---
title: SonarQube Reviews
meta_title: 'SonarQube Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 154 reviews by the users' company size, role or industry
  to find out how SonarQube works for a business like yours.
aggregate_rating:
  rating_value: 4.4
  review_count: 154
  scale: '5'
date_modified: '2026-09-23'
parent_category:
  name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t"
  url: https://www.g2.com/categories/devsecops
---


# SonarQube Reviews
**Vendor:** SonarSource Sàrl  
**Category:** [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis)  
**Average Rating:** 4.4/5.0  
**Total Reviews:** 154  
**AI Enabled:** This product embeds AI to enhance or extend its core functionality.
## About SonarQube
Sonar, the industry standard for code verification and automated code review, helps reduce outages, improve security, and lower risks associated with AI and agentic coding. As an independent verification platform, Sonar enables organizations to securely develop at the speed of AI. Sonar is the foundation for high-performance software engineering, analyzing over 750 billion lines of code daily to ensure applications are secure, reliable, and maintainable. Rooted in the open source community, Sonar is trusted by 7M+ developers globally, including teams at ServiceNow, Booking.com, Deutsche Bank, AstraZeneca, and Ford Motor Company.



## SonarQube Pros & Cons
Pros and Cons are compiled from review feedback and grouped into themes to provide an easy-to-understand summary of user reviews.

**What users like:**

- Users value SonarQube for its ability to quickly flag **code quality and security issues** , ensuring a reliable codebase. (24 reviews)
- Users value the **flexible issue filtering and prioritization** features of SonarQube, enhancing team productivity and focus. (20 reviews)
- Users appreciate how SonarQube quickly **flags code quality and security issues** , ensuring a clean and reliable codebase. (19 reviews)
- Users appreciate the **ease of use** of SonarQube, finding integration and actionable feedback simple and effective. (18 reviews)
- Users appreciate the **easy integrations** with CI/CD tools, enhancing their workflow and improving code quality effectively. (18 reviews)
- Users value the **seamless integration** of SonarQube with CI/CD pipelines, enhancing code quality management effortlessly. (18 reviews)
- Security (15 reviews)
- Vulnerability Detection (15 reviews)
- Code Review (12 reviews)
- Integration Support (12 reviews)

**What users dislike:**

- Users face **software bugs** that lead to false positives, complicating the experience and requiring significant knowledge to manage. (12 reviews)
- Users find the **complex configuration** of SonarQube challenging, especially for beginners needing extensive knowledge. (10 reviews)
- Users encounter **false positives** that complicate usage, despite helpful tools for review and customization of analysis. (10 reviews)
- Users find SonarQube's **complexity** in configuration and excessive warnings can make it cumbersome to use. (8 reviews)
- Users find the **complex setup** of SonarQube time-consuming, requiring significant effort to configure and tune effectively. (8 reviews)
- Users often face **integration issues** with SonarQube, particularly in connecting to GitLab and navigating its complexities. (8 reviews)
- Users find SonarQube's **limited features** frustrating, particularly with restrictions on scanning and analysis capabilities. (8 reviews)
- Users note that the **expensive nature** of SonarQube limits access to advanced features and complicates setup. (7 reviews)
- Difficult Setup (6 reviews)
- Setup Difficulty (6 reviews)

## SonarQube Reviews
  ### 1. Sonarqube

**Rating:** 5.0/5.0 stars

**Reviewed by:** Umashankar M. | Software Engineer, Information Technology and Services, Mid-Market (51-1000 emp.)

**Validated Reviewer:** Validated through a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** July 05, 2023

**What do you like best about SonarQube?**

Code Quality Analysis, centralized dashboard

**What do you dislike about SonarQube?**

Setup and configuration complexity, Resource Intensive

**What problems is SonarQube solving and how is that benefiting you?**

Code Quality Assurance

  ### 2. Information security architect

**Rating:** 3.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through LinkedIn

**Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate.

**Reviewed Date:** May 19, 2023

At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.

**What do you like best about SonarQube?**

thorough scan, multitude of languages, easy to use once set up

**What do you dislike about SonarQube?**

no real support whatsoever for the $20k price tag; set up can be hellish if you haven't been through it before. With a database that has prevented updates to newer versions

**What problems is SonarQube solving and how is that benefiting you?**

Sonic cube is very good at finding bugs and vulnerabilities in the code and reporting them in a way that can give directly to my developers for removing for remediation

  ### 3. Great tool for code quality scanning!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jinal P. | Small-Business (50 or fewer emp.)

**Validated Reviewer:** Validated through a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** March 15, 2023

**What do you like best about SonarQube?**

Integration is easy in CI/CD pipelines
Helped a lot at the time of code push!
UI interface is really good and easy to go!
It helped a lot in code duplicate!

**What do you dislike about SonarQube?**

It took too long to setup and move forward!

**What problems is SonarQube solving and how is that benefiting you?**

It helped with static code analysis.

  ### 4. Great Tool for code Analysis

**Rating:** 5.0/5.0 stars

**Reviewed by:** Sachin S. | System Engineer, Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** July 06, 2022

**What do you like best about SonarQube?**

As a DevOps team, we are managing and offering this tool to different teams within the organisation. Its seamlessly easy integration with other tool CI/CD tools such as Jenkins, and Azure DevOps Services is very useful. By which we can easily Analyze code in Sonarqube based on the predefined rules setup in the quality gate and quality profile. After analysis, we will get a detailed overview of the vulnerabilities, security hotspots, bugs and other parameters. We can review those parameters and work on the fixes. In this way, it improves the code quality.

**What do you dislike about SonarQube?**

We are using the Sonarqube Enterprise version we do sometimes face issues while getting additional help from the Sonarqube. If we have to check code coverage of the test case of Java language we need to rely on a third-party plugin like Jacoco. Apart from these, we didn't encounter many issues so far.

**What problems is SonarQube solving and how is that benefiting you?**

Being in DevOps teams are offering Sonarqube to our end customers. Sonarqube helps to analyze code and review the vulnerabilities, security hotspots and bugs along with other parameters. We have integrated with CI/CD tools. Once a Pull request is done on the master branch Sonaranlysis began if it passes the standards as defined in the quality gate and quality profile only merge will otherwise it will block it. In this way, we are ensuring developers follow good practices of coding and review their code against common vulnerabilities.

  ### 5. SonarQube: Continuous Code Quality & Code Security

**Rating:** 4.5/5.0 stars

**Reviewed by:** Pranay J. | Senior DevOps Consultant, Small-Business (50 or fewer emp.)

**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** January 31, 2022

At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.

