SonarQube Features

Application Programming Interface Specification for how the application communicates with other software. APIs typically enable integration of data, logic, objects, etc. with other software applications.

Provides the ability to extend the platform to include additional features and functionalities

Analyze and gain insights into data in real-time

Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.

Examines application source code for security flaws without executing it.

Scans application source code for security flaws without executing it.

An application for source code editing, compiling, and debugging

Allows users to access a terminal host system and input command sequences.

Allows users to perfrom hands-on live simulations and penetration tests.

Runs pre-scripted security tests without requiring manual work.

Allows users to test applications for specific compliance requirements.

Scan the initial code written for application development

The rate at which scans accurately detect all vulnerabilities associated with the target.

The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.

Scan for security vulnerabilities in multiple coding languages

Provide insights into why trends are occurring and what issues could be related.

Integrate with manual and automated testing tools to increase bottleneck and problem identification.

Integrate with one or more code repositories.

Analyze historical data to highlight trends, statistics, and KPIs.

Follow assigned tasks across the development team to find quick turnarounds and bottlenecks.

Give users in-app method of reporting bugs and leaving general performance feedback.

Give testers in-app method of reporting bugs and leaving general performance feedback.

Give team members method of reporting bugs and leaving comments on bug status.

Provide reproducible, insightful info surrounding bug and crash scenarios.

Track history of bug status by application version, date, etc.

Store bug tracking data for an appropriate and useful amount of time.

Supports a useful and wide variety of programming languages.

Integrates seamlessly with the build environment and development tools like repositories, package managers, etc.

Grants comprehensive user-friendly insight into all open source components.

Provides relevant and helpful suggestions for vulnerability remediation upon detection.

Monitors open source components proactively and continuously.

Comprehensively identifies all open source version updates, vulnerabilities, and compliance issues.

Provides thorough, actionable feedback regarding security vulnerabilities, or allows collaborators to do the same.

Prioritizes detected vulnerabilities by potential risk, or allows collaborators to do the same.

Provides suggestions for remediating vulnerable code, or allows collaborators to do the same.

Does not falsely indicate vulnerable code when no vulnerabilitiy legitimately exists.

Allows users to set custom code standards to meet specific compliances.

Detects vulnerabilities at a rate suitable to maintain security, or allows collaborators to do the same.

Identifies, tracks, and remediates vulnerabilities

Ensures compliance with industry standards and regulations

Ensures mechanisms are in place for enforcing security policies across applications

Integrates with existing development and DevOps tools

Includes tools for analyzing trends in security incidents and vulnerabilities over time

Assigns scores to vulnerabilities based on their potential impact, helping prioritize remediation efforts

Provides customizable dashboards that present real-time data on vulnerabilities, risks, and compliance status

Supports relevant SBOM formats such as cycloneDX and SPDX.

Provides robust, industry standard SBOM annotation functionality.

Generates thorough evidence of compliance including component relationships, licenses, and more.

Automatically and continuously monitors components to alert users of noncompliant elements.

Presents a transparent and easy to use dashboard for performing SBOM management.

Includes controls for role-based access permissions.

Generates reports to demonstrate AI compliance with local and international frameworks.

Helps AI systems to comply with the regulations.

Monitors AI models for anomalies continuously.

Restricts access to AI models and sensitive data to authorized users.

Improves performance based on feedback and experience

Engages in human-like conversation for task delegation

Anticipates needs and offers suggestions without prompting

Assign issues and tasks based on availability or required skills

Arrange tasks based on the level of priority or urgency

Improves performance based on feedback and experience

Engages in human-like conversation for task delegation

Anticipates needs and offers suggestions without prompting

Capability to perform complex tasks without constant human input

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Works across multiple software systems or databases

Improves performance based on feedback and experience

Engages in human-like conversation for task delegation

Makes informed choices based on available data and objectives

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Automatically remediates or suggests remediation that meets internal and external code security best practices.

Automatically detects all security flaws in code as it's being written.

Does not flag false positives.

Integrates with existing security tools to fully contextualize remediation suggestions.

Seamlessly integrates into developers' existing workflows and environments to provide code security assistance.

Considers the entire codebase to detect existing and emerging security flaws.

Application programming interface that allows for integration with other systems/databases

A record of all activities within the system, including user access, changes made, etc.

Assemble applications and processes by dragging over and arranging pre-built components

Estimate or forecast of a future scenario based on the study of present trends

Manage patient documentation describing all clinical interactions, diagnoses, procedures, medications, etc.

Track, manage, or resolve user requests and IT incidents/issues

Observe and track the demand, usage, progress or quality of a system, product, or user

Track the status over time for a request, process, asset, or transaction

Reporting on how each user, task or process has advanced since its initiation

Create, design and manage workflows for repetitive tasks

Measure time to completion or hours worked for projects

Record and follow the progress of every issue

Configure existing workflows to meet your organization's needs

Provides a channel for team members to share media files, communicate, and work together

Iterative project Management approach that involves technologies such as Kanban, Scrum, XP, APF, XPM and more

Customize data fields to support various needs and use cases

The process of evaluating, scheduling, and assigning tasks that have been put on the back burner in favor of higher priority items.

Receive system updates as soon as any changes are made

Allow users to access multiple services after entering their login credentials once

Use AI to generate content in the form of text, images, videos, etc.

Track and manage the scheduling of tasks

Track and document all activities across devices, networks, and other systems

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Create, manage and track all task activities and progression

Plan and coordinate all the resources, costs and time needed to execute assignments

Organize and schedule projects

Collecting, analyzing, and utilizing feedback from users or customers to improve a product or service

Connect to code repositories (e.g., Git or SVN) to import a project or automate the scanning of source code

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Manage, store and organize emails within the system or via third-party apps

Manage a repository of information that includes articles, FAQs, or tutorials used for self-service support

Ability to handle several projects simultaneously

Attach digital tags to documents and assets for identification, search, or monitoring purposes

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Create, save, and store files

Identify and respond to unexpected problems or failures (ie. "negative events")

Graphical representation of data

The creation of a bug/issue ticket, submitted by a team member, customer or end user

Monitor and track bugs and issues in the system.

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Leave comments and notes on documents for others to view

An @mention is a way to tag or notify a specific person about a message/post

Set up connections to third-party platforms to improve business processes

Pre-designed layouts that can be customized to match preferences and requirements

Track the status and progress of tasks

Notifications that are delivered to users as soon as an event occurs

Define levels of authorization for access to specific files or systems

Detect and remove errors

Use AI to generate content in the form of text, images, videos, etc.

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

For the intention to be used by developers

Manage the processes involved when making the application ready for use

Identify and respond to security threats to developed applications

Assembly of graphs and charts for visualizing and tracking statistics/metrics

Software program that continuously adjusts its behavior based on observed data

Tools that provide relevant information at specific times to support judgments and courses of action

Provides a channel for team members to share AI models, media files, communicate, and work together

Define levels of authorization for access to specific files or systems

Create, manage and track all task activities and progression

Active monitoring of systems, applications, or networks

Process and analyze human language in text or audio form

Automatically map and compare AI governance policies with actual development and deployment practices

Identify and prioritize AI risks using advanced algorithms, prevent critical vulnerabilities, and mitigate risks when required

Measure AI systems' ethical alignment to ensure compliance, fairness, transparency, and security

A record of all activities within the system, including user access, changes made, etc.

Embed/link applications into third party software so it can be accessed within a third party system

Manage and track all stages of a product lifecycle, from its conception, design, development, and deployment

Anticipates needs and offers suggestions without prompting