--- title: SonarQube Reviews meta_title: 'SonarQube Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 155 reviews by the users' company size, role or industry to find out how SonarQube works for a business like yours. aggregate_rating: rating_value: 4.4 review_count: 155 scale: '5' date_modified: '2026-08-13' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # SonarQube Reviews **Vendor:** SonarSource Sàrl **Category:** [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis) **Average Rating:** 4.4/5.0 **Total Reviews:** 155 ## About SonarQube Sonar, the industry standard for code verification and automated code review, helps reduce outages, improve security, and lower risks associated with AI and agentic coding. As an independent verification platform, Sonar enables organizations to securely develop at the speed of AI. Sonar is the foundation for high-performance software engineering, analyzing over 750 billion lines of code daily to ensure applications are secure, reliable, and maintainable. Rooted in the open source community, Sonar is trusted by 7M+ developers globally, including teams at ServiceNow, Booking.com, Deutsche Bank, AstraZeneca, and Ford Motor Company. ## SonarQube Pros & Cons **What users like:** - Users value how SonarQube **efficiently flags code quality and security issues** , ensuring a clean and maintainable codebase. (24 reviews) - Users value the **issue filtering and prioritization features** of SonarQube, enhancing focus on high-priority tasks. (20 reviews) - Users value the **issue identification and prioritization** features of SonarQube, improving focus on critical tasks. (19 reviews) - Users find SonarQube's **ease of use** invaluable for maintaining code quality and integrating seamlessly into development workflows. (18 reviews) - Users appreciate the **easy integrations** with existing CI/CD tools, enhancing their development workflow seamlessly. (18 reviews) - Users value the **seamless integration** of SonarQube with CI/CD pipelines, enhancing code quality management effortlessly. (18 reviews) - Security (15 reviews) - Vulnerability Detection (15 reviews) - Code Review (12 reviews) - Integration Support (12 reviews) **What users dislike:** - Users face challenges with **software bugs** as SonarQube can consume excessive RAM and occasionally reports false positives. (12 reviews) - Users find SonarQube's configuration **complex** , especially for beginners, leading to difficulties and overwhelming warnings to manage. (10 reviews) - Users encounter **false positives** that complicate evaluations, though mitigation options exist through detailed analysis and rule customization. (10 reviews) - Users find that SonarQube's **complexity in configuration** and excessive warnings can hinder effective usage and efficiency. (8 reviews) - Users find the **complex setup** of SonarQube challenging, especially for beginners unfamiliar with the configuration process. (8 reviews) - Users often face **integration issues** with SonarQube, particularly in connecting to GitLab and navigating its complexities. (8 reviews) - Users find SonarQube's **limited features** frustrating, particularly with restrictions on scanning and analysis capabilities. (8 reviews) - Users note that the **expensive nature** of SonarQube limits access to advanced features and complicates setup. (7 reviews) - Difficult Setup (6 reviews) - Setup Difficulty (6 reviews) ## SonarQube Reviews ### 1. SonarQube: Easy Integration, Simple UI, and Solid Free Code Quality Scanning **Rating:** 4.5/5.0 stars **Reviewed by:** Divyarajsinh C. | Software Engineer , Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** June 18, 2026 **What do you like best about SonarQube?** I’ve been using SonarQube for more than three years, and overall it has been an amazing experience. I use the free version for code quality scanning, and the best part is how easily it integrates with our project and fits into our workflow. The UI is simple and straightforward, which makes the learning curve feel very manageable. On top of that, the free version includes almost all the features I need, so it covers my day-to-day requirements well. And the code scanning and quality check speed is good enough in the free version as well. **What do you dislike about SonarQube?** In the free version, only 5 users are allowed across the organization account, which feels too limited. It should allow at least 10 users. Also, the free version doesn’t include PR analysis; it would be much more useful if it allowed at least one PR/branch analysis per account. **What problems is SonarQube solving and how is that benefiting you?** In our organization, we set up a local server where we configured SonarQube and integrated it into every local project in the company. This has been beneficial for everyone, since we can run code-quality checks and catch syntax errors early, which helps us deploy more optimized and cleaner code. ### 2. SonarQube Makes Code Quality Clear with Strong Quality Gates and CI/CD Integration **Rating:** 4.5/5.0 stars **Reviewed by:** Kishor G. | Cloud Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** July 22, 2026 **What do you like best about SonarQube?** What I like best about SonarQube is how it makes code quality easy to understand and improve. Instead of just pointing out bugs, it also highlights security vulnerabilities, code smells, and maintainability issues in a clear and organized way. The quality gates are especially useful because they help catch problems before code is merged, encouraging better coding practices across the team. It also integrates well with CI/CD pipelines, making code reviews more efficient and helping developers build cleaner, more reliable software from the start. **What do you dislike about SonarQube?** One thing I dislike about SonarQube is that it can sometimes produce false positives or flag issues that are not very relevant to the project. It also takes some time to fine-tune the rules so they match a team's coding standards, especially for larger codebases. For beginners, the number of reported issues can feel overwhelming at first, making it hard to know what to prioritize. While it's a powerful tool, it works best when its recommendations are reviewed with context rather than treated as absolute. **What problems is SonarQube solving and how is that benefiting you?** SonarQube helps solve the challenge of maintaining consistent code quality by automatically identifying bugs, security vulnerabilities, and code smells before they make it into production. This has made my development process more efficient because I can catch issues early instead of discovering them during testing or after deployment. It also encourages better coding practices by providing clear, actionable feedback, which has improved the overall maintainability of my code and reduced the time spent on fixing avoidable problems later. ### 3. Catches bugs early, saves us time **Rating:** 5.0/5.0 stars **Reviewed by:** Srinidhi H. | Senior Product Manager – Enterprise Integrations and Data Solutions, Small-Business (50 or fewer emp.) **Reviewed Date:** July 09, 2026 **What do you like best about SonarQube?** What I like best is that SonarQube catches issues before they ever reach production. The static analysis runs automatically in our CI pipeline, so every pull request gets flagged for code smells, bugs, and security vulnerabilities without anyone having to remember to check manually. The Quality Gate feature is the standout for us — it blocks merges that don't meet our thresholds, which has cut down on the "we'll fix it later" tech debt that used to pile up. I also lean on the detailed rule explanations; instead of just saying "this is wrong," it explains why and how to fix it, which has genuinely helped level up our more junior developers. An unexpected benefit was the coverage tracking over time — being able to see the trend line has made it much easier to justify testing investments to leadership. **What do you dislike about SonarQube?** Setup can be a pain honestly. Getting the initial config right with our CI took longer than expected and the docs arent always clear. Also the false positives can be annoying sometimes, you end up marking stuff as wont fix pretty often. Wish the integrations were a bit more plug and play. **What problems is SonarQube solving and how is that benefiting you?