that opens auto-fix PRs from Snyk vulnerability scans and Sentry production errors. | Code security | — | SonarQube AI CodeFix vs Tembo |
| 14 | Veracode Fix Veracode’s AI-assisted remediation for SAST flaws and SCA dependency vulnerabilities, with suggested patches in IDE, CLI and SCM workflows. | Code security | — | SonarQube AI CodeFix vs Veracode Fix |
| 15 | BigID Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases. | Risk | — | — |
| 16 | CloudSEK AI Agents Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows. | Security | — | — |
| 17 | Conveyor Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Security | — | — |
| 18 | CrowdStrike Charlotte AI Agentic AI analyst for cybersecurity within the CrowdStrike Falcon platform, assisting detection, investigation and response workflows. | Security | — | — |
| 19 | Darktrace Cyber AI Analyst Purpose-built agentic AI that autonomously investigates security alerts, tests hypotheses and produces natural-language incident reports for SOC teams. | Security | — | — |
| 20 | Mondoo Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates. | Security | — | — |
| 21 | Orca Security AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection. | Security | — | — |
| 22 | Rippling Automated Compliance Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers. | Compliance | — | — |
| 23 | SafeBase Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Security | — | — |
| 24 | Scytale AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles. | Compliance | — | — |
| 25 | Secureframe Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. | Compliance | — | — |
| 26 | SecurityScorecard Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation. | Risk | — | — |
| 27 | Snyk Developer-first application security platform; Snyk Agent Fix (formerly DeepCode AI Fix) generates and validates AI-suggested remediations for Snyk Code findings. | Security | — | — |
| 28 | Tenable One (Hexa AI) Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows. | Security | — | — |
| 29 | UpGuard Cyber risk and third-party risk management platform with published CRPM pricing page. | Risk | — | — |
| 30 | Vanta Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses. | Compliance | — | — |
| 31 | Wiz Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments. | Security | — | — |
| 32 | Zania Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability. | Compliance | — | — |
Ranking is mechanical (shared dataset tags), not a quality judgement. Framework tags indicate relevance, not certification.