---
title: SonarQube Reviews
meta_title: 'SonarQube Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 155 reviews by the users' company size, role or industry
  to find out how SonarQube works for a business like yours.
aggregate_rating:
  rating_value: 4.4
  review_count: 155
  scale: '5'
date_modified: '2026-08-05'
parent_category:
  name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t"
  url: https://www.g2.com/categories/devsecops
---

# SonarQube Reviews
**Vendor:** SonarSource Sàrl  
**Category:** [Static Code Analysis Tools](https://www.g2.com/categories/static-code-analysis)  
**Average Rating:** 4.4/5.0  
**Total Reviews:** 155
## About SonarQube
Sonar, the industry standard for code verification and automated code review, helps reduce outages, improve security, and lower risks associated with AI and agentic coding. As an independent verification platform, Sonar enables organizations to securely develop at the speed of AI. Sonar is the foundation for high-performance software engineering, analyzing over 750 billion lines of code daily to ensure applications are secure, reliable, and maintainable. Rooted in the open source community, Sonar is trusted by 7M+ developers globally, including teams at ServiceNow, Booking.com, Deutsche Bank, AstraZeneca, and Ford Motor Company.



## SonarQube Pros & Cons
**What users like:**

- Users value how SonarQube **efficiently flags code quality and security issues** , ensuring a clean and maintainable codebase. (24 reviews)
- Users value the **issue filtering and prioritization features** of SonarQube, enhancing focus on high-priority tasks. (20 reviews)
- Users value the **issue identification and prioritization** features of SonarQube, improving focus on critical tasks. (19 reviews)
- Users find SonarQube's **ease of use** invaluable for maintaining code quality and integrating seamlessly into development workflows. (18 reviews)
- Users appreciate the **easy integrations** with existing CI/CD tools, enhancing their development workflow seamlessly. (18 reviews)
- Users value the **seamless integration** of SonarQube with CI/CD pipelines, enhancing code quality management effortlessly. (18 reviews)
- Security (15 reviews)
- Vulnerability Detection (15 reviews)
- Code Review (12 reviews)
- Integration Support (12 reviews)

**What users dislike:**

- Users face challenges with **software bugs** as SonarQube can consume excessive RAM and occasionally reports false positives. (12 reviews)
- Users find SonarQube's configuration **complex** , especially for beginners, leading to difficulties and overwhelming warnings to manage. (10 reviews)
- Users encounter **false positives** that complicate evaluations, though mitigation options exist through detailed analysis and rule customization. (10 reviews)
- Users find that SonarQube's **complexity in configuration** and excessive warnings can hinder effective usage and efficiency. (8 reviews)
- Users find the **complex setup** of SonarQube challenging, especially for beginners unfamiliar with the configuration process. (8 reviews)
- Users often face **integration issues** with SonarQube, particularly in connecting to GitLab and navigating its complexities. (8 reviews)
- Users find SonarQube's **limited features** frustrating, particularly with restrictions on scanning and analysis capabilities. (8 reviews)
- Users note that the **expensive nature** of SonarQube limits access to advanced features and complicates setup. (7 reviews)
- Difficult Setup (6 reviews)
- Setup Difficulty (6 reviews)


## SonarQube Discussions
  - [What is the benefit of SonarQube?](https://www.g2.com/discussions/what-is-the-benefit-of-sonarqube)
  - [What are the main components of SonarQube platform?](https://www.g2.com/discussions/what-are-the-main-components-of-sonarqube-platform)
  - [What is SonarQube and its features?](https://www.g2.com/discussions/what-is-sonarqube-and-its-features)
  - [What is the best way to integrate a plugin for the code coverage?](https://www.g2.com/discussions/what-is-the-best-way-to-integrate-a-plugin-for-the-code-coverage) - 1 upvote
  - [test coverage](https://www.g2.com/discussions/31154-test-coverage) - 1 upvote