** Before SonarQube we were catching bugs way too late, usually in code review or worse after something shipped. Now it runs in our pipeline and flags stuff early so we spend less time cleaning up messes later. Code quality across the team is more consistent too since everyones held to the same rules. Cut down our review time noticeably, maybe a few hours a week. ### 4. Automated Code Quality Gatekeeper That Catches Sneaky Bugs Early **Rating:** 5.0/5.0 stars **Reviewed by:** Shailja S. | Product Management, Enterprise (> 1000 emp.) **Reviewed Date:** June 17, 2026 **What do you like best about SonarQube?** It’s a standalone and automated gatekeeper of my code quality and security that reduces dependency on peer reviews to discover a critical bug. It helps me catch those sneaky bugs and code smells thus preventing poor code from moving to production. **What do you dislike about SonarQube?** We’ve observed little bit of false positive fatigue that kicks in sometimes owing to perfectly written code being flagged as a bug thus causing team to spend lots of time arguing with the tool, and eventually commenting few things out. CPU utilisation is typically seen to be high when CI/CD pipeline is undergoing Sonarqube checks. **What problems is SonarQube solving and how is that benefiting you?** Sonarqube helps me solve the messiness and the friction that typically occurs when my team of 10+ engineers are all writing the code together. A common quality gate of 95+ ensure my team’s only delivering the best of code in production. ### 5. Robust Code Quality and Security, Needs Smoother Setup **Rating:** 4.5/5.0 stars **Reviewed by:** Om Dhar G. | Senior System Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** May 11, 2026 **What do you like best about SonarQube?** I like SonarQube for its real-time code analysis, detailed issue reporting, and security vulnerability detection. The easy integration with CI/CD pipelines like Jenkins and GitHub Actions is particularly beneficial. It helps us catch issues early in development, reduce production bugs, improve code maintainability, and save review time. The CI/CD integration automates quality checks, which boosts deployment confidence and team productivity. We switched to SonarQube because it provided better code quality analysis, stronger security checks, and smoother CI/CD integration than our previous tools. Overall, I would rate SonarQube around 8/10 because of its strong code quality analysis, security features, and CI/CD integration capabilities. **What do you dislike about SonarQube?** Some areas where SonarQube could improve are occasional false positives, high resource usage for large projects, and a slightly complex setup and configuration process for beginners. **What problems is SonarQube solving and how is that benefiting you?** I use SonarQube to analyze code quality, detect bugs and security vulnerabilities, and maintain coding standards. It helps us catch issues early, reduce production bugs, improve code maintainability, and save review time. The CI/CD integration automates checks, increasing deployment confidence and team productivity. ### 6. Reliable static code analysis that improves code quality & enforces standards for our clients **Rating:** 5.0/5.0 stars **Reviewed by:** Shrey S. | Associate Principal Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** February 17, 2026 **What do you like best about SonarQube?** What I like best about SonarQube is how consistently it helps me maintain code quality without relying only on manual reviews. I’ve integrated it into my Jenkins pipeline, so every build runs a scan automatically. The Quality Gate acts as a clear checkpoint, if something critical is flagged, it forces us to address it before moving forward. For Java projects, the rules are quite mature and practical. It regularly catches potential null pointer issues, unused code, and other code smells that are easy to miss during development. Over the years, it has helped me catch potential bugs early that could have impacted our production system if they had gone unnoticed. I also like the visibility it provides. Being able to track issues, technical debt, and code coverage trends over time helps me make better decisions, especially when working on older modules. It’s not just about finding problems, it helps enforce a consistent standard across the team. After using it for almost 9 years, it has become a dependable part of my development process rather than just another tool in the stack. **What do you dislike about SonarQube?** One challenge with SonarQube, especially in the Community Edition that I am using is that the initial setup and rule tuning takes time. Out of the box, some rules can feel overly strict, particularly for older or legacy Java projects. My first scan in 2017 generated a very large number of issues, which was honestly overwhelming. It required effort to decide what to prioritize and how to gradually improve the codebase instead of trying to fix everything at once. Another limitation is that some advanced features are only available in the paid editions. For example, more advanced security analysis and branch-level features would be useful, but they’re not included in Community Edition. That’s understandable from a product standpoint, but it does limit some functionality for teams that want to stay on the free version. Also, when the issue count grows large, navigating and triaging findings can sometimes feel a bit time-consuming. Overall, none of these are deal-breakers, but they do require some planning and discipline to get the most value out of the tool. **What problems is SonarQube solving and how is that benefiting you?** SonarQube helps me solve the problem of inconsistent code quality across the team. Before we had it fully integrated into my Jenkins pipeline, a lot of quality checks depended heavily on individual reviewers. That sometimes led to inconsistencies, especially with a growing team. By running automated scans on every build, I, now have a consistent baseline for code quality in our Java projects. The Quality Gate ensures that critical issues, major bugs, or high-severity vulnerabilities are addressed before code moves forward. This has reduced the risk of avoidable defects reaching production. It has also helped me manage technical debt in a more structured way. Instead of discovering problems late in testing or after release, I catch many of them during development. Over time, this has led to cleaner code, fewer production issues caused by simple oversights, and more focused code reviews. Another benefit is visibility. ### 7. All-in-One Code Quality and Security Insights **Rating:** 5.0/5.0 stars **Reviewed by:** Jahangeer W. | Staff SRE, Mid-Market (51-1000 emp.) **Reviewed Date:** June 17, 2026 **What do you like best about SonarQube?** It is really helpful for automatically identifying code quality issues, security vulnerabilities, bugs, and technical debt, all in a single place. **What do you dislike about SonarQube?** Sometimes it flags issues, but that’s acceptable when you look at them in context. The initial rule configuration feels a bit hectic, and the UI isn’t particularly user-friendly. **What problems is SonarQube solving and how is that benefiting you?** For us, SonarQube helps prevent low-quality and vulnerable code from reaching production deployments. It also enables automated deployment failures when the code is considered risky or vulnerable as per our set rules. ### 8. Sonarqube review **Rating:** 5.0/5.0 stars **Reviewed by:** Prakash E. | Sr. Software Engineer (DevOps), Small-Business (50 or fewer emp.) **Reviewed Date:** July 07, 2023 **What do you like best about SonarQube?** Deployed through helm on eks with stateful **What do you dislike about SonarQube?** AI integration need to add in sonar for remediation steps **What problems is SonarQube solving and how is that benefiting you?** Its generating code quality reports in efficient way. Its benifiting you very usefully ### 9. Clear, Actionable Feedback and Strong Quality Gates That Improve Code Early **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** February 16, 2026 **What do you like best about SonarQube?