**What do you like best about SonarQube?**

I'm using SonarQube for almost 5 years now, it's an open-source tool that can be self-host in the cloud or on-prem or can be run inside a docker container. It's backed by a large community and they are updating it continuously from both features and capability wise.

**What do you dislike about SonarQube?**

It's a legacy tool but I would like to see some UI changes as it's not up to mark as compared to the other modern tools like GitGuardian and Snyk. Creating custom rules can be very tricky sometimes. There should be some kind of repository for keeping and sharing the rules.

**What problems is SonarQube solving and how is that benefiting you?**

We use SonarQube for checking the quality of every piece of code written by our team. We have SonarQube running on cloud-based server where our team can go and check the quality of their code.

  ### 6. A really helpful add on for code quality check

**Rating:** 4.5/5.0 stars

**Reviewed by:** Bipul H. | CP Lead | CodeChef CGC Chapter, Mid-Market (51-1000 emp.)

**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** March 01, 2022

**What do you like best about SonarQube?**

It is beneficial to check for any quality issue while writing code for any project. It can instantly find any quality issue and will highlight it where you either can fix it yourself or through the quick fix button, which it provides inbuilt. It currently supports HTML, JavaScript, Python, TypeScript, PHP, and Java. I like its feature to describe any quality issue it detects where you can read the vulnerabilities and their correction.

**What do you dislike about SonarQube?**

Even though it is very instant to parse and find quality issues, but there is still room to improve. As for some cases where it detects any vulnerabilities or quality issues, the description it provides is not quite well explained to understand the reason.

**What problems is SonarQube solving and how is that benefiting you?**

It helps me to maintain code quality while building any project, which makes it more professional and representable. I also use DeepSource for the same purpose, but it is not available as an extension in VSCode. It fills the much-needed gap.

  ### 7. SonarQube for checking code quality

**Rating:** 4.0/5.0 stars

**Reviewed by:** Tigran M. | Java Software Engineer, Small-Business (50 or fewer emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** The reviewer received either a gift card or a donation made to a charity of their choice in exchange for writing this review.

**Source: G2 Gives Campaign:** G2 Gives Campaign. The reviewer received either a gift card or a donation made to a charity of their choice in exchange for writing this review.

**Reviewed Date:** July 20, 2022

**What do you like best about SonarQube?**

Sonarqube it's an open-source application, that you can run on your server and with that tool you can check your code quality, and fined which part is tested and which one is not

**What do you dislike about SonarQube?**

It's the first time it's hard to configure, you need some platform for deployment, ex Docker, wich need to run the sonarQube server and after that you can use it

**What problems is SonarQube solving and how is that benefiting you?**

It help developer to understand which part of their code is tested and which part is closed, it's need for checking the code quality, and can be use with some testing tools

  ### 8. Protects my application from vulnerable code and libs

**Rating:** 5.0/5.0 stars

**Reviewed by:** Sarath N. | Automation Manager, Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** March 11, 2022

**What do you like best about SonarQube?**

Development perspective it 
1. checks the library that I am using whether it's outdated or it's vulnerable. 
2. Checks my code coverage if I go ace any code that does not have any tests to validate
3. Checks it my code smells (like unwanted statements, unused imports etc)
From testing perspective
4. Checks my code if that smells 
5. Checks and inform Jenkins dsl pipeline if that job is success or failed

**What do you dislike about SonarQube?**

Configuration to suppress some of the components should have been bit easier I.e kind of plug and play. In this way we should be able to manage what components that suits my app or test code needs

**What problems is SonarQube solving and how is that benefiting you?**

We were using Jenkins on a descriptive pipeline (CI) to run our automation suite and there is a restriction that we should run our suite only in docker slave container instead of master. Since we are calling a shell script in Jenkins which always sends 200 for job status even if some tests failed this is giving me false positive as the pipeline is always green actually it should be RED. When we integrate SonarQube inside our container we were able to distinguish the failed tests thereby failing the Jenkins job and provide a positive feedback with our tests. This helps us in delivering a quality product to Custer rather a defective one

  ### 9. Helps us in maintaining the coding standards and avoid security risk code

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** March 07, 2022

**What do you like best about SonarQube?**

The way it analyzes all the code written and provides the violations of standard coding helps us optimize the written code ensuring the minimal number of lines are written to cover the functionality effectively. It has a beautiful user interface where the violations are categorized into different groups ranging from minor to major and involve resolving the unnecessary complexity of the code. It also helps us in removing the duplicate code which has been used multiple times and maintaining the standards in methods.

**What do you dislike about SonarQube?**

At times I find the blocker during the times of emergency code deployment where it doesn't allow the code to be checked-in to the repository unless the violations are fixed, which should enable the user to bypass the number of lines that should be part of the written method. The build failure messages which is triggered to the group when the coding violation occurs

**What problems is SonarQube solving and how is that benefiting you?**

Code analysis and minimizing the violations of the code and ensure the complexity of the code is resolved and meets the industry standards and run the health report in every code check-in to the repository to ensure the coding violations are minimal, removal of duplicate methods or code and empty methods and ensure we have a plan in place with regards to the specified format.

  ### 10. Best tool to find code issues.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** August 03, 2022

At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.

**What do you like best about SonarQube?**

Helps to avoid some runtime errors. Helps to find some code bugs, coverage, blockers, smell, etc. Easy to configure.

**What do you dislike about SonarQube?**

Takes too long to update the latest report.

**What problems is SonarQube solving and how is that benefiting you?**

Helps to find some code bugs, coverage, blockers, smell, etc. Can implement with Jenkins too. Code review is too easy.

  ### 11. To Maintain Quality Of the Codebase

**Rating:** 5.0/5.0 stars

**Reviewed by:** Shubham P. | Software Engineer, Mid-Market (51-1000 emp.)

**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** October 21, 2021

**What do you like best about SonarQube?**

SonarQube is the real troubleshooter for a software developer. Sonarqube is really helpful to maintain the code quality of the code and also to maintain the code coverage. With the help of its preconfigured rules for specific languages, you will be able to write high-quality and bug-free code. It is also helping us with our project audits which clearly and loudly shows the audit people that we are indeed maintaining the project's code quality.

**What do you dislike about SonarQube?**

The biggest headache of the sonarQube is that if you are planning to use it for the code coverage purpose of your test cases, you have to configure a 3rd party plugin like JaCoCo in the case of Java which is an extra thing for configuration. The biggest headache of the sonarQube is that if you are planning to use it for the code coverage purpose of your test cases, you have to configure a 3rd party plugin like JaCoCo in the case of Java which is an extra thing for configuration. Once you write the code in java and expecting your sonarqube to show code coverage of your applications testcases you have to configure the plugin.