- [View SonarQube pricing details and edition comparison](https://www.g2.com/products/sonarqube/reviews?page=10&section=pricing&secure%5Bexpires_at%5D=2026-08-05+11%3A30%3A29+-0500&secure%5Bsession_id%5D=2c7c11ff-17e2-448b-a0c4-cafc77202066&secure%5Btoken%5D=3a6a24aa47542965b05260ed14127ddad7ee1d7c041b315af560a7233553bb7e&format=llm_user)
## SonarQube Integrations
  - [Android Studio](https://www.g2.com/products/android-studio/reviews)
  - [Apache Maven](https://www.g2.com/products/apache-maven/reviews)
  - [Atlassian](https://www.g2.com/products/atlassian-2025-01-31/reviews)
  - [AWS CodeBuild](https://www.g2.com/products/aws-codebuild/reviews)
  - [AWS CodePipeline](https://www.g2.com/products/aws-codepipeline/reviews)
  - [AWS CodePipeline for CI/CD Automation](https://www.g2.com/products/aws-codepipeline-for-ci-cd-automation/reviews)
  - [Azure DevOps Server](https://www.g2.com/products/azure-devops-server/reviews)
  - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews)
  - [Backstage](https://www.g2.com/products/backstage/reviews)
  - [Bitbucket](https://www.g2.com/products/bitbucket/reviews)
  - [CircleCI](https://www.g2.com/products/circleci/reviews)
  - [Claude](https://www.g2.com/products/claude-2025-12-11/reviews)
  - [CloudBees](https://www.g2.com/products/cloudbees/reviews)
  - [Codemagic](https://www.g2.com/products/codemagic/reviews)
  - [Copado DevOps](https://www.g2.com/products/copado-devops/reviews)
  - [Cortex](https://www.g2.com/products/cortex-automation-inc-cortex/reviews)
  - [Cursor](https://www.g2.com/products/cursor/reviews)
  - [Datadog](https://www.g2.com/products/datadog/reviews)
  - [Devin AI](https://www.g2.com/products/devin-ai/reviews)
  - [Docker](https://www.g2.com/products/docker-inc-docker/reviews)
  - [Drata](https://www.g2.com/products/drata/reviews)
  - [DX](https://www.g2.com/products/dx-platform/reviews)
  - [Dynatrace](https://www.g2.com/products/dynatrace/reviews)
  - [Eclipse](https://www.g2.com/products/tph-global-eclipse/reviews)
  - [Gemini](https://www.g2.com/products/gemini-2021-11-09/reviews)
  - [GitHub](https://www.g2.com/products/github/reviews)
  - [GitLab](https://www.g2.com/products/gitlab/reviews)
  - [Google Cloud Console](https://www.g2.com/products/google-cloud-console/reviews)
  - [Google Cloud Tekton](https://www.g2.com/products/google-cloud-tekton/reviews)
  - [Gradle Build Tool](https://www.g2.com/products/gradle-build-tool/reviews)
  - [Harness](https://www.g2.com/products/harness-wealth-harness/reviews)
  - [IntelliJ IDEA](https://www.g2.com/products/intellij-idea/reviews)
  - [Jellyfish](https://www.g2.com/products/jellyfish-2018-10-15/reviews)
  - [Jenkins](https://www.g2.com/products/jenkins/reviews)
  - [JFrog](https://www.g2.com/products/jfrog-2024-03-28/reviews)
  - [Jira](https://www.g2.com/products/jira/reviews)
  - [LinearB](https://www.g2.com/products/linearb/reviews)
  - [Microsoft Visual Studio App Center](https://www.g2.com/products/microsoft-microsoft-visual-studio-app-center/reviews)
  - [MuleSoft Anypoint Platform](https://www.g2.com/products/mulesoft-anypoint-platform/reviews)
  - [npm](https://www.g2.com/products/npm/reviews)
  - [Oobeya](https://www.g2.com/products/oobeya/reviews)
  - [Port](https://www.g2.com/products/port-port/reviews)
  - [PyCharm](https://www.g2.com/products/pycharm/reviews)
  - [Python](https://www.g2.com/products/python/reviews)
  - [ServiceNow DevOps](https://www.g2.com/products/servicenow-devops/reviews)
  - [Slack](https://www.g2.com/products/slack/reviews)
  - [Travis CI](https://www.g2.com/products/travis-ci/reviews)
  - [Visual Studio](https://www.g2.com/products/visual-studio/reviews)
  - [Visual Studio Code](https://www.g2.com/products/visual-studio-code/reviews)
  - [Zed](https://www.g2.com/products/zed-zed/reviews)

## SonarQube Features
****
- Tagging
- Natural Language Processing
- Data Extraction
- Multi-Language
- Predictive Analytics
- Drag & Drop
- Speech Recognition
- Reporting/Analytics
- Data Storage Management
- Virtual Personal Assistant (VPA)
- AI Copilot
- Customer Segmentation
- Collaboration Tools
- Data Import/Export
- Generative AI
- For eCommerce
- Role-Based Permissions
- Customizable Branding
- Search/Filter
- Monitoring
- Document Management
- API
- Data Visualization
- Trend Analysis
- Machine Learning
- Access Controls/Permissions
- Alerts/Escalation
- Performance Metrics
- Real-Time Data
- Third-Party Integrations
- Mobile App
- Multiple Data Sources
- For Sales Teams/Organizations
- Sentiment Analysis
- Activity Dashboard
- Chatbot

****
- Code Generation
- Text to Image
- Generative AI
- API
- Natural Language Processing
- Virtual Characters and Avatars
- Content Generation
- Personalization and Recommendation
- Conditional Generation
- Transformer Model
- Automated Image & Video Editing
- Interactive and Co-Creative Systems
- Text Summarization
- Data Augmentation
- Variation Autoencoder Models
- Adversarial Training
- Transfer Learning and Fine-tuning
- Simulation and Scenario Generation
- Creative Design
- AI Copilot
- Prompt Engineering
- Foundation Model