** Clear, actionable feedback: Issues are explained with examples and remediation guidance, so developers know what to fix and how to fix it. Strong focus on Clean Code: The Quality Gate concept helps teams align around maintainability, reliability, and security as non-negotiable standards. Early detection of bugs and vulnerabilities: Catching problems during development or CI prevents costly fixes later in production. Excellent CI/CD integration: It fits naturally into pipelines (GitHub, GitLab, Azure DevOps, Jenkins), making quality checks automatic. Language and framework coverage: Supports a wide range of languages, which is ideal for heterogeneous teams. Developer-friendly dashboards: Metrics and trends are easy to understand, helping teams continuously improve instead of just “passing checks”. **What do you dislike about SonarQube?** False positives and rigid rules: Some rules don’t always fit real-world or legacy codebases, requiring frequent tuning or suppressions. Steep learning curve at the beginning: Understanding rules, Quality Gates, and how to interpret certain metrics can be challenging for new teams. Noise in large or old projects: In legacy systems, the volume of issues can be overwhelming and may reduce perceived value if not introduced gradually. **What problems is SonarQube solving and how is that benefiting you?** Inconsistent code quality across teams SonarQube enforces shared standards through Quality Gates, which reduces subjective code review discussions and aligns everyone on what “good code” means. Late discovery of bugs and security issues By analyzing code early in the CI pipeline, it catches bugs, vulnerabilities, and code smells before they reach production, lowering rework and incident risk. Technical debt accumulation SonarQube makes technical debt visible and measurable, helping teams prioritize refactoring instead of letting maintainability silently degrade. Time-consuming and unfocused code reviews Automated analysis filters out low-value comments, allowing reviewers to focus on architecture, business logic, and design decisions. ### 10. Effective Static Code Analysis for Development Teams **Rating:** 4.5/5.0 stars **Reviewed by:** Gaurav S. | Director, Customer Success, Mid-Market (51-1000 emp.) **Reviewed Date:** July 07, 2026 **What do you like best about SonarQube?** I like that SonarQube automatically identifies code quality and security issues early, provides clear, actionable feedback, and helps maintain consistent coding standards through quality gates. **What do you dislike about SonarQube?** It can occasionally report false positives, and configuring rules to match a team's coding standards can be time-consuming. **What problems is SonarQube solving and how is that benefiting you?** SonarQube catches code quality and security issues early, helping reduce technical debt, improve code maintainability, and ensure consistent coding standards. This saves time during code reviews and helps prevent issues from reaching production. ### 11. Essential for Code Quality, Needs UI Improvements **Rating:** 4.5/5.0 stars **Reviewed by:** Prakhar M. | Data Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** April 27, 2026 **What do you like best about SonarQube?** I like how SonarQube gives clean actionable insights and highlights issues right in pull requests. The dashboard and quality gate are very useful. The dashboards give a quick, centralized view of code health across projects, and quality gates ensure only code meeting defined standards gets merged. The initial setup was easy thanks to the documentation. **What do you dislike about SonarQube?** It sometimes feels slow on large projects, and UI can be a bit overwhelming for new users. **What problems is SonarQube solving and how is that benefiting you?** I use SonarQube for automated code quality and security checks, integrated into our CI/CD pipeline. It catches bugs and vulnerabilities early, provides clean insights right in pull requests, and ensures code meets quality gates before merging. ### 12. Effortless Code Quality Enhancement and Security **Rating:** 5.0/5.0 stars **Reviewed by:** Do Nhat K. | Mid-Market (51-1000 emp.) **Reviewed Date:** February 23, 2026 **What do you like best about SonarQube?** I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is great. It's easy to integrate into our CI/CD, giving us a whole view of our codebase including code quality, code structure, and security. The initial setup was so simple on Jenkins, just had to install a plugin and input parameters. **What do you dislike about SonarQube?** I think now we are good, just has some issue when starting integrating but support team already helping us. **What problems is SonarQube solving and how is that benefiting you?** I use SonarQube to check code quality, fix security issues, and make code cleaner. It integrates easily with our CI/CD, giving a comprehensive view of code quality, structure, and security. ### 13. Simple UI, Robust Code Analysis **Rating:** 4.5/5.0 stars **Reviewed by:** Ladislav K. | Vedoucí manažer týmu, Mid-Market (51-1000 emp.) **Reviewed Date:** February 17, 2026 **What do you like best about SonarQube?** I like SonarQube's simple UI which makes navigation straightforward for me, and the report functionalities that provide clear insights into code issues. Additionally, I appreciate the good filtering of issues, which helps in easily identifying and categorizing code problems. **What do you dislike about SonarQube?** I find issues with connecting to a real-time developer tool which could speed up the workflow for source code analysis. The process of moving analysis to developer tools and having SonarQube as the final place for product analysis reports feels like it needs improvement. I also encountered problems when connecting to LDAP, even though the installation itself was simple. **What problems is SonarQube solving and how is that benefiting you?** I use SonarQube for source code scanning, monitoring code vulnerabilities, inconsistency, and performance troubles. It solves source code problems and improves maintainability. ### 14. Excellent Quality Gates for DevOps Automation **Rating:** 4.5/5.0 stars **Reviewed by:** Sonti P. | Site Reliability Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** April 07, 2026 **What do you like best about SonarQube?** Excellent Quality Gates for DevOps automation. **What do you dislike about SonarQube?** The UI for managing complex branch configurations can be a bit overwhelming and non-intuitive. **What problems is SonarQube solving and how is that benefiting you?** Without Sonar, bugs are often found in production or UAT. SonarQube solves this by "Shifting Left"—catching issues while the code is still in the dev stage. ### 15. Catches Bugs Early and Boosts Code Quality **Rating:** 5.0/5.0 stars **Reviewed by:** Karishma H. | Program Manager - Talent Development, Enterprise (> 1000 emp.) **Reviewed Date:** July 02, 2026 **What do you like best about SonarQube?** It helps catch bugs early and improves overall code quality. **What do you dislike about SonarQube?** Some of the rules feel overly strict, and the setup process is more complex than it needs to be. **What problems is SonarQube solving and how is that benefiting you?** It helps detect bugs, security vulnerabilities, and code quality issues before deploying. ### 16. Streamlining Software Composition Analysis (SCA) Within the Dev Workflow **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Pharmaceuticals | Small-Business (50 or fewer emp.) **Reviewed Date:** February 23, 2026 **What do you like best about SonarQube?** It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug-free code consistently. The real-time feedback allows our developers to fix issues immediately before they reach production. **What do you dislike about SonarQube?** One major drawback is the lack of a built-in feature to easily export detailed analysis reports into formats like PDF or Excel. This makes it difficult to share status updates with stakeholders who don't have direct access to the SonarQube dashboard. **What problems is SonarQube solving and how is that benefiting you?** SonarQube helps us ensure our code is clean and bug-free before it ever reaches production. By using it for static code analysis, we catch security vulnerabilities and "code smells" early in the development cycle, which saves us a lot of time on manual debugging and improves our overall software reliability. ### 17. SonarQube Quickly Flags Code Quality and Security Issues **Rating:** 4.5/5.0 stars **Reviewed by:** Pankaj J. | IT, Medical Devices, Small-Business (50 or fewer emp.) **Reviewed Date:** February 20, 2026 **What do you like best about SonarQube?