It's been two months since this profile received a new review

SonarQube Reviews & Product Details

SonarQube helps developers continuously improve the quality and security of both AI-generated and human-written code. It addresses key areas including: - Code Quality: Ensuring all code meets high standards. - Code Security: Detecting security risks in code and open source. - Code Remediation: Fixing issues quickly and modernizing older code using AI. - Code Orchestration: Protecting the software development lifecycle with monitors and controls. The SonarQube solution is offered in three forms: SonarQube Server, SonarQube Cloud, and SonarQube for IDE SonarQube Server SonarQube Server is a self-managed static code analysis tool that ensures all developer-written and AI-generated code meets the highest coding standards. By integrating with the top DevOps platforms in the CI/CD pipeline, SonarQube Server continuously inspects projects across multiple programming languages, providing immediate quality and security feedback seamlessly within the developer workflow. SonarQube Server’s quality gates become part of the build pipeline to protect codebase health, displaying pass/fail results and preventing substandard code from reaching production. At its core, SonarQube Server includes a static code analyzer that identifies bugs, security vulnerabilities, hidden secrets, and code smells, uncovering issues early in the SDLC and presenting them in a clear, helpful way for developers to resolve. Developers are guided through issue resolution with precise AI-driven fixes, including details on why the issue is a problem, fostering a culture of continuous improvement and education. SonarQube Server’s powerful real-time dashboards provide actionable insights to dev teams and leadership for monitoring the progress of code health and quality across multiple projects in your portfolio. With over 6,000 rules, SonarQube Server analyzes 30+ of the most popular programming languages, including dozens of frameworks, and the leading infrastructure as code (IaC) platforms with high accuracy and low false positives. SonarQube Cloud SonarQube Cloud is a cloud-based alternative to the SonarQube Server platform. It is a fully managed SaaS solution, improving human-developed and AI-assisted code at scale, offering continuous code quality and security analysis as a service. SonarQube Cloud integrates seamlessly with popular version control and CI/CD platforms such as GitHub, Bitbucket, GitLab, and Azure DevOps. It provides static code analysis to identify and help remediate issues such as bugs and security vulnerabilities. SonarQube Cloud enables developers to receive immediate feedback on their code within their development environment, facilitating the maintenance of high-quality code standards, and promoting a culture of continuous improvement in software development projects. It helps produce software that is secure, reliable, and maintainable. SonarQube for IDE SonarQube for IDE (formerly Sonarlint), a core component of the SonarQube solution, is a free and open-source IDE plugin, that is a developer's first line of defense to find and fix coding issues in real time. SonarQube for IDE resolves issues in code and provides rich contextual guidance to help developers improve their skills while enhancing their productivity. Supporting over 25 languages and the most popular IDEs, SonarQube for IDE leverages over 5,000 language-specific Clean Code rules to instantly highlight common coding issues that may lead to, bugs, and vulnerabilities.

Product Website

Seller

SonarSource Sàrl

Discussions

SonarQube Community

Languages Supported

English

Overview by

London Sarabia

Pricing

Pricing provided by SonarQube.

Cloud-base: Enterprise

Per Year

View More Pricing Information

SonarQube Integrations

(4)

Verified by SonarQube

SonarQube Media

SonarQube Demo - Screenshot of Application Status

SonarQube Demo - Screenshot of Security Report

SonarQube Demo - Screenshot of Portfolio Overview

SonarQube Enterprise Solution Demo

Official Downloads

(4)

edit

Interactive Demo

edit

Try an interactive demo created by the software seller (right here on G2).

Try demo

SonarQube Reviews (125)

G2 reviews are authentic and verified.

Here's how.

Aadarsha S.

Tranee DevOps

Small-Business (50 or fewer emp.)

8/26/2025

"Improving Code with SonarQube"

5/5

What do you like best about SonarQube?

SonarQube makes it easy to maintain high code quality by automatically detecting bugs, vulnerabilities, and code smells. I like how it integrates with CI/CD pipelines and provides clear, actionable insights for developers. The detailed dashboards and quality gates help enforce coding standards across teams. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

The initial setup and configuration can be a bit complex, especially for new users. It also requires tuning to avoid too many false positives. For very large projects, performance can sometimes feel slower, and the UI could be more modern and intuitive. Review collected by and hosted on G2.com.

Arnaud T.

Head of Architecture

Mid-Market (51-1000 emp.)

4/16/2025

"A great actionnable tool for developers"

4.5/5

What do you like best about SonarQube?

SonarCloud is very easy to set up, and integrates nicely into your development platform.

It supports a large number of languages, rules, and can be configured to fit your needs.

Teams use it on a daily basis without needing to think of it.

It is also very intuitive and robust, so you will hardly need technical support ; if you need to, the community website is the way to go for quick answers. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

The 2024 changes in pricing and product organization led to some hard discussions on pricing internally. The pricing is fair, but the price hike was hard to swallow by the management. Review collected by and hosted on G2.com.

