--- title: SonarQube Reviews meta\_title: 'SonarQube Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 155 reviews by the users' company size, role or industry to find out how SonarQube works for a business like yours. aggregate\_rating: rating\_value: 4.4 review\_count: 155 scale: '5' date\_modified: '2026-08-07' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- ### SonarQube Pros and Cons: Top 5 Advantages and Disadvantages #### Quick AI Summary Based on G2 Reviews Generated from real user reviews Users value how SonarQube **efficiently flags code quality and security issues** , ensuring a clean and maintainable codebase. [(24 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505994&qs=pros-and-cons#reviews) Users value the **issue filtering and prioritization features** of SonarQube, enhancing focus on high-priority tasks. [(20 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504258&qs=pros-and-cons#reviews) Users value the **issue identification and prioritization** features of SonarQube, improving focus on critical tasks. [(19 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504704&qs=pros-and-cons#reviews) Users find SonarQube's **ease of use** invaluable for maintaining code quality and integrating seamlessly into development workflows. [(18 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504166&qs=pros-and-cons#reviews) Users appreciate the **easy integrations** with existing CI/CD tools, enhancing their development workflow seamlessly. [(18 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504924&qs=pros-and-cons#reviews) Users face challenges with **software bugs** as SonarQube can consume excessive RAM and occasionally reports false positives. [(12 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505060&qs=pros-and-cons#reviews) Users find SonarQube's configuration **complex** , especially for beginners, leading to difficulties and overwhelming warnings to manage. [(10 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505551&qs=pros-and-cons#reviews) Users encounter **false positives** that complicate evaluations, though mitigation options exist through detailed analysis and rule customization. [(10 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505594&qs=pros-and-cons#reviews) Users find that SonarQube's **complexity in configuration** and excessive warnings can hinder effective usage and efficiency. [(8 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=2100748&qs=pros-and-cons#reviews) Users find the **complex setup** of SonarQube challenging, especially for beginners unfamiliar with the configuration process. [(8 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505008&qs=pros-and-cons#reviews) ### 5 Pros or Advantages of SonarQube ##### 1. Code Quality Users value how SonarQube **efficiently flags code quality and security issues** , ensuring a clean and maintainable codebase. [ See 24 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505994&qs=pros-and-cons#reviews) See Related User Reviews ![Do Nhat K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Do Nhat K.") DK Do Nhat K. Mid-Market (51-1000 emp.) 5.0/5 "Effortless Code Quality Enhancement and Security" What do you like about SonarQube? I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Small-Business (50 or fewer emp.) 4.5/5 "Streamlining Software Composition Analysis (SCA) Within the Dev Workflow" What do you like about SonarQube? It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug ##### 2. Features Users value the **issue filtering and prioritization features** of SonarQube, enhancing focus on high-priority tasks. [ See 20 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504258&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Enterprise (\> 1000 emp.) 3.5/5 "SonaQube gets the job done with its approach to organizing new and former findings." What do you like about SonarQube? I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Small-Business (50 or fewer emp.) 4.5/5 "Streamlining Software Composition Analysis (SCA) Within the Dev Workflow" What do you like about SonarQube? It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug ##### 3. Issue Identification Users value the **issue identification and prioritization** features of SonarQube, improving focus on critical tasks. [ See 19 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504704&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Enterprise (\> 1000 emp.) 3.5/5 "SonaQube gets the job done with its approach to organizing new and former findings." What do you like about SonarQube? I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Small-Business (50 or fewer emp.) 4.5/5 "Streamlining Software Composition Analysis (SCA) Within the Dev Workflow" What do you like about SonarQube? It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug ##### 4. Ease of Use Users find SonarQube's **ease of use** invaluable for maintaining code quality and integrating seamlessly into development workflows. [ See 18 