** I like SonarQube because it quickly flags code quality and security issues, making it easier for me to keep the codebase clean, reliable, and maintainable over time. **What do you dislike about SonarQube?** I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to sort through. **What problems is SonarQube solving and how is that benefiting you?** SonarQube helps us catch code quality and security issues early in the development process, which boosts our confidence in each release and cuts down on rework later on. ### 18. Improving Code with SonarQube **Rating:** 5.0/5.0 stars **Reviewed by:** Aadarsha S. | Tranee DevOps, Small-Business (50 or fewer emp.) **Reviewed Date:** August 26, 2025 **What do you like best about SonarQube?** SonarQube makes it easy to maintain high code quality by automatically detecting bugs, vulnerabilities, and code smells. I like how it integrates with CI/CD pipelines and provides clear, actionable insights for developers. The detailed dashboards and quality gates help enforce coding standards across teams. **What do you dislike about SonarQube?** The initial setup and configuration can be a bit complex, especially for new users. It also requires tuning to avoid too many false positives. For very large projects, performance can sometimes feel slower, and the UI could be more modern and intuitive. **What problems is SonarQube solving and how is that benefiting you?** SonarQube helps us identify bugs, vulnerabilities, and code smells early in the development process. It improves code quality, ensures better security, and saves time by catching issues before they reach production. ### 19. A great actionnable tool for developers **Rating:** 4.5/5.0 stars **Reviewed by:** Arnaud T. | Head of Architecture, Mid-Market (51-1000 emp.) **Reviewed Date:** April 16, 2025 **What do you like best about SonarQube?** SonarCloud is very easy to set up, and integrates nicely into your development platform. It supports a large number of languages, rules, and can be configured to fit your needs. Teams use it on a daily basis without needing to think of it. It is also very intuitive and robust, so you will hardly need technical support ; if you need to, the community website is the way to go for quick answers. **What do you dislike about SonarQube?** The 2024 changes in pricing and product organization led to some hard discussions on pricing internally. The pricing is fair, but the price hike was hard to swallow by the management. **What problems is SonarQube solving and how is that benefiting you?** Using SonarCloud, we are able to take actions on security, bugs, and overall quality issues before the code reaches the main branch. The quality gates concept allows to focus on new code, by improving it. Upon time, this focus on touched code on a daily basis vastly improves the overall code base quality. ### 20. SonarQube: Great for Code Quality, but Community Edition Upgrades Are Frustrating **Rating:** 4.5/5.0 stars **Reviewed by:** Diego M. | IT & Security Lead, Mid-Market (51-1000 emp.) **Reviewed Date:** October 14, 2025 **What do you like best about SonarQube?** I like how easy it is to spot issues before they hit production. SonarQube gives clear feedback and keeps our codebase clean and secure. **What do you dislike about SonarQube?** The community edition is pretty difficult to upgrade. All the available documentation is vague. **What problems is SonarQube solving and how is that benefiting you?** It brings visibility into code quality across teams and helps us maintain high standards. We’ve reduced rework and improved delivery speed. ### 21. The best code testing platform for your web development and apps **Rating:** 5.0/5.0 stars **Reviewed by:** Rene M. | Solution Architect, Outsourcing/Offshoring, Mid-Market (51-1000 emp.) **Reviewed Date:** October 08, 2025 **What do you like best about SonarQube?** I love that it is really easy to use, it can be integrated with GitHub, and it can review a wide array of code languages **What do you dislike about SonarQube?** It can be overwhelming when you get your first review **What problems is SonarQube solving and how is that benefiting you?** It allows me to find security holes and bugs in my code easily. ### 22. Outstanding Code Quality Sets It Apart **Rating:** 5.0/5.0 stars **Reviewed by:** Richy A. | Director of technology, Mid-Market (51-1000 emp.) **Reviewed Date:** October 22, 2025 **What do you like best about SonarQube?** Code quality and potential errors in code flows **What do you dislike about SonarQube?** The inability to link issues reported in sonar to tickets in Gitlab **What problems is SonarQube solving and how is that benefiting you?** Code quality and potential security holes ### 23. Clean and fast performance **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Hospitality | Mid-Market (51-1000 emp.) **Reviewed Date:** May 07, 2025 **What do you like best about SonarQube?** High quality , good response time are all involved in giving a high speed performance. **What do you dislike about SonarQube?** SonarCube works without glitches . Nothing to dislike. **What problems is SonarQube solving and how is that benefiting you?** It helps speed up our process and development. ### 24. Intuitive Dashboard for SAST and Seamless Integration with Azure DevOps pipeline by SonarQube **Rating:** 5.0/5.0 stars **Reviewed by:** Gourav S. | Technical Architect, Enterprise (> 1000 emp.) **Reviewed Date:** July 04, 2025 **What do you like best about SonarQube?** SonarQube is a very easy-to-use and effective tool for code coverage analysis and SAST. It integrates seamlessly with Azure DevOps pipelines. The intuitive Dashboard provides easy access to analysis reports with multiple filters. **What do you dislike about SonarQube?** Seemed that getting a quotation takes time. **What problems is SonarQube solving and how is that benefiting you?** Using SonarLint IDE plugin, developers get instant information about vulnerabilities. SonarQube helps us to restrict the developers to merge code into target releases where the Quality Gate is passed - making sure that no vulnerable code gets into the target branch. Also, SonarQube scan at CI build level ensures that the build happens using secure code only. ### 25. Helpful Code Suggestions, Though Sometimes Misses the Mark **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** October 23, 2025 **What do you like best about SonarQube?** SonarQube gives code suggestions that are secure and give ideas how it can be written in a better way **What do you dislike about SonarQube?** The suggestions are not always relevant for the code. **What problems is SonarQube solving and how is that benefiting you?** We use it in our SecDevOps way of working to comply with ISO27001 ### 26. Easy but powerful enough **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** December 13, 2024 **What do you like best about SonarQube?** SonarCloud is easy to use and integrates seamlessly into existing projects and nearly all CI/CD pipelines. We integrated almost all of our codebases and used it along with the Sonar cloud extension, which made it more powerful. **What do you dislike about SonarQube?** The downside with sonar is that it requires us to make at least one change in a file to get it scanned. Because of this, sometimes, issues slip into production. **What problems is SonarQube solving and how is that benefiting you?** Linting issues in the code Security vulnerabilities in the code It helped us in identifying the issues while development itself and if anything misses Sonar's CICD Integration will take care of this. ### 27. How our team uses SonarQube **Rating:** 5.0/5.0 stars **Reviewed by:** Stanley S. | Embedded Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** Our development process is helped alot by SonarQube as it will detect some bugs such as running out of memory, or simple error that we might not see at the first time. Our team is happy to use the product. **What do you dislike about SonarQube?** Getting it to start is a long process. We are having some trouble trying to understand how sonarqube judges our code. As our team is using it for the embedded environment, some suggestions (such as atomic implementations etc) are not really applicable to us. At first we were frustated as it always suggested that our code is wrong, but now we can find a way to silence it. **What problems is SonarQube solving and how is that benefiting you?