What problems is SonarQube solving and how is that benefiting you?

Using SonarCloud, we are able to take actions on security, bugs, and overall quality issues before the code reaches the main branch.

The quality gates concept allows to focus on new code, by improving it. Upon time, this focus on touched code on a daily basis vastly improves the overall code base quality. Review collected by and hosted on G2.com.

Diego M.

IT & Security Lead

Mid-Market (51-1000 emp.)

10/14/2025

"SonarQube: Great for Code Quality, but Community Edition Upgrades Are Frustrating"

4.5/5

What do you like best about SonarQube?

I like how easy it is to spot issues before they hit production. SonarQube gives clear feedback and keeps our codebase clean and secure. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

The community edition is pretty difficult to upgrade. All the available documentation is vague. Review collected by and hosted on G2.com.

Rene M.

Solution Architect

Outsourcing/Offshoring

Mid-Market (51-1000 emp.)

10/8/2025

"The best code testing platform for your web development and apps"

5/5

What do you like best about SonarQube?

I love that it is really easy to use, it can be integrated with GitHub, and it can review a wide array of code languages Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

It can be overwhelming when you get your first review Review collected by and hosted on G2.com.

Richy A.

Director of technology

Mid-Market (51-1000 emp.)

10/22/2025

"Outstanding Code Quality Sets It Apart"

5/5

What do you like best about SonarQube?

Code quality and potential errors in code flows Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

The inability to link issues reported in sonar to tickets in Gitlab Review collected by and hosted on G2.com.

Gourav S.

Technical Architect

Enterprise (> 1000 emp.)

7/4/2025

"Intuitive Dashboard for SAST and Seamless Integration with Azure DevOps pipeline by SonarQube"

5/5

What do you like best about SonarQube?

SonarQube is a very easy-to-use and effective tool for code coverage analysis and SAST. It integrates seamlessly with Azure DevOps pipelines. The intuitive Dashboard provides easy access to analysis reports with multiple filters. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

Seemed that getting a quotation takes time. Review collected by and hosted on G2.com.

What problems is SonarQube solving and how is that benefiting you?

Using SonarLint IDE plugin, developers get instant information about vulnerabilities. SonarQube helps us to restrict the developers to merge code into target releases where the Quality Gate is passed - making sure that no vulnerable code gets into the target branch. Also, SonarQube scan at CI build level ensures that the build happens using secure code only. Review collected by and hosted on G2.com.

Danilo M.

SRE & Platform Manager

Mid-Market (51-1000 emp.)

7/16/2025

"Seems to have potential in a near future"

4/5

What do you like best about SonarQube?

It's was fast and easier to implement and get things done, the IDE plugin works very well and is easy to understand the rules. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

I struggling to understand metrics and how AI Code features can really help the business. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Small-Business (50 or fewer emp.)

10/23/2025

"Helpful Code Suggestions, Though Sometimes Misses the Mark"

4.5/5

What do you like best about SonarQube?

SonarQube gives code suggestions that are secure and give ideas how it can be written in a better way Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

The suggestions are not always relevant for the code. Review collected by and hosted on G2.com.

Verified User in Insurance

Mid-Market (51-1000 emp.)

7/3/2025

"QA on code"

4/5

What do you like best about SonarQube?

That helps developers maintain high code quality standards Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

I don't dislike nothing in particular . Review collected by and hosted on G2.com.

Kevin B.

Senior DevOps Engineer

Mid-Market (51-1000 emp.)

6/27/2024

"Effective Code Quality Management with SonarQube"

4/5

What do you like best about SonarQube?

What I love about SonarQube is how it digs deep into my code and finds hidden issues which are not as obvious when writing the code, especially bugs and security problems, across different programming languages. It hooks up smoothly with my CI/CD pipelines, which means I can keep an eye on code quality at every step. The reports it generates are super detailed and really help the team see where we can improve. Plus, you can customize the rules and use tons of plugins to make it work just how you need it. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

The one thing that I dislike is how much it can slow things down when you're working with big projects. The scans can take a while, which sometimes messes with our workflow, and we cannot use parallel analysis as we are on the Developer license since the Enterprise is too costly for us. Also, setting it up and getting everything configured right can be a bit of a headache and takes some time. Review collected by and hosted on G2.com.

What problems is SonarQube solving and how is that benefiting you?

SonarQube is a lifesaver for keeping our code clean, secure, and easy to maintain. It’s always on the lookout, catching bugs, code smells, and security issues early in the game. This means our codebase stays solid and we don’t end up with a pile of technical debt.

For me and the team, it’s been a game-changer. We get automatic code reviews and detailed feedback that helps us catch issues before they cause any real trouble. The insights we get from the quality metrics push us to keep improving our code. Integrating SonarQube into our CI/CD pipelines has really smoothed out our quality checks, making sure we keep high standards from start to finish. All in all, it’s made our software better and we feel way more confident in what we deliver. Review collected by and hosted on G2.com.