**Administration**
- API / Integrations
- Extensibility

**Functionality**
- Repository Integration
- Analytics and Trends
- Productivity Updates

**Bug Reporting**
- User Reports & Feedback
- Tester Reports & Feedback
- Team Reports & Comments

**Functionality - Software Composition Analysis **
- Language Support
- Integration
- Transparency

**Documentation**
- Feedback
- Prioritization
- Remediation Suggestions

**Risk management - Application Security Posture Management (ASPM)**
- Vulnerability Management
- Compliance Management
- Policy Enforcement

**Functionality - Software Bill of Materials (SBOM)**
- Format Support
- Annotations
- Attestation

**AI Compliance**
- Regulatory Reporting
- Automated Compliance

**Agentic AI - Static Code Analysis**
- Adaptive Learning
- Natural Language Interaction
- Proactive Assistance

**Performance - AI AppSec Assistants**
- Remediation
- Real-time Vulnerability Detection
- Accuracy

**Analysis**
- Reporting and Analytics
- Issue Tracking
- Static Code Analysis
- Code Analysis
- Integrated Development Environment

**Management**
- Data Context
- Testing Integration

**Bug Monitoring**
- Analytics
- Bug History
- Data Retention

**Effectiveness - Software Composition Analysis**
- Remediation Suggestions
- Continuous Monitoring
- Thorough Detection

**Security**
- False Positives
- Custom Compliance
- Agility

**Integration and efficiency - Application Security Posture Management (ASPM)**
- Integration with Development Tools

**Management - Software Bill of Materials (SBOM)**
- Monitoring
- Dashboards
- User Provisioning

**Risk Management & Monitoring**
- Real-time Monitoring

**Integration - AI AppSec Assistants**
- Stack Integration
- Workflow Integration
- Codebase Contextual Awareness

**Security**
- Data Security
- Data loss Prevention
- Security Auditing
- Real-Time Data
- Cloud Application Security
- SSL Security

**Testing**
- Command-Line Tools
- Manual Testing
- Test Automation
- Compliance Testing
- Black-Box Scanning
- Detection Rate
- False Positives
- Multi-Language Scanning

**Reporting and Analytics - Application Security Posture Management (ASPM)**
- Trend Analysis
- Risk Scoring
- Customizable Dashboards

**Agentic AI - Bug Tracking**
- Adaptive Learning
- Natural Language Interaction
- Proactive Assistance
- Assignment Management
- Prioritization

****
- API
- Audit Trail
- Drag & Drop
- Projections
- Charting
- Ticket Management
- Monitoring
- Status Tracking
- Progress Tracking
- Workflow Management
- Project Time Tracking
- Issue Tracking
- Configurable Workflow
- Collaboration Tools
- Agile Methodologies
- Customizable Fields
- Backlog Management
- Real-Time Updates
- Single Sign On
- Generative AI
- Task Scheduling
- Activity Tracking
- Activity Dashboard
- Task Management
- Project Management
- Project Planning
- Feedback Management
- Code Repository Integration
- Reporting & Statistics
- Email Management
- Knowledge Base Management
- Multiple Projects
- Tagging
- AI Copilot
- File Management
- Issue Management
- Task Planning
- Data Visualization
- Bug/Issue Capture
- Bug Tracking
- Alerts/Notifications
- Commenting/Notes
- @mentions
- Third-Party Integrations
- Customizable Templates
- Task Progress Tracking
- Real-Time Notifications
- Access Controls/Permissions

**Identity**
- SSO
- Governance
- User Analytics
- Real-Time Analytics
- Visual Analytics
- Reporting/Analytics

**Access Control and Security**
- Pole-based Access Control (RBAC)

**Agentic AI - Static Application Security Testing (SAST)**
- Autonomous Task Execution

**Agentic AI  - Application Security Posture Management (ASPM)**
- Autonomous Task Execution
- Multi-step Planning

****
- Alerts/Notifications
- AI Copilot
- Access Controls/Permissions
- Endpoint Management
- Intrusion Detection System
- Compliance Management
- HIPAA Compliant
- Search/Filter
- API
- Two-Factor Authentication
- Data Visualization
- Risk Assessment
- Real-Time Monitoring
- Event Logs
- Activity Dashboard
- Audit Management
- Cloud Security Policy Management
- Vulnerability Protection
- Anti Virus
- Incident Management
- Threat Intelligence
- Real-Time Reporting
- Reporting & Statistics
- User Management
- Encryption
- Vulnerability Scanning
- Generative AI
- Status Tracking
- Third-Party Integrations
- Real-Time Notifications
- Patch Management
- Monitoring
- Cloud Encryption

****
- Debugging
- Generative AI
- AI Copilot
- For Developers
- Deployment Management
- Application Security
- Dashboard

**Agentic AI - AI Governance Tools**
- Autonomous Task Execution
- Multi-step Planning
- Cross-system Integration
- Adaptive Learning
- Natural Language Interaction
- Decision Making

## Top SonarQube Alternatives
  - [GitHub](https://www.g2.com/products/github/reviews) - 4.7/5.0 (2,330 reviews)
  - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (884 reviews)
  - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) - 3.8/5.0 (25 reviews)