** It can be integrated easily (after we understand) to our Gitlab server. We can have the analysis out of the box immediately when we are pushing the commits. ### 28. Easy to use, modular and helpful in improving software quality. **Rating:** 5.0/5.0 stars **Reviewed by:** Murtadha Bazli T. | Senior Embedded System Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** I use SonarQube mainly for analyzing C, C++ and Python programming languages, and that's why I need a SonarQube developer license. The $160 I spent for a year is really worth it. Think of SonarQube as your peer review, friend and supervisor for your software development. Analyzing C/C++ is really easy and not tied to an IDE. I simply host SonarQube in Docker, build my software with build-wrapper and analyze it with Sonar-scanner. The analysis results then appear in the SonarQube dashboard. I use SonarQube both at work and at home for my personal project. Due to the affordable price and ease of use, I have been loyal to SonarQube for 3 years now. Sonar also has responsive customer support, and I mainly contact them to get a new license due to an issue with my Docker image. The response consistently within 1-2 days, and I always communicate via email. No website to report or form to fill out, which for me is convenience. **What do you dislike about SonarQube?** I develop embedded software that adheres to MISRA C/C++, and SonarQube does have some MISRA rules, but not all of them are implemented. I really love to see SonarQube being able to adopt all these rules. A few times I have found alternatives to SonarQube for this reason, but since other tools are expensive, tied to an IDE and the learning curve is unknown (unlike SonarQube, we only need 3 steps to analyze the code), I keep coming back to SonarQube. **What problems is SonarQube solving and how is that benefiting you?** SonarQube became my main platform for consolidating unit test results, code coverage and static code analysis. SonarQube Dashboard becomes my benchmark for software development maturity. Other static code analyzers can also report errors, but unlike SonarQube, it shows very nice examples of compliant and non-compliant code. This has helped me a lot throughout my software development career. ### 29. Sonarqube is a great tool to help devs raise the quality of legacy code and new greenfield code **Rating:** 5.0/5.0 stars **Reviewed by:** Alan R. | R&D Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** Identification of coding issues across whole codebases, while providing a manageable way to gradually improve the code quality over time by enforcing that new code is of good quality. Developers can be gently guided to better practices without having to solve thousands of code smells all at once. We can refactor code as we work in different areas without introducing new risk of regressions. Easy to setup and manage and pretty hands off. It integrates well with Azure DevOps and our pull request and CI workflows. **What do you dislike about SonarQube?** Some churn recently in how Sonarqube manages quality gates and what the bar is. We have a number of limitations in our analysis, particularly in collecting code coverage information. **What problems is SonarQube solving and how is that benefiting you?** Sonarqube provides a level of security review to our code changes. Sonarqube helps developers maintain a high quality bar in the code they write, provides neutral guidance and learning without code reviewers having to nitpick every commit. Developers are guided to improve the code they touch, gradually helping improve the quality of older legacy codebases without making large changes and introducing regression risk. ### 30. Effective static analysis for bugs and vulnerabilities **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** Being able to filter issues and assign them to different team members allows each developer to focus on high-priority issues. SonarQube allows you to enable to disable specific rules, and to set the severity of each rule. This further help to prioritize the issues needing attention. When a developer determines that a particular issue should NOT result in a code change, they can mark that issue as "won't fix" and enter an explanation. This helps provide detailed reports. SonarQube also provides clear, high-level overviews of the status of your software projects (for managers), along with reports (for customers). This helps take much of the communication burden off of the development team. **What do you dislike about SonarQube?** Like any static analysis tool, there are occasional false-positives. And depending on your code, there may be issues flagged as "problems" which are really just stylistic differences or deviations from best practices. But it is fairly easy to mitigate these issues. False-positives need to be reviewed, but the detailed analysis provided by SonarQube (including traces through earlier statements showing how the issue was identified) help with the review. As for issues that are merely stylistic differences, these can be given a lower severity rating or even eliminated by customizing the underlying rules. **What problems is SonarQube solving and how is that benefiting you?** Identifies code quality issues. Helps us improve the reliability of our applications and reduce our technical support burden. Also helps us mature the code base, which makes subsequent development faster and easier. Identifies code security issues. Helps us head off vulnerability crises and the need to develop hotfixes. Reports the status of unresolved issues and unit test code coverage per project. Helps us track technical debt. Reports the status of each project or application (set of projects) for consumption by customers. Meets requirements imposed by some customers, allowing certain sales to go through that would otherwise be blocked. ### 31. Best performance/cost SAST tooling **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.) **Reviewed Date:** April 18, 2024 **What do you like best about SonarQube?** - We are using a self hosted SonarQube server - hosting and upgrading our instance is a relatively painless process. The online documentation is clear and easy to follow - The SonarQube scanner integrated easily into our existing Bitbucket and Cloud Build CI/CDs - When comparing the findings with other SAST tooling, out-of-the-box SonarQube analysis had a low false positive rate, yet found extensive legitimate security/code quality issues - Very happy with the speed of analysis, completes in only a few minutes on large repos (an order of magnitude faster than certain other SAST services) - Surprised that language support is actually slightly better than documented - we were able to sucessfully analyze projects with older versions of .NET framework (4.5 and 4.0) than indicated in the documenation - The triage and review process is easy for individual teams to execute on a regular basis - The WEB API is well documented and enabled automating steps around user maintenance - Bitbucket OAuth worked seamlesses to onboard users - Installing additional plugins is also easy - we use Dependency-Check to add SCA to projects - Bug fixes and features added to each new release are well documented, I appreciate being able to review all changes on the sonarsource atlassian page (and not just rely on the high-level marketing notes) **What do you dislike about SonarQube?** - While SonarQube is a SAST tool, better support for SCA would be beneficial. The Dependency-Check plugn does not integrate well into the existing triage/remediation process. - Other tooling does a better job of proving a high level overview of users and their productivity, ie. # of assigned open issues by engineer, # of fixed issues by engineer, etc. **What problems is SonarQube solving and how is that benefiting you?** SonarQube enables us to perform code and security analysis and comply with our internal security procedures, with clear visibilty into the process via it's clean dashboards. SonarQube's bug and code smell detection has also reduced our technical debt and improved overall codebae quality. ### 32. Essential for clean code **Rating:** 4.5/5.0 stars **Reviewed by:** Mukesh K. R. | Cyber Security Analyst and Senior Developer, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** May 03, 2024 **What do you like best about SonarQube?