**Recommendations to others considering SonarQube:**

Yes I would definitely recommend this to use it to every developer infact I would say we don't have a better option than this. It will help you in learning code conventions, maintaining code quality and also code coverage.

**What problems is SonarQube solving and how is that benefiting you?**

Sonarqube is helpful to maintain the code quality of the code and also to maintain the code coverage. With the help of its preconfigured rules for specific languages, you will be able to write high-quality and bug-free code. About the benefits I would say it helped to maintain our project code quality to a topmost level with the help of Sonar developer can quickly identify their mistakes and correct it and also learn the coding standards to maintain the code conventions which is very good in the case of the new learners/ beginners for the professionals of the specific language.

  ### 12. Elevate the quality of code with ease!

**Rating:** 4.5/5.0 stars

**Reviewed by:** Shreyans M. | Scrum Master, Mid-Market (51-1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** January 30, 2022

**What do you like best about SonarQube?**

Runs complex static code analysis rules to help elevate the quality of code and promote a more clean, better secure, and optimized version of the code achieved ahead of the production release.

**What do you dislike about SonarQube?**

A good amount of time is required to integrate the Sonarqube in CI/CD Pipelines and may need even more time if the developer is relatively newer. The available guide should have more real-time solutions, so it is pretty quick to resolve issues and complete the integration.

**What problems is SonarQube solving and how is that benefiting you?**

This tool helps to catch unusual code vulnerabilities/bugs using various complex level analytics and ultimately help prevent a deteriorated version of the code from being introduced to the end-users. Overall it also helps to increase the velocity of the code by reducing the technical debt being piled up and generating a clean, maintainable, and optimized version of the code.

  ### 13. Very useful tool for getting code insights

**Rating:** 5.0/5.0 stars

**Reviewed by:** Kashyap J. | Senior Consultant, Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** August 09, 2022

**What do you like best about SonarQube?**

Provides a very detailed analysis of code and also explains the issues and possible solutions to resolve them.

**What do you dislike about SonarQube?**

Slightly confusing to configure exclusions and multiple projects

**What problems is SonarQube solving and how is that benefiting you?**

It identifies problems in code even before it's deployed and helps avoid code smells.

  ### 14. Best tools for Continuous PR reviewing and code checking.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Akshata P. | Associate Technical Consultant , Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** November 25, 2021

**What do you like best about SonarQube?**

It provides reasons as to why a particular code is marked for review. Issues generated can be assigned in bulk to a user in GitHub and tracked accordingly. Thus making it the best tool for code quality.

**What do you dislike about SonarQube?**

Sonarlint is a minor tool used by Sonarqube that runs in background could be in sync with the vscode(other similar IDE) - Most awaited feature. If this feature is implemented then there won't be hassle to switch between IDE and Sonarqube server.

**Recommendations to others considering SonarQube:**

Best to consider this tool only if the size of your team is above 10. For groups below 10, it is recommended to use the community version or integrate Sonarlint with IDE(free to use). It is recommended to be used by the team lead esp for the management of technical debts and security concerns.

**What problems is SonarQube solving and how is that benefiting you?**

Below is the list of problems that we previously faced and are solved by Sonarqube: 1. Code reviews - (along with creation/assigning of issues) 2. Security issues - (With resolution) 3. Technical Debt calculator

  ### 15. Nice tool to get your Code and Coding skills right!!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Piyushkumar R. | Senior Test Automation Engineer, Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** March 27, 2022

**What do you like best about SonarQube?**

Sonar Qube provides suggestions on Coding standard violations and helps us to improve the Code quality. It categorizes coding issues while compiling code in Major, Minor, Critical etc so we can fix it and improve. It also provides us to track and assign issues. I improved my coding skills somewhat using this tool's suggestion.

**What do you dislike about SonarQube?**

Sometimes we get warnings for legitimate issues but that is fine as this tool provides suppress issue functionality.

**What problems is SonarQube solving and how is that benefiting you?**

Improved Coding standard and code quality. Make code efficient. remove redundant code.

  ### 16. SonarQube: Great tool for Code Quality

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** January 17, 2022

**What do you like best about SonarQube?**

1. Open Source tool for code quality check<br>2. Easy to install on various OS and can be used as a Docker container<br>3. Supports multiple common programming languages<br>4. Easy to implement in CI pipelines

**What do you dislike about SonarQube?**

1. Requires to self-host for the community version<br>2. PDF report generation available only in the enterprise version<br>3. UI is very outdated in comparison to other tools in the market<br>4. IaC scanning is missing in the community version

**What problems is SonarQube solving and how is that benefiting you?**

We were looking for a tool to check the Code Quality which we can add to our CI pipelines. Now we are using SonarQube and getting the reports on the dashboard after every code commit.

  ### 17. An ok static analyzer

**Rating:** 4.0/5.0 stars

**Reviewed by:** Olafur B. | Enterprise Architect, Mid-Market (51-1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** January 07, 2022

At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.

**What do you like best about SonarQube?**

Sonarqube shows us how well programmers are adhering to the rules of code and does that admirably. Also, it does show CWEs, unnecessary code duplication, and code smells, which is a great addition.

**What do you dislike about SonarQube?**

This tool is not in the same league as Synopsis Coverity as it does not analyze the code for a potential null pointer or buffer overflow errors in the execution tree. Additionally, it does not detect any threading race conditions like Coverity.

**What problems is SonarQube solving and how is that benefiting you?**

Best practices in coding, style adherence, flag CWEs, reduce duplications of code, on all levels, java, c++.

  ### 18. Best Tool For Code Testing

**Rating:** 5.0/5.0 stars

**Reviewed by:** Taimoor A. | SQA Automation Engineer, Small-Business (50 or fewer emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** November 18, 2021

**What do you like best about SonarQube?**

SonarQube gives the platform for QA to test the quality of code. SonarQube accepts many languages for testing the code. It generates the testing code report and shows all the loopholes in the code.

**What do you dislike about SonarQube?**

There is nothing to say major bug in SonarQube, but one thing is that when we integrate SonarQube to Jenkins, it's complicated to combine both because it's not a localhost URL. We must provide an instance IP address.

**What problems is SonarQube solving and how is that benefiting you?**

I'm a QA, I will test UI and functionality for any software, but when we try to code, it's challenging; SonarQube provides the best way to test the code and find the bugs on any software code.

  ### 19. Thorough and detailed static code analysis

**Rating:** 4.0/5.0 stars

**Reviewed by:** Jared B. | DevOps Engineer, Mid-Market (51-1000 emp.)

**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** November 03, 2021

**What do you like best about SonarQube?**

SonarCloud has a deep and thorough ability to analyze any codebase. The display of code smells and coverage issues is detailed and shows a line-by-line analysis of a project.