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504166&qs=pros-and-cons#reviews) See Related User Reviews ![Do Nhat K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Do Nhat K.") DK Do Nhat K. Mid-Market (51-1000 emp.) 5.0/5 "Effortless Code Quality Enhancement and Security" What do you like about SonarQube? I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Small-Business (50 or fewer emp.) 4.5/5 "Streamlining Software Composition Analysis (SCA) Within the Dev Workflow" What do you like about SonarQube? It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug ##### 5. Easy Integrations Users appreciate the **easy integrations** with existing CI/CD tools, enhancing their development workflow seamlessly. [ See 18 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504924&qs=pros-and-cons#reviews) See Related User Reviews ![Do Nhat K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Do Nhat K.") DK Do Nhat K. Mid-Market (51-1000 emp.) 5.0/5 "Effortless Code Quality Enhancement and Security" What do you like about SonarQube? I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Small-Business (50 or fewer emp.) 4.5/5 "Streamlining Software Composition Analysis (SCA) Within the Dev Workflow" What do you like about SonarQube? It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug ### 5 Cons or Disadvantages of SonarQube ##### 1. Software Bugs Users face challenges with **software bugs** as SonarQube can consume excessive RAM and occasionally reports false positives. [ See 12 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505060&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Mid-Market (51-1000 emp.) 4.0/5 "Centralized Code Quality Insights with Helpful Quality Gates" What do you dislike about SonarQube? One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee NR Nassima R. Small-Business (50 or fewer emp.) 4.0/5 "Error Detection and Quality Gates That Strengthen Stability" What do you dislike about SonarQube? It consumes too much RAM, and it sometimes flags false positives on code patterns that are actually correct, which makes it quite tedious to use. ##### 2. Complex Configuration Users find SonarQube's configuration **complex** , especially for beginners, leading to difficulties and overwhelming warnings to manage. [ See 10 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505551&qs=pros-and-cons#reviews) See Related User Reviews PJ Pankaj J. Small-Business (50 or fewer emp.) 4.5/5 "SonarQube Quickly Flags Code Quality and Security Issues" What do you dislike about SonarQube? I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Mid-Market (51-1000 emp.) 4.0/5 "Centralized Code Quality Insights with Helpful Quality Gates" What do you dislike about SonarQube? One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee ##### 3. False Positives Users encounter **false positives** that complicate evaluations, though mitigation options exist through detailed analysis and rule customization. [ See 10 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505594&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Enterprise (\> 1000 emp.) 3.5/5 "SonaQube gets the job done with its approach to organizing new and former findings." What do you dislike about SonarQube? I wish there were more ways to group users and teams, and then automatically send them reports that include vulnerability details. I wish you can twe PJ Pankaj J. Small-Business (50 or fewer emp.) 4.5/5 "SonarQube Quickly Flags Code Quality and Security Issues" What do you dislike about SonarQube? I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s ##### 4. Complexity Users find that SonarQube's **complexity in configuration** and excessive warnings can hinder effective usage and efficiency. [ See 8 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=2100748&qs=pros-and-cons#reviews) See Related User Reviews PJ Pankaj J. Small-Business (50 or fewer emp.) 4.5/5 "SonarQube Quickly Flags Code Quality and Security Issues" What do you dislike about SonarQube? I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Mid-Market (51-1000 emp.) 4.0/5 "Centralized Code Quality Insights with Helpful Quality Gates" What do you dislike about SonarQube? One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee ##### 5. Complex Setup Users find the **complex setup** of SonarQube challenging, especially for beginners unfamiliar with the configuration process. [ See 8 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505008&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Mid-Market (51-1000 emp.) 4.0/5 "Centralized Code Quality Insights with Helpful Quality Gates" What do you dislike about SonarQube? One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee SS Shrey S. Enterprise (\> 1000 emp.) 5.0/5 "Reliable static code analysis that improves code quality & enforces standards for our clients" What do you dislike about SonarQube? One challenge with SonarQube, especially in the Community Edition that I am using is that the initial setup and rule tuning takes time. Out