** Simple deployment. Very easy installing is practiced particularly on Kubernetes using YAML formats. Moreover, integration with GitHub by means of GitHub actions is fluent because it enables developers to conduct their scans, therefore, receiving their notifications once they complete them. On the other side when it comes to flexibility, SonarQube is unmatched. It offers so much when you want to configure it letting you even prevent vulnerability detection until pull request merges are halted for example while at the same time providing a good way of looking at detected exploitation points - such as their exact location that has been pointed out about them. **What do you dislike about SonarQube?** This tool is exclusively for Static Application Security Testing , other tools provides integrating Dynamic (DAST) and Static (SAST). **What problems is SonarQube solving and how is that benefiting you?** Improve compliance and risk management, reduce the cost of management while enhancing the business process results. ### 33. SonarQube has Improved our Tech Debt! **Rating:** 5.0/5.0 stars **Reviewed by:** Kelli K. | Senior Software Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** We have implemented it across our org, and it has been awesome. Code coverage everywhere has gone up, more bugs are being fixed, and there is more visibility into team's tech debt. **What do you dislike about SonarQube?** The one downside to the new versions is lack of support for older node versions. Our monolith is still using some old versions (which of course we need to work on upgrading!), keeping us from upgrading sonarqube. **What problems is SonarQube solving and how is that benefiting you?** It is helping us increase code coverage across our whole organization, which is making for better code all around. ### 34. Good but I would like to have training courses **Rating:** 4.5/5.0 stars **Reviewed by:** josue d. | Small-Business (50 or fewer emp.) **Reviewed Date:** April 25, 2024 **What do you like best about SonarQube?** I like how complete the tool is, I like that I can have many users with different permissions **What do you dislike about SonarQube?** I don't like the complexity of integrations I don't like that there is no error documentation I don't like that there are no training courses. I would like a certification **What problems is SonarQube solving and how is that benefiting you?** in ease of use, because it is easier to make demos that way ### 35. Must for high quality development **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** May 03, 2024 **What do you like best about SonarQube?** SonarQube helps to evaluate your code during the development itself. It provides a great amount of reviews/suggestions to improve your code. It also supports a variety of programming languages. The tool is easy to use. **What do you dislike about SonarQube?** Nothing as such, but some of the static analysis could be improved for certain languages like C++. **What problems is SonarQube solving and how is that benefiting you?** We were facing quite a few challenges in manual code reviews and standardizing the coding formats. Sonarqube came to our rescue during our development to have a good quality code with integrated chcks into Developer IDE as well as the build pipeline. ### 36. Game Changer for Shifting Left **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Manufacturing | Enterprise (> 1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** SonarQube has been an invaluable tool for our development team that helps us catch issue earlier on in the SDLC. We like the wide range of static code analysis rules, easy to use UI, and the large number of supported programming languages. **What do you dislike about SonarQube?** Occasionally, when analyzing large codebases or running complex rules, SonarQube can be resource-intensive and slow down the analysis process. Also, there are more languages we would like to see supported as the product matures. **What problems is SonarQube solving and how is that benefiting you?** The ability to shift left on code quality and application security by using SonarQube in our SDLC. ### 37. A Tool to Improve Code Quality! **Rating:** 5.0/5.0 stars **Reviewed by:** Ankshuk R. | Specialist Programmer, Enterprise (> 1000 emp.) **Reviewed Date:** July 20, 2022 **What do you like best about SonarQube?** SonarLint is the most customizable and Free Open Source tool that can be integrated with multiple IDEs and coding platforms like Spring tools suite, IntelliJ Idea etc. The fact that it is this customizable and user friendly, is what I like about it the most. **What do you dislike about SonarQube?** Although it is very customizable and user-friendly, SonalLint can be very vague at times, there are times when it throws errors in the code like some auto wiring errors for spring-boot projects that are ignorable. Also, it does not have a way to understand and improve code complexity. **What problems is SonarQube solving and how is that benefiting you?** SonarLint reduces the overall time to review code quality and helps in making the code readable. It has helped our codes to be more production friendly and less bulky. It also resolves potential errors areas of code and warns the developer while coding itself. ### 38. Wonderful tool to learn from your mistakes **Rating:** 4.5/5.0 stars **Reviewed by:** Soufiane M. | System Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** * Comprehensive Code Analysis * Very easy to use * Very easy to integrate with existing CI/CD tools **What do you dislike about SonarQube?** * Difficult to implement in a rigid environment **What problems is SonarQube solving and how is that benefiting you?** Issues related to code quality Recurrent mistakes that need to be taught to all new comers can be added as rules Code Legacy ### 39. Deeper insights into code quality **Rating:** 5.0/5.0 stars **Reviewed by:** Frederik E. | Intern konsulent, Small-Business (50 or fewer emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** Automated Pullrequest decoration for quick insights into new code. **What do you dislike about SonarQube?** Onboarding of new GitHub Actions was difficult - I believe however, that this flow has been vastly improved since then. **What problems is SonarQube solving and how is that benefiting you?** Automated validating of simple errors, that are caught in static analysis, to ease load off other developers. ### 40. Sast tooling experience **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Manufacturing | Enterprise (> 1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** SonarQubes ability to analyze the code at local build as well in CI/CD build add an important steps in improving the quality of the code. The recently added security analsyis of the code is very helpful for us for discovering any vulnerabily of the written code. **What do you dislike about SonarQube?** Reporting can be further improved with slice and dice featues **What problems is SonarQube solving and how is that benefiting you?** SonarQube is helping improve the code quality interms of security and as well as overall quality of the code ### 41. SonarQube Review **Rating:** 5.0/5.0 stars **Reviewed by:** murthy g. | DevOps Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** April 18, 2024 **What do you like best about SonarQube?** It's very easy to use and the customer support is fantastic. Very easy to integrate with other tools like TeamCity. **What do you dislike about SonarQube?** Nothing in special we dislike about the product. **What problems is SonarQube solving and how is that benefiting you?** We have been using sonar for Statis code analysis. ### 42. Must have static code analysis tool in every developer's tool box **Rating:** 5.0/5.0 stars **Reviewed by:** Suman P. | Principal Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 27, 2023 **What do you like best about SonarQube?** SonarLint is an extremely powerful static code analysis tool. It is available as a plugin for all popular integrated development environments. This enables running the tool as soon as the new code is written so that any violations can be rectified immediately preventing technical debt and to ensure it meets the organization's quality standards. **What do you dislike about SonarQube?** SonarLint is an extremely powerful tool. It allows customization as per the organizations quality and coding standards. One thing it needs to improve is that local run of sonarlint does not report all the violations that the server version reports. This area needs to be fixed as 100% of the violations can be caught in the developer workstation itself. **What problems is SonarQube solving and how is that benefiting you?