**What do you dislike about SonarQube?**

Setup takes a bit of work. It took a while to integrate into our CI/CD workflows.

**What problems is SonarQube solving and how is that benefiting you?**

Static code analysis and code coverage checks. We have been able to optimize and improve our code quality with SonarCloud.

  ### 20. SonarCloud

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Automotive | Mid-Market (51-1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** May 12, 2022

**What do you like best about SonarQube?**

Helps detect bugs, vulnerability, code language and duplicate lints.

**What do you dislike about SonarQube?**

It does not detect the comment sections very well.

**What problems is SonarQube solving and how is that benefiting you?**

All PR to branches triggers the webhook to sonar cloud as our first check/testing to make sure the code is in a good state to proceed.

  ### 21. Code Analysis by Sonar

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** September 08, 2021

**What do you like best about SonarQube?**

Scanning the source code is a basic requirement to identify the gaps. Sonar does it very efficiently and also you can create your own custom rules and quality gates. It provides you all the info about code coverage, bugs, reliability, vulnerability, code smells etc that you can fix and make sure a issue free code delivery. It has good ui for the reports to analyze and can send automated notifications to subscribers on each scans. It also can be easily integrated with CI pipeline to make it more effective and improve the over code quality

**What do you dislike about SonarQube?**

Setup of project to scan the codes and cost issues due to branching - it used to consider each branch code as a separate repo which was fixed in one of the recent release so the only issue is cost

**What problems is SonarQube solving and how is that benefiting you?**

Scanning code as part of CI pipeline in an automated way and send notification to stakeholders. Since we use multiple technologies we needed something that can support across tech stack and in an automated manner

  ### 22. One of the most helpful tool to get the Perfect code coverage and improving coding standards

**Rating:** 5.0/5.0 stars

**Reviewed by:** Debnita G. | Associate Consultant, Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** September 09, 2021

**What do you like best about SonarQube?**

The best thing is the code smell detected by the sonarqube and it also indicates if there is any code vulnerability.

**What do you dislike about SonarQube?**

It would be good if there is any way to download the report and share it with teams.

**Recommendations to others considering SonarQube:**

This is the best tool to check the Test case coverage and detect any security hole/ code smell in the application. The suggestions given by the sonarqube highly help to increase the coding standard.

**What problems is SonarQube solving and how is that benefiting you?**

We look at the test case coverage and try to increase the coding standard with the help of Sonarqube.

  ### 23. Comlex to integrate with cloud applications

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Information Services | Mid-Market (51-1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** March 25, 2022

**What do you like best about SonarQube?**

Detailed report about the vulnerabilities and clear indication with expected time it will take to resolve the issues

**What do you dislike about SonarQube?**

Complex integration with cloud applications and IDE's plugins

**What problems is SonarQube solving and how is that benefiting you?**

Code coverage and vulnerabilities in code

  ### 24. SonarQube - Perfect tool to enhance code quality

**Rating:** 5.0/5.0 stars

**Reviewed by:** Riddhi G. | Sr software engineer, Mid-Market (51-1000 emp.)

**Validated Reviewer:** Validated through a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** September 29, 2021

**What do you like best about SonarQube?**

SonarQube offers the best functionality to manage your code quality by making it bug-free, in results it improves code security as well

**What do you dislike about SonarQube?**

As SonarQube shows perfect errors in code with line number as well there is nothing missing or about dislike in it.

**What problems is SonarQube solving and how is that benefiting you?**

We can improve code quality, we can make it bug free

  ### 25. SonarQube - The go to static code analysis tool

**Rating:** 4.0/5.0 stars

**Reviewed by:** Prathamesh S. | Software Engineer, Mid-Market (51-1000 emp.)

**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** September 18, 2020

**What do you like best about SonarQube?**

The ability to run my scans against a default set of code rules (in the free version) or to run it against an organisation wide set of rules (paid versions). Sonarqube also provides a plugin for IntelliJ which makes it very easy for me to run the static code analysis straight out of my IDE as soon as I make the changes. The integration with Jenkins also is one of the biggest benefits. Makes the whole process smooth and the ability to add the concept of tollgate makes it a great feature for enterprise applications.

**What do you dislike about SonarQube?**

Setup can be a bit challenging, considering the latest version requires Java 11 and we had a challenging time setting up the system due to various issues faced with other components not being compatible with Java 11.

**What problems is SonarQube solving and how is that benefiting you?**

Code Quality Metrics, Static code analysis and bad coding practice detection.

  ### 26. My opinion about SonarQube

**Rating:** 4.5/5.0 stars

**Reviewed by:** Cha Y. | Technical Support Engineer 1 (I5), Mid-Market (51-1000 emp.)

**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** August 12, 2020

**What do you like best about SonarQube?**

What I like the most about this program is that it performs a very high-quality analysis of the source code, and this makes the code much more reliable, and also reduces potential errors in the projects that are carried out. Another thing that I really like is the ability to support different languages, and to that is added the use of characters such as C, C ++, Python and many others. It is quite adaptable to the needs that are required in terms of quality adjustments, and allows to generate checks and projects that respond effectively to what is required.

**What do you dislike about SonarQube?**

One of the things I dislike about this tool is that it takes a great deal of effort to get everything up and running. Additionally, you need to balance quantity and quality in order to produce low-quality code that is functional. Likewise, a mechanism that evidences the real quality in the mutation tests is not shown, although numbers appear, these can be modified.

**Recommendations to others considering SonarQube:**

It is important when using this tool, take into account that not all IDE codes can be used in SonarQube, so you have to be aware when selecting them. Similarly, the security terms of the code must be taken into account, these could be better.

**What problems is SonarQube solving and how is that benefiting you?**

With the help of this program I identify technical problems in the codes I generate, in this way I avoid or reduce vulnerability factors, and in turn reduce errors in the codes. One of the benefits that seem most outstanding to me is the ability of the tool to track the origin of errors in the codes. Also, the ability to adapt to user specifications, which allows greater customization in projects. With the help of this program I identify technical problems in the codes that it generated, in this way I avoid or reduce vulnerability factors, and in turn reduce errors in the codes. One of the benefits that seem most outstanding to me is the ability of the tool to track the origin of errors in the codes. Also, the ability to adapt to user specifications, which allows greater customization in projects.

  ### 27. Great solution, lousy licensing

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Human Resources | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** September 19, 2020

**What do you like best about SonarQube?**

Continuous code inspection has a great deal of benefits, from increasing team velocity through first pass code reviews, to reduced maintenance costs. My favorite feature of SonarQube, however, is the IDE integration between SonarQube (server-side) and SonarLint (client-side). By allowing rules / qualify profiles to be centralized, we are able to essentially have a spell-checker for our code, while it is in active development, helping to shift feedback about as far left as it can get.