** SonarLint is a static analysis tool that scans the code to ensure the code meets the organizations quality standards. My organization is very stringent about the code quality. SonarLint is helping me everyday to quickly scan the code in my workstation itself to identify any violations that needs to be rectified. Along with the violations it shoulds suggests the possible fixes. ### 43. QA with SonarQube **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Biotechnology | Enterprise (> 1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** The ease of use of SonarQube (in house we call it sqube) is vital to our teams in increasing the velocity of development **What do you dislike about SonarQube?** The admin interface could be simplified. Also it does't automatically provide pull requests with fixes. **What problems is SonarQube solving and how is that benefiting you?** In BioTech, safety is paramount. We use Sqube as a tool to show that we follow the latest trends to provide GxP methods found in the industry. ### 44. SonarQube as part of SDLC **Rating:** 5.0/5.0 stars **Reviewed by:** Dimitar K. | InfoSec, Mid-Market (51-1000 emp.) **Reviewed Date:** January 24, 2024 **What do you like best about SonarQube?** The tool is really good for Static Code Analysis - detecting bugs, vulnerabilities and code smells. CI/CD pipeline integrations are really usesfull and cruical as part of the SDLC. Another great feature is the custom rules - for the advanced users. Apart from theese things - combination with SonarLint is great! Last but not least eveyone can start with the free version and check if it will match their way of working - which is not available for many other tools! **What do you dislike about SonarQube?** It would be great if there is better dependencies report! **What problems is SonarQube solving and how is that benefiting you?** It's part of our Secure code review! ### 45. Exceptional **Rating:** 5.0/5.0 stars **Reviewed by:** Sheldon R. | Senior Software Engineer | Technical Lead, Small-Business (50 or fewer emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** Great way to measure quality and ensure all new dev meets expected quality standards. **What do you dislike about SonarQube?** Pricing is a little too expensive - we need local pricing tiers. **What problems is SonarQube solving and how is that benefiting you?** We know exactly what standard code is at when it merges into our main branch. Shift testing left into the IDE with SonarLint ### 46. Best tool to inspect code quality and detect bugs and very easy to use. **Rating:** 4.5/5.0 stars **Reviewed by:** Mohit S. | Mid-Market (51-1000 emp.) **Reviewed Date:** September 07, 2023 **What do you like best about SonarQube?** I like everything about SonarQube, It is best tool to make your code bug free and optimised. It analysis your code very fast and provide proper path of the issue in your code and also provide best suggestion to how to solve it. **What do you dislike about SonarQube?** SonarQube is not snychronze with the IDE, from where I am solving the issues. Whenever I solve an issue I have to re-run the sonarQube to check whether the issue is solved or not. It is little time consuming. **What problems is SonarQube solving and how is that benefiting you?** SonarQube is helping me to improve my code performance and make it bug free, It also suggest best coding practices which helps to increase my knowledge and learn standard coding. ### 47. SonarQube delivers on Code Quality and Code Security **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Human Resources | Enterprise (> 1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** SonarQube support an extensive number of code languages and provides flexibility to introduce quality rules and quality gates, lastly shifting left for Code Quality with SonarLint. The solution is easy to implement and use. Customer support provides timely responses. We have incorporate SonarQube within our CI/CD SDLC workflow. **What do you dislike about SonarQube?** No support for Elixir, SonarQube Enterprise not offered as a native SaaS Cloud option. **What problems is SonarQube solving and how is that benefiting you?** Improving Code Quality, Code Security and shifting left with SonarLint ### 48. Enhance our progress **Rating:** 5.0/5.0 stars **Reviewed by:** Marco B. | Enterprise (> 1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** - Easy to install and use in our pipelines. - Integrates with GitHub and Jira. - Great support and community for help. **What do you dislike about SonarQube?** Some documentation can be a bit confusing. **What problems is SonarQube solving and how is that benefiting you?** We'll keep releasing quality code. ### 49. Best Tool for Code Quality **Rating:** 5.0/5.0 stars **Reviewed by:** Recep C. | Mid-Market (51-1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** Especially Issues about security, and code smells are great to be better developer **What do you dislike about SonarQube?** To develop new ext or rules for sonarqube **What problems is SonarQube solving and how is that benefiting you?** For huge applications, you can manage code quality easily, best sync for teams ### 50. SonarQube for Static code analysis **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.) **Reviewed Date:** April 24, 2024 **What do you like best about SonarQube?** Its pretty effortless to integrate this with DevSecoOps pipeline **What do you dislike about SonarQube?** It would be good if they provide support for more legacy code languages. **What problems is SonarQube solving and how is that benefiting you?** Code quality improvement, early vulnerability findings and resolution. ## SonarQube Discussions - [What is the benefit of SonarQube?](https://www.g2.com/discussions/what-is-the-benefit-of-sonarqube) - [What are the main components of SonarQube platform?](https://www.g2.com/discussions/what-are-the-main-components-of-sonarqube-platform) - [What is SonarQube and its features?](https://www.g2.com/discussions/what-is-sonarqube-and-its-features) - [What is the best way to integrate a plugin for the code coverage?](https://www.g2.com/discussions/what-is-the-best-way-to-integrate-a-plugin-for-the-code-coverage) - 1 upvote - [test coverage](https://www.g2.com/discussions/31154-test-coverage) - 1 upvote - [View SonarQube pricing details and edition comparison](https://www.g2.com/products/sonarqube/reviews?filters%5Bnps_score%5D%5B%5D=5§ion=pricing&secure%5Bexpires_at%5D=2026-08-13+20%3A40%3A55+-0500&secure%5Bsession_id%5D=28fd9623-c4ff-4619-8244-e17a460046a4&secure%5Btoken%5D=38caefcf274f3db6990a782661feefe4224451342a7c9243028e04d6dcd2c8d4&format=llm_user) ## SonarQube Integrations - [Android Studio](https://www.g2.com/products/android-studio/reviews) - [Apache Maven](https://www.g2.com/products/apache-maven/reviews) - [Atlassian](https://www.g2.com/products/atlassian-2025-01-31/reviews) - [AWS CodeBuild](https://www.g2.com/products/aws-codebuild/reviews) - [AWS CodePipeline](https://www.g2.com/products/aws-codepipeline/reviews) - [AWS CodePipeline for CI/CD Automation](https://www.g2.com/products/aws-codepipeline-for-ci-cd-automation/reviews) - [Azure DevOps Server](https://www.g2.com/products/azure-devops-server/reviews) - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews) - [Backstage](https://www.g2.com/products/backstage/reviews) - [Bitbucket](https://www.g2.com/products/bitbucket/reviews) - [CircleCI](https://www.g2.com/products/circleci/reviews) - [Claude](https://www.g2.com/products/claude-2025-12-11/reviews) - [CloudBees](https://www.g2.com/products/cloudbees/reviews) - [Codemagic](https://www.g2.com/products/codemagic/reviews) - [Copado DevOps](https://www.g2.com/products/copado-devops/reviews) - [Cortex](https://www.g2.com/products/cortex-automation-inc-cortex/reviews) - [Cursor](https://www.g2.com/products/cursor/reviews) - [Datadog](https://www.g2.com/products/datadog/reviews) - [Devin AI](https://www.g2.com/products/devin-ai/reviews) - [Docker](https://www.g2.com/products/docker-inc-docker/reviews) - [Drata](https://www.g2.com/products/drata/reviews) - [DX](https://www.g2.com/products/dx-platform/reviews) - [Dynatrace](https://www.g2.com/products/dynatrace/reviews) - [Eclipse](https://www.g2.com/products/tph-global-eclipse/reviews) - [Gemini](https://www.g2.com/products/gemini-2021-11-09/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - [Google