**What do you dislike about SonarQube?**

The pricing model is prohibitive as many critical features are found only in higher tiered versions of the application. One in particular is high-availability. Any corporation making SonarQube a part of their delivery pipeline essentially is required to get the highest tiered version of the application to have HA capabilities and boy will it cost you.

**What problems is SonarQube solving and how is that benefiting you?**

Reduced code review times. Improved readability and maintainability. Helps to educate junior developers with explanation of the violations and examples for how to be in compliance.

  ### 28. Code review and Quality check

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through Google using a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** August 20, 2021

**What do you like best about SonarQube?**

Detects the vulnerabilities, smell checks

**What do you dislike about SonarQube?**

Some repositories manual instructions are not to the point

**What problems is SonarQube solving and how is that benefiting you?**

Checks with Reliability, Security, Maintainability and coverage

  ### 29. Really about the Cloud.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Medical Devices | Small-Business (50 or fewer emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** November 11, 2020

**What do you like best about SonarQube?**

It's super easy to connect to your organization and get started. Allows for the flexibility of authentication to use GitHub or other authentication mechanisms. You can choose to do all of your repos or just select ones. Has more advanced features that you can integrate with as you gain experience with (and clean up your house) such as using it as a pass/fail during pull or merges, checking for code coverage etc.

**What do you dislike about SonarQube?**

Some of the navigation is a bit confusing and they could still improve how branches are handled and make it simpler to use in that regard.

**What problems is SonarQube solving and how is that benefiting you?**

Showing security compliance with OWAP top 25, Code coverage, Code complexity. Allows us to focus in on trouble spots in our code.

  ### 30. A must tool for the code quality i.e. Sonarqube

**Rating:** 5.0/5.0 stars

**Reviewed by:** Thati S. | Senior Devops engineer, Enterprise (> 1000 emp.)

**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** November 29, 2019

**What do you like best about SonarQube?**

These are the below points I love to use it
1) Sonarqube integration to the continuous integration pipelines
2) Graphical viewing & lists the detailed description of code bugs, Vulnerability, code smells & time taken to solve the code smells, detecting the duplicate lines & Code coverage
3) Integrating the unit test cases to the existing pipelines & reflecting the same in the Sonarqube dashboard
4) We have approx 26 tools in the market compare to all I feel like Sonarqube is having the most number of pros.
5) In terms of the security features I could see it holds the number one in the market.
6) Integrating the Fortify scan with the Sonarqube gives the best result in terms of the security.
7) For the developer it gives the detailed description where exactly the code is lacking as per the market standards

**What do you dislike about SonarQube?**

The only dislike I have is
Whenever a developer writes any code, they tend to have a habit of using the #(comment)ing the lines if necessary, but sometimes Sonarqube will detect those as errors.

**Recommendations to others considering SonarQube:**

Folks, as I said, there are approximately 26 tools in the market regarding code quality. Compared to all the other tools, in terms of dashboard, security, easiness, comfort, depicting the change, etc., Sonarqube stands out. So I strongly recommend this tool for business needs to get quality work.

Finally, I can say if you want quality & security, then Sonarqube is the best tool in the market.

**What problems is SonarQube solving and how is that benefiting you?**

As discussed in the likes, especially I like the way it differentiates the code smells, code bugs, vulnerabilities, time taken to solve the vulnerabilities, duplicate lines & code coverage.

  ### 31. Very concise analytics tool with good visualization design choices.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Mansi J. | Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through Google using a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** July 27, 2020

**What do you like best about SonarQube?**

Code smell detection and quality checks! Great feature for bugs and errors as well as integration with Jenkins.

**What do you dislike about SonarQube?**

It would be nice to have suggestions from team members to the code smells and assign other people to take care of certain bugs/issues

**Recommendations to others considering SonarQube:**

Keep checking your code for this!

**What problems is SonarQube solving and how is that benefiting you?**

Have a more robust test suite.

  ### 32. Great for quality check of software

**Rating:** 5.0/5.0 stars

**Reviewed by:** Mansi S. | Software Engineer, Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** March 07, 2020

**What do you like best about SonarQube?**

Sonarqube is used for quality check for the software which is under development. I have found so many bugs, vulnerabilities and code smells using sonarqube and then after I minimized them which improved my code quality. SonarQube is very good.

**What do you dislike about SonarQube?**

Initial setup for the Sonar Qube is very irritating and troublesome. I got hanged so many times in its setup.

**What problems is SonarQube solving and how is that benefiting you?**

I have used sonar Qube in many projects of my company. I have minimized so many bugs, vulnerabilities and code smells by finding them using Sonar Qube. It helps me for quality check and refactoring of my code.

  ### 33. Nice tool for static code analysis

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** August 31, 2020

**What do you like best about SonarQube?**

It is really time saving to complete the development by using Sonar Qube as it will do the static code analysis at initial development phase itself

**What do you dislike about SonarQube?**

I've used it along with VS Code editor and it seems to be working fine.

**What problems is SonarQube solving and how is that benefiting you?**

Mainly the problems related to static code analysis.

  ### 34. The only tool that stands tall in Code Quality Management

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Logistics and Supply Chain | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** May 08, 2019

**What do you like best about SonarQube?**

1. Wide range of Code Metrics
2. Customizations on Quality Profiles / Gates, Rules
3. Great Auditing and Trending capabilities
4. Good number of languages covered in OSS version

**What do you dislike about SonarQube?**

1. Lot of features being shifted across OSS and Paid versions creates a great confusion in terms of version upgrades. For instance branch / Portfolio version was introduced in OSS 6.7.4 and then moved to Enterprise version in later releases.
2. Need a clear path for the features that would be provided in OSS vs Enterprise variations.
3. Need better alignment with the new generation Code Configuration tools like GIT.
4. Portfolio management capabilities pivot data always around "master" branch. Tool should be flexible to aggregate data around any branch of development.
5. More fine grained Access Control.
6. Leak period feature is a little confusing to understand

**Recommendations to others considering SonarQube:**

Invest to integrate Static scans in your DevOps lifecycle are minimal while the Benefits achieved are multifold.

**What problems is SonarQube solving and how is that benefiting you?**

Static Code Quality Scans
Code Coverage checks
Quality Gating
Code Quality Monitoring / Dashboarding

  ### 35. SonarQube Implementation

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through a business email account

**Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate.

**Reviewed Date:** September 11, 2019

**What do you like best about SonarQube?**

Code Quality, Code Coverage, code scan and code vulnerabilities

**What do you dislike about SonarQube?**

Integration with testing tools like UTF doesn't cover all the functionalities like a Standalone Sonar.

**Recommendations to others considering SonarQube:**

Integrates greatly with CI server like Cloudbees and Jenkins along with version control and testing tool like UFT.

**What problems is SonarQube solving and how is that benefiting you?**

Implementing SonarQube to figure out the quality gate, code coverage, code scan and code vulnerabilities.

  ### 36. Code quality and scanning

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through a business email account

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** September 16, 2019

**What do you like best about SonarQube?**

Quality gate 
Code scanning 
Code coverage

**What do you dislike about SonarQube?**

Integration with quality control testing tools.

**What problems is SonarQube solving and how is that benefiting you?**

We have successfully implemented Sonar with code scanning, code coverage and finding out the code quality and vulnerabilities associated with the source code.

  ### 37. SonarQube Review

**Rating:** 4.5/5.0 stars

**Reviewed by:** Gurleen S. | Technology Analyst, Information Technology and Services, Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** July 09, 2018

**What do you like best about SonarQube?**

SonarQube is one of the most easy to use DevOps tool which provided insights into the code being build by the developers and helps in measuring the quality of deliverable.
SonarQube provides different metrics for reporting such as bugs, vulnerabilities, code smells, etc. which help lower the technical debt.
SonarQube integrated with various tools in DevOps pipeline such as Jenkins, TeamCity and provides the output in a separate tab / url which reviewers can make use off to determine whether code artifact can be released into market or quality has to be improved.

**What do you dislike about SonarQube?**

I have not come up with something I dislike about SonarQube since it takes care of our daily code quality needs.

**Recommendations to others considering SonarQube:**

I would strongly recommend SonarQube since it's very easy to setup, configure and provides us quality deliverable by finding out the quality issues in the code.
SonarQube provides report as well in the form of PDF so that management can have a look at it and analyse the areas where they want their team to focus more.

**What problems is SonarQube solving and how is that benefiting you?**

We have release a quality artifact by making use of SonarQube's in built functionalities which helps developers code in right way, using right code semantics and paying attention to resolving any bugs, hard coded references, etc.
We are making use of SonarQube quality gates feature to determine whether to go ahead with the build or not depending upon certain percentages or threshold which are set up.

  ### 38. Assures Quality

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Airlines/Aviation | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through a business email account

**Source: Organic:** Organic review. This review was written entirely without invitation or incentive from G2, a seller, or an affiliate.

**Reviewed Date:** January 28, 2019

**What do you like best about SonarQube?**

Analysis deeply and makes suggestions to catch best practices.

**What do you dislike about SonarQube?**

Reporting over tags or even all projects are not enough

**What problems is SonarQube solving and how is that benefiting you?**

Quality assurance over the different teams and fit a standard all over the company.

  ### 39. Code quality tool

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** January 01, 2019

**What do you like best about SonarQube?**

This is the best code quality tool for both static code analysis and code coverage. It's easy to configure. It supports a bunch of languages like Java, Groovy, C, PHP, etc.

**What do you dislike about SonarQube?**

There is nothing to dislike in SonarQube.

**What problems is SonarQube solving and how is that benefiting you?**

Used it in applications for code quality and coverage. It runs on a server so anyone can easily see code coverage.

  ### 40. Used for maintaining your code quality

**Rating:** 3.5/5.0 stars

**Reviewed by:** Tushar B. | Software Engineer, Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** April 15, 2018

**What do you like best about SonarQube?**

I really like the UI and how easy it is to navigate to the right set of granularity for each project. It has good set of testing support also including Junit tests and integration tests. It is better than using just findbugs. It has really helped me find critical issues in my code that I was unable to.

**What do you dislike about SonarQube?**

It is difficult to configure for the first time. I and my team took a lot of time for configuring it specific to our project. Some plugins don't work out of the box and need code configuration.

**Recommendations to others considering SonarQube:**

It is a good tool out of the box with a lot of features like code coverage, testing, code health and much more. Definitely a must try!

**What problems is SonarQube solving and how is that benefiting you?**

We are using in our team to check the health of our code and test coverage.

  ### 41. Ensuring Quality

**Rating:** 5.0/5.0 stars

**Reviewed by:** Juan Carlos R. | Agile Coach aka Scrum Master, Mid-Market (51-1000 emp.)

**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Source: Seller invite:** Invitation from a seller or affiliate. This reviewer was not provided any incentive by G2 for completing this review.

**Reviewed Date:** April 10, 2018

**What do you like best about SonarQube?**

In the programming world, quality is always a subjective and hard to measure aspect, Sonarqube is the tool we use to ensure code quality through code analysis for each project we are working on.

**What do you dislike about SonarQube?**

So far nothing has stood out that I don't like.

**What problems is SonarQube solving and how is that benefiting you?**

In the programming world, quality is always a subjective and hard to measure aspect, Sonarqube helps us with a number associated to code covered by tests and three grades on our code quality for each project.

  ### 42. Cover your code using Sonar

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** November 01, 2017

At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.

**What do you like best about SonarQube?**

Code coverage, Adding templates of custom rule sets, existing rule sets, check the code quality, apply different solutions to adhere to the code quality and rectify the code quality violations and secure coding is very important aspect and very essential for gaining client trust. code coverage and unit test report is generated. Very well used in Continuous Integration.

**What do you dislike about SonarQube?**

Nothing as such. As per my usage knowledge, I have no dislikes with respect to SonarQube. Sonar qube is best used in all of the code coverage purpose and finding code quality. Improving the code quality is very important for client.

**Recommendations to others considering SonarQube:**

Yes, I would like to recommend to every developer and project to track and enhance the code quality and this facilitates code reviews.

**What problems is SonarQube solving and how is that benefiting you?**

Banking applications, Development and maintenance. Code coverage and code quality checks and report generation. 

  ### 43. Sonar Qube Review

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**G2 Icon:** Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise.

**Reviewed Date:** November 07, 2017

**What do you like best about SonarQube?**

Freedom to implement different type of analyses and the ability to quite quickly get some results. Its quite clear that the tool is going in the rigth direction and have the support from the community to carry on.

**What do you dislike about SonarQube?**

Requires some technical knowledge to deploy it and then analyse some results. If there is any way to automate a few steps and provide some basic help that with a few clicks people can see results it coud push it to another level.

**Recommendations to others considering SonarQube:**

Really try it! I become a fan!

**What problems is SonarQube solving and how is that benefiting you?**

Monitoring of development code regarding some quality rules and best practices. 
Some basic errors made by junior resources were identified and fixed even before going fwd for future 'copy-paste'. 

  ### 44. SonarQube issues/benefits

**Rating:** 2.5/5.0 stars

**Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** January 25, 2018

**What do you like best about SonarQube?**

Data visualization. Did a good job of using graphs and charts to better understand code quality 

**What do you dislike about SonarQube?**

Recognizing code coverage. Speed. Recognizing accurate code issues sometimes poor. 