Cloud Console](https://www.g2.com/products/google-cloud-console/reviews) - [Google Cloud Tekton](https://www.g2.com/products/google-cloud-tekton/reviews) - [Gradle Build Tool](https://www.g2.com/products/gradle-build-tool/reviews) - [Harness](https://www.g2.com/products/harness-wealth-harness/reviews) - [IntelliJ IDEA](https://www.g2.com/products/intellij-idea/reviews) - [Jellyfish](https://www.g2.com/products/jellyfish-2018-10-15/reviews) - [Jenkins](https://www.g2.com/products/jenkins/reviews) - [JFrog](https://www.g2.com/products/jfrog-2024-03-28/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [LinearB](https://www.g2.com/products/linearb/reviews) - [Microsoft Visual Studio App Center](https://www.g2.com/products/microsoft-microsoft-visual-studio-app-center/reviews) - [MuleSoft Anypoint Platform](https://www.g2.com/products/mulesoft-anypoint-platform/reviews) - [npm](https://www.g2.com/products/npm/reviews) - [Oobeya](https://www.g2.com/products/oobeya/reviews) - [Port](https://www.g2.com/products/port-port/reviews) - [PyCharm](https://www.g2.com/products/pycharm/reviews) - [Python](https://www.g2.com/products/python/reviews) - [ServiceNow DevOps](https://www.g2.com/products/servicenow-devops/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Travis CI](https://www.g2.com/products/travis-ci/reviews) - [Visual Studio](https://www.g2.com/products/visual-studio/reviews) - [Visual Studio Code](https://www.g2.com/products/visual-studio-code/reviews) - [Zed](https://www.g2.com/products/zed-zed/reviews) ## SonarQube Features **Additional Functionality** - Tagging - Natural Language Processing - Data Extraction - Multi-Language - Predictive Analytics - Drag & Drop - Speech Recognition - Reporting/Analytics - Data Storage Management - Virtual Personal Assistant (VPA) - AI Copilot - Customer Segmentation - Collaboration Tools - Data Import/Export - Generative AI - For eCommerce - Role-Based Permissions - Customizable Branding - Search/Filter - Monitoring - Document Management - API - Data Visualization - Trend Analysis - Machine Learning - Access Controls/Permissions - Alerts/Escalation - Performance Metrics - Real-Time Data - Third-Party Integrations - Mobile App - Multiple Data Sources - For Sales Teams/Organizations - Sentiment Analysis - Activity Dashboard - Chatbot - Workflow Automation **Additional Functionality** - Code Generation - Text to Image - Generative AI - API - Natural Language Processing - Virtual Characters and Avatars - Content Generation - Personalization and Recommendation - Conditional Generation - Transformer Model - Automated Image & Video Editing - Interactive and Co-Creative Systems - Text Summarization - Data Augmentation - Variation Autoencoder Models - Adversarial Training - Transfer Learning and Fine-tuning - Simulation and Scenario Generation - Creative Design - AI Copilot - Prompt Engineering - Foundation Model **AI/Machine Learning** - AI/Machine Learning **Decision Support** - Decision Support **Collaboration Tools** - Collaboration Tools **Access Controls/Permissions** - Access Controls/Permissions **Task Management** - Task Management **Real-Time Monitoring** - Real-Time Monitoring **Natural Language Processing** - Natural Language Processing **AI Policy Mapping** - AI Policy Mapping **AI Risk Management** - AI Risk Management **Ethical AI Monitoring** - Ethical AI Monitoring **Audit Trail** - Audit Trail **Integration into Third Party Applications** - Integration into Third Party Applications **Product Lifecycle Management** - Product Lifecycle Management **Proactive Recommendations** - Proactive Recommendations **Administration** - API / Integrations - Extensibility **Functionality** - Repository Integration - Analytics and Trends - Productivity Updates **Bug Reporting** - User Reports & Feedback - Tester Reports & Feedback - Team Reports & Comments **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Documentation** - Feedback - Prioritization - Remediation Suggestions **Risk management - Application Security Posture Management (ASPM)** - Vulnerability Management - Compliance Management - Policy Enforcement **Functionality - Software Bill of Materials (SBOM)** - Format Support - Annotations - Attestation **AI Compliance** - Regulatory Reporting - Automated Compliance **Agentic AI - Static Code Analysis** - Adaptive Learning - Natural Language Interaction - Proactive Assistance **Performance - AI AppSec Assistants** - Remediation - Real-time Vulnerability Detection - Accuracy **Analysis** - Real-Time Analytics - Issue Tracking - Static Code Analysis - Code Analysis - Integrated Development Environment **Management** - Data Context - Testing Integration **Bug Monitoring** - Analytics - Bug History - Data Retention **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Security** - False Positives - Custom Compliance - Agility **Integration and efficiency - Application Security Posture Management (ASPM)** - Integration with Development Tools **Management - Software Bill of Materials (SBOM)** - Monitoring - Dashboards - User Provisioning **Risk Management & Monitoring** - Real-time Monitoring **Integration - AI AppSec Assistants** - Stack Integration - Workflow Integration - Codebase Contextual Awareness **Security** - Data Security - Data loss Prevention - Security Auditing - Real-Time Data - Cloud Application Security - SSL Security **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Source-Code Scanning - Detection Rate - False Positives - Multi-Language Scanning **Reporting and Analytics - Application Security Posture Management (ASPM)** - Trend Analysis - Risk Scoring - Customizable Dashboards **Agentic AI - Bug Tracking** - Adaptive Learning - Natural Language Interaction - Proactive Assistance - Assignment Management - Prioritization **Additional Functionality** - API - Audit Trail - Drag & Drop - Projections - Charting - Ticket Management - Monitoring - Status Tracking - Progress Tracking - Workflow Management - Project Time Tracking - Issue Tracking - Configurable Workflow - Collaboration Tools - Agile Methodologies - Customizable Fields - Backlog Management - Real-Time Updates - Single Sign On - Generative AI - Task Scheduling - Activity Tracking - Activity Dashboard - Task Management - Project Management - Project Planning - Feedback Management - Code Repository Integration - Reporting & Statistics - Email Management - Knowledge Base Management - Multiple Projects - Tagging - AI Copilot - File Management - Issue Management - Task Planning - Data Visualization - Bug/Issue Capture - Bug Tracking - Alerts/Notifications - Commenting/Notes - @mentions - Third-Party Integrations - Customizable Templates - Task Progress Tracking - Real-Time Notifications - Access Controls/Permissions **Identity** - SSO - Governance - User Analytics - Real-Time Analytics - Visual Analytics - Reporting/Analytics **Access Control and Security** - Pole-based Access Control (RBAC) **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution **Agentic AI - Application Security Posture Management (ASPM)** - Autonomous Task Execution - Multi-step Planning **Additional Functionality** - Alerts/Notifications - AI Copilot - Access Controls/Permissions - Endpoint Management - Intrusion Detection System - Compliance Management - HIPAA Compliant - Search/Filter - API - Two-Factor Authentication - Data Visualization - Risk Assessment - Real-Time Monitoring - Event Logs - Activity Dashboard - Audit Management - Cloud Security Policy Management - Vulnerability Protection - Anti Virus - Incident Management - Threat Intelligence - Real-Time Reporting - Reporting & Statistics - User Management - Encryption - Vulnerability Scanning - Generative AI - Status Tracking - Third-Party Integrations - Real-Time Notifications - Patch Management - Monitoring - Cloud Encryption **Additional Functionality** - Debugging - Generative AI - AI Copilot - For Developers - Deployment Management - Application Security - Dashboard **Agentic AI - AI Governance Tools** - Autonomous Task Execution - Multi-step Planning - Cross-system Integration - Adaptive Learning - Natural Language Interaction - Decision Making ## Top SonarQube Alternatives - [GitHub](https://www.g2.com/products/github/reviews) - 4.7/5.0 (2,335 reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (885 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) - 3.8/5.0 (25 reviews)