**What problems is SonarQube solving and how is that benefiting you?**

Trying to improve code coverage and software quality. 

  ### 45. Good product for coding standards enforcement

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** October 11, 2017

At G2, we prefer fresh reviews and we like to follow up with reviewers. They may not have updated their review text, but have updated their review.

**What do you like best about SonarQube?**

Several pre defined coding standards , IDE support, Free community edition

**What do you dislike about SonarQube?**

Too much noise. No easy way to ignore all existing issues with several release mode projects. Licensed versions too costly
Takes long time to run rules
IDE support - cannot run analysis at package level

**What problems is SonarQube solving and how is that benefiting you?**

Enforce coding standards

  ### 46. Top Quality Code Quality Dashboard

**Rating:** 5.0/5.0 stars

**Reviewed by:** Shahram J. | Senior Java Backend Developer, Enterprise (> 1000 emp.)

**Current User:** The reviewer uploaded a screenshot or submitted the review in-app verifying them as current user.

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** October 06, 2017

**What do you like best about SonarQube?**

All valuable software metrics could be found packed in this nice piece of software.

**What do you dislike about SonarQube?**

I am so impressed by this software that can't see any downside in it.

**What problems is SonarQube solving and how is that benefiting you?**

Keeping an eye on the quality of software being developed like cohesion and technical debt.

  ### 47. Quality Gates and code coverage tool

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Internet | Mid-Market (51-1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** January 23, 2018

**What do you like best about SonarQube?**

Real time tracking of unit tests and code coverage

**What do you dislike about SonarQube?**

Nothing much, serves our purpose. UI is intuitive, so nothing I can think of. 

**Recommendations to others considering SonarQube:**

I would recommend everyone to try this software if you are evaluating tools for code coverage analysis 

**What problems is SonarQube solving and how is that benefiting you?**

Unit test
Code coverage by unit tests
Quality gates for CI/CD implementation

  ### 48. Amazing Tool

**Rating:** 5.0/5.0 stars

**Reviewed by:** Pranavi B. | DevOps Engineer, Information Technology and Services, Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** This reviewer was offered a nominal gift card as thank you for completing this review.

**Source: G2 invite:** Invitation from G2. This reviewer was offered a nominal gift card as thank you for completing this review.

**Reviewed Date:** October 27, 2017

**What do you like best about SonarQube?**

The best thing i like in SonarQube is - it not only helps to find bugs, it also provides solution to fix the bugs.

**What do you dislike about SonarQube?**

Nothing specific. I don`t have any anything.

**What problems is SonarQube solving and how is that benefiting you?**

Checking code quality, detect bugs and finding duplicate code

  ### 49. Salesforce Development Team using SonarQube

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.)

This reviewer's identity has been verified by our review moderation team. They have asked not to show their 
name, job title, or picture.


**Validated Reviewer:** This review contains authentic analysis and has been reviewed by our team

**Incentivized:** The reviewer received either a gift card or a donation made to a charity of their choice in exchange for writing this review.

**Source: G2 Gives Campaign:** G2 Gives Campaign. The reviewer received either a gift card or a donation made to a charity of their choice in exchange for writing this review.

**Reviewed Date:** November 06, 2017

**What do you like best about SonarQube?**

The ability to create stage gates and quality rules that tell me at a glance how many issues, and of what type, need to be addressed.

**What do you dislike about SonarQube?**

Integrations with Continuous Integration (CI) software requires workarounds, and there aren't many pre-built libraries to support them.

**What problems is SonarQube solving and how is that benefiting you?**

We can see at a glance whether the code is meeting quality standards, and can easily review and accept or schedule issues for remediation.

  ### 50. Best code review tool

**Rating:** 4.5/5.0 stars

**Reviewed by:** Sandeep J. | Specialist Master, Management Consulting, Enterprise (> 1000 emp.)

**Validated Reviewer:** Validated through LinkedIn

**Incentivized:** The reviewer received either a gift card or a donation made to a charity of their choice in exchange for writing this review.

**Source: G2 Gives Campaign:** G2 Gives Campaign. The reviewer received either a gift card or a donation made to a charity of their choice in exchange for writing this review.

**Reviewed Date:** November 06, 2017

**What do you like best about SonarQube?**

Accurate output every time when you use the sonar cube

**What do you dislike about SonarQube?**

ease of use can be improved. There should be ability for user to add new rulesets. 

**What problems is SonarQube solving and how is that benefiting you?**

code review


## SonarQube Discussions
  - [What is the benefit of SonarQube?](https://www.g2.com/discussions/what-is-the-benefit-of-sonarqube)
  - [What are the main components of SonarQube platform?](https://www.g2.com/discussions/what-are-the-main-components-of-sonarqube-platform)
  - [What is SonarQube and its features?](https://www.g2.com/discussions/what-is-sonarqube-and-its-features)
  - [What is the best way to integrate a plugin for the code coverage?](https://www.g2.com/discussions/what-is-the-best-way-to-integrate-a-plugin-for-the-code-coverage) - 1 upvote
  - [test coverage](https://www.g2.com/discussions/31154-test-coverage) - 1 upvote

- [View SonarQube pricing details and edition comparison](https://www.g2.com/products/sonarqube/reviews?open_modal_url=%2Fes%2Fproducts%2Fsonarqube%2Fwishlists%3Fhost_path%3D%252Fproducts%252Fsonarqube%252Freviews%26source%3Dsticky_header_pin&page=3&section=pricing&secure%5Bexpires_at%5D=2026-09-24+03%3A16%3A38+-0500&secure%5Bsession_id%5D=106a3eed-b5ba-429b-a77e-b330d013f8e2&secure%5Btoken%5D=2c1eb09b78ce71928592542a119e751324877b89315d1bfc143632eab1e8c37e&format=llm_user)

## SonarQube Features
**Additional Functionality**
- Tagging
- Natural Language Processing
- Data Extraction
- Multi-Language
- Predictive Analytics
- Drag & Drop
- Speech Recognition
- Reporting/Analytics
- Data Storage Management
- Virtual Personal Assistant (VPA)
- AI Copilot
- Customer Segmentation
- Collaboration Tools
- Data Import/Export
- Generative AI
- For eCommerce
- Role-Based Permissions
- Customizable Branding
- Search/Filter
- Monitoring
- Document Management
- API
- Data Visualization
- Trend Analysis
- Machine Learning
- Access Controls/Permissions
- Alerts/Escalation
- Performance Metrics
- Real-Time Data
- Third-Party Integrations
- Mobile App
- Multiple Data Sources
- For Sales Teams/Organizations
- Sentiment Analysis
- Activity Dashboard
- Chatbot
- Workflow Automation

**Additional Functionality**
- Code Generation
- Text to Image
- Generative AI
- API
- Natural Language Processing
- Virtual Characters and Avatars
- Content Generation
- Personalization and Recommendation
- Conditional Generation
- Transformer Model
- Automated Image & Video Editing
- Interactive and Co-Creative Systems
- Text Summarization
- Data Augmentation
- Variation Autoencoder Models
- Adversarial Training
- Transfer Learning and Fine-tuning
- Simulation and Scenario Generation
- Creative Design
- AI Copilot
- Prompt Engineering
- Foundation Model

**AI/Machine Learning**
- AI/Machine Learning

**Decision Support**
- Decision Support

**Collaboration Tools**
- Collaboration Tools

**Access Controls/Permissions**
- Access Controls/Permissions

**Task Management**
- Task Management

**Real-Time Monitoring**
- Real-Time Monitoring

**Natural Language Processing**
- Natural Language Processing

**AI Policy Mapping**
- AI Policy Mapping

**AI Risk Management**
- AI Risk Management

**Ethical AI Monitoring**
- Ethical AI Monitoring

**Audit Trail**
- Audit Trail

**Integration into Third Party Applications**
- Integration into Third Party Applications

**Product Lifecycle Management**
- Product Lifecycle Management

**Proactive Recommendations**
- Proactive Recommendations

**Administration**
- API / Integrations
- Extensibility

**Functionality**
- Repository Integration
- Analytics and Trends
- Productivity Updates

**Bug Reporting**
- User Reports & Feedback
- Tester Reports & Feedback
- Team Reports & Comments

**Functionality - Software Composition Analysis **
- Language Support
- Integration
- Transparency

**Documentation**
- Feedback
- Prioritization
- Remediation Suggestions

**Risk management - Application Security Posture Management (ASPM)**
- Vulnerability Management
- Compliance Management
- Policy Enforcement

**Functionality - Software Bill of Materials (SBOM)**
- Format Support
- Annotations
- Attestation

**AI Compliance**
- Regulatory Reporting
- Automated Compliance

**Agentic AI - Static Code Analysis**
- Adaptive Learning
- Natural Language Interaction
- Proactive Assistance

**Performance - AI AppSec Assistants**
- Remediation
- Real-time Vulnerability Detection
- Accuracy

**Analysis**
- Real-Time Analytics
- Issue Tracking
- Static Code Analysis
- Code Analysis
- Integrated Development Environment

**Management**
- Data Context
- Testing Integration

**Bug Monitoring**
- Analytics
- Bug History
- Data Retention

**Effectiveness - Software Composition Analysis**
- Remediation Suggestions
- Continuous Monitoring
- Thorough Detection

**Security**
- False Positives
- Custom Compliance
- Agility

**Integration and efficiency - Application Security Posture Management (ASPM)**
- Integration with Development Tools

**Management - Software Bill of Materials (SBOM)**
- Monitoring
- Dashboards
- User Provisioning

**Risk Management & Monitoring**
- Real-time Monitoring

**Integration - AI AppSec Assistants**
- Stack Integration
- Workflow Integration
- Codebase Contextual Awareness

**Security**
- Data Security
- Data loss Prevention
- Security Auditing
- Real-Time Data
- Cloud Application Security
- SSL Security

**Testing**
- Command-Line Tools
- Manual Testing
- Test Automation
- Compliance Testing
- Source-Code Scanning
- Detection Rate
- False Positives
- Multi-Language Scanning

**Reporting and Analytics - Application Security Posture Management (ASPM)**
- Trend Analysis
- Risk Scoring
- Customizable Dashboards

**Agentic AI - Bug Tracking**
- Adaptive Learning
- Natural Language Interaction
- Proactive Assistance
- Assignment Management
- Prioritization

**Additional Functionality**
- API
- Audit Trail
- Drag & Drop
- Projections
- Charting
- Ticket Management
- Monitoring
- Status Tracking
- Progress Tracking
- Workflow Management
- Project Time Tracking
- Issue Tracking
- Configurable Workflow
- Collaboration Tools
- Agile Methodologies
- Customizable Fields
- Backlog Management
- Real-Time Updates
- Single Sign On
- Generative AI
- Task Scheduling
- Activity Tracking
- Activity Dashboard
- Task Management
- Project Management
- Project Planning
- Feedback Management
- Code Repository Integration
- Reporting & Statistics
- Email Management
- Knowledge Base Management
- Multiple Projects
- Tagging
- AI Copilot
- File Management
- Issue Management
- Task Planning
- Data Visualization
- Bug/Issue Capture
- Bug Tracking
- Alerts/Notifications
- Commenting/Notes
- @mentions
- Third-Party Integrations
- Customizable Templates
- Task Progress Tracking
- Real-Time Notifications
- Access Controls/Permissions

**Identity**
- SSO
- Governance
- User Analytics
- Real-Time Analytics
- Visual Analytics
- Reporting/Analytics

**Access Control and Security**
- Pole-based Access Control (RBAC)

**Agentic AI - Static Application Security Testing (SAST)**
- Autonomous Task Execution

**Agentic AI  - Application Security Posture Management (ASPM)**
- Autonomous Task Execution
- Multi-step Planning

**Additional Functionality**
- Alerts/Notifications
- AI Copilot
- Access Controls/Permissions
- Endpoint Management
- Intrusion Detection System
- Compliance Management
- HIPAA Compliant
- Search/Filter
- API
- Two-Factor Authentication
- Data Visualization
- Risk Assessment
- Real-Time Monitoring
- Event Logs
- Activity Dashboard
- Audit Management
- Cloud Security Policy Management
- Vulnerability Protection
- Anti Virus
- Incident Management
- Threat Intelligence
- Real-Time Reporting
- Reporting & Statistics
- User Management
- Encryption
- Vulnerability Scanning
- Generative AI
- Status Tracking
- Third-Party Integrations
- Real-Time Notifications
- Patch Management
- Monitoring
- Cloud Encryption

**Additional Functionality**
- Debugging
- Generative AI
- AI Copilot
- For Developers
- Deployment Management
- Application Security
- Dashboard

**Agentic AI - AI Governance Tools**
- Autonomous Task Execution
- Multi-step Planning
- Cross-system Integration
- Adaptive Learning
- Natural Language Interaction
- Decision Making

## Top SonarQube Alternatives
  - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) - 4.6/5.0 (264 reviews)
  - [GitHub](https://www.g2.com/products/github/reviews) - 4.7/5.0 (2,341 reviews)
  - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (884 reviews)