of the box SS Shrey S. Associate Principal Engineer Enterprise (\> 1000 emp.) 2/17/2026 "Reliable static code analysis that improves code quality & enforces standards for our clients" 5/5 What do you like best about SonarQube? What I like best about SonarQube is how consistently it helps me maintain code quality without relying only on manual reviews. I’ve integrated it into my Jenkins pipeline, so every build runs a scan automatically. The Quality Gate acts as a clear checkpoint, if something critical is flagged, it forces us to address it before moving forward. For Java projects, the rules are quite mature and practical. It regularly catches potential null pointer issues, unused code, and other code smells that are easy to miss during development. Over the years, it has helped me catch potential bugs early that could have impacted our production system if they had gone unnoticed. I also like the visibility it provides. Being able to track issues, technical debt, and code coverage trends over time helps me make better decisions, especially when working on older modules. It’s not just about finding problems, it helps enforce a consistent standard across the team. After using it for almost 9 years, it has become a dependable part of my development process rather than just another tool in the stack. Review collected by and hosted on G2.com. What do you dislike about SonarQube? One challenge with SonarQube, especially in the Community Edition that I am using is that the initial setup and rule tuning takes time. Out of the box, some rules can feel overly strict, particularly for older or legacy Java projects. My first scan in 2017 generated a very large number of issues, which was honestly overwhelming. It required effort to decide what to prioritize and how to gradually improve the codebase instead of trying to fix everything at once. Another limitation is that some advanced features are only available in the paid editions. For example, more advanced security analysis and branch-level features would be useful, but they’re not included in Community Edition. That’s understandable from a product standpoint, but it does limit some functionality for teams that want to stay on the free version. Also, when the issue count grows large, navigating and triaging findings can sometimes feel a bit time-consuming. Overall, none of these are deal-breakers, but they do require some planning and discipline to get the most value out of the tool. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? SonarQube helps me solve the problem of inconsistent code quality across the team. Before we had it fully integrated into my Jenkins pipeline, a lot of quality checks depended heavily on individual reviewers. That sometimes led to inconsistencies, especially with a growing team. By running automated scans on every build, I, now have a consistent baseline for code quality in our Java projects. The Quality Gate ensures that critical issues, major bugs, or high-severity vulnerabilities are addressed before code moves forward. This has reduced the risk of avoidable defects reaching production. It has also helped me manage technical debt in a more structured way. Instead of discovering problems late in testing or after release, I catch many of them during development. Over time, this has led to cleaner code, fewer production issues caused by simple oversights, and more focused code reviews. Another benefit is visibility. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller ![Jahangeer W.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Jahangeer W.") JW Jahangeer W. Staff SRE Mid-Market (51-1000 emp.) 6/17/2026 "All-in-One Code Quality and Security Insights" 5/5 What do you like best about SonarQube? It is really helpful for automatically identifying code quality issues, security vulnerabilities, bugs, and technical debt, all in a single place. Review collected by and hosted on G2.com. What do you dislike about SonarQube? Sometimes it flags issues, but that’s acceptable when you look at them in context. The initial rule configuration feels a bit hectic, and the UI isn’t particularly user-friendly. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? For us, SonarQube helps prevent low-quality and vulnerable code from reaching production deployments. It also enables automated deployment failures when the code is considered risky or vulnerable as per our set rules. Review collected by and hosted on G2.com. Show More 6/23/2026 Current UserValidated ReviewerIncentivizedSource: G2 invite ![Jay Kishan G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Jay Kishan G.") JG Jay Kishan G. Associate devOps engineer Enterprise (\> 1000 emp.) 6/19/2026 "SonarQube Made Our CI/CD Code Testing Efficient and Saved QA Time" 4/5 What do you like best about SonarQube? I have configured sonarQube in my CI/CD pipeline and it test our code efficiently . The QA team save their time and efforts due to this. It is timetaking and tough for us to verify every code line but with sonarqube it become smooth. Review collected by and hosted on G2.com. What do you dislike about SonarQube? For someone who is new to sonarqube, it is complex for rules, quality profiles and integrations setup. Also scanning large code base take time. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? I personally use it for my docker based deployments so before dockerizing application code it makes easy to verify the code. Review collected by and hosted on G2.com. Show More 7/7/2026 Validated ReviewerIncentivizedSource: G2 invite ![Verified User in Logistics and Supply Chain](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Logistics and Supply Chain") UL Verified User in Logistics and Supply Chain Enterprise (\> 1000 emp.) 3/2/2026 "Clear code analyses, strong CI/CD integration, and security checks with SonarQube" 4/5 What do you like best about SonarQube? Clear and understandable code analyses. SonarQube not only shows errors but also explains why they are a problem and how to fix them. Support for clean code principles. It helps teams write maintainable and clean code in the long term. Very good integration into CI/CD pipelines. Quality gates ensure that builds only proceed if the code quality is right. Clear dashboards. You can quickly see trends, risks, and technical debt. Built-in security checks. These include SAST, security hotspots, and support for relevant standards like OWASP. Review collected by and hosted on G2.com. What do you dislike about SonarQube? The analysis can be very slow for large projects, especially when many rules are activated. Some rules generate false positives, which leads to additional effort. The configuration can become complicated, especially when multiple languages or special build setups are involved. The user interface is sometimes confusing, especially with a large number of projects. Some important features are only available in the expensive enterprise editions. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? Automatic Code Analysis SonarQube scans the code with every build and finds errors, risks, and vulnerabilities early. Clear Instructions for Resolution Each identified issue is explained, including why it is a problem and how it can be improved. Quality Gates Builds automatically fail if the code quality does not meet the defined standards. Centralized Transparency Dashboards display trends, risks, and technical debt across all projects. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of sellerAI Translated ![Prakash E.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Prakash E.") PE Prakash E. Sr. Software Engineer (DevOps) Small-Business (50 or fewer emp.) 7/7/2023 "Sonarqube review" 5/5 What do you like best about SonarQube? Deployed through helm on eks with stateful Review collected by and hosted on G2.com. What do you dislike about SonarQube? AI integration need to add in sonar for remediation steps Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? Its generating code quality reports in efficient way. Its benifiting you very usefully Review collected by and hosted on G2.com. Show More 8/4/2026 Current UserValidated ReviewerIncentivizedSource: Organic ![Verified User in Financial Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Financial Services") AF Verified User in Financial Services Enterprise (\> 1000 emp.) 2/16/2026 "Clear, Actionable Feedback and Strong Quality Gates That Improve Code Early" 4.5/5 What do you like best about SonarQube? Clear, actionable feedback: Issues are explained with examples and remediation guidance, so developers know what to fix and how to fix it. Strong focus on Clean Code: The Quality Gate concept helps teams align around maintainability, reliability, and security as non-negotiable standards. Early detection of bugs and vulnerabilities: Catching problems during development or CI prevents costly fixes later in production. Excellent CI/CD integration: It fits naturally into pipelines (GitHub, GitLab, Azure DevOps, Jenkins), making quality checks automatic. Language and framework coverage: Supports a wide range of languages, which is ideal for heterogeneous teams. Developer-friendly dashboards: Metrics and trends are easy to understand, helping teams continuously improve instead of just “passing checks”. Review collected by and hosted on G2.com. What do you dislike about SonarQube? False positives and rigid rules: Some rules don’t always fit real-world or legacy codebases, requiring frequent tuning or suppressions. Steep learning curve at the beginning: Understanding rules, Quality Gates, and how to interpret certain metrics can be challenging for new teams. Noise in large or old projects: In legacy systems, the volume of issues can be overwhelming and may reduce perceived value if not introduced gradually. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? Inconsistent code quality across teams SonarQube enforces shared standards through Quality Gates, which reduces subjective code review discussions and aligns everyone on what “good code” means. Late discovery of bugs and security issues By analyzing code early in the CI pipeline, it catches bugs, vulnerabilities, and code smells before they reach production, lowering rework and incident risk. Technical debt accumulation SonarQube makes technical debt visible and measurable, helping teams prioritize refactoring instead of letting maintainability silently degrade. Time-consuming and unfocused code reviews Automated analysis filters out low-value comments, allowing reviewers to focus on architecture, business logic, and design decisions. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite on behalf of seller ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Verified User in Information Technology and Services Mid-Market (51-1000 emp.) 7/11/2026 "SonarQube Makes Code Reviews Easy with Reliable Scanning" 4/5 What do you like best about SonarQube? SonarQube is a code scanner, It will perform code review of the developed code. Review collected by and hosted on G2.com. What do you dislike about SonarQube? It may provide multiple false positive results during its report and it is not a complete replacement of testing. It is a additional step before testing Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? The problem that SonarQube solves for me is code review, before I provide the code to testing team, I can provide the code to SonarQube and get the report to verify the bugs and vulnerabilities Review collected by and hosted on G2.com. Show More Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise. G2 IconCurrent UserValidated ReviewerSource: G2 invite ![Gaurav S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Gaurav S.") GS Gaurav S. Director, Customer Success Mid-Market (51-1000 emp.) 7/7/2026 "Effective Static Code Analysis for Development Teams" 4.5/5 What do you like best about SonarQube? I like that SonarQube automatically identifies code quality and security issues early, provides clear, actionable feedback, and helps maintain consistent coding standards through quality gates. Review collected by and hosted on G2.com. What do you dislike about SonarQube? It can occasionally report false positives, and configuring rules to match a team's coding standards can be time-consuming. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? SonarQube catches code quality and security issues early, helping reduce technical debt, improve code maintainability, and ensure consistent coding standards. This saves time during code reviews and helps prevent issues from reaching production. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Prakhar M.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Prakhar M.") PM Prakhar M. Data Analyst Mid-Market (51-1000 emp.) 4/27/2026 "Essential for Code Quality, Needs UI Improvements" 4.5/5 What do you like best about SonarQube? I like how SonarQube gives clean actionable insights and highlights issues right in pull requests. The dashboard and quality gate are very useful. The dashboards give a quick, centralized view of code health across projects, and quality gates ensure only code meeting defined standards gets merged. The initial setup was easy thanks to the documentation. Review collected by and hosted on G2.com. What do you dislike about SonarQube? It sometimes feels slow on large projects, and UI can be a bit overwhelming for new users. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? I use SonarQube for automated code quality and security checks, integrated into our CI/CD pipeline. It catches bugs and vulnerabilities early, provides clean insights right in pull requests, and ensures code meets quality gates before merging. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite ![Do Nhat K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Do Nhat K.") DK Do Nhat K. Mid-Market (51-1000 emp.) 2/23/2026 "Effortless Code Quality Enhancement and Security" 5/5 What do you like best about SonarQube? I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is great. It's easy to integrate into our CI/CD, giving us a whole view of our codebase including code quality, code structure, and security. The initial setup was so simple on Jenkins, just had to install a plugin and input parameters. Review collected by and hosted on G2.com. What do you dislike about SonarQube? I think now we are good, just has some issue when starting integrating but support team already helping us. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? I use SonarQube to check code quality, fix security issues, and make code cleaner. It integrates easily with our CI/CD, giving a comprehensive view of code quality, structure, and security. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: G2 invite on behalf of seller ## Top-Rated Alternatives [ ![GitHub](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitHub") GitHub 4.7/5(2,397) ](https://www.g2.com/products/github/reviews) [ ![GitLab](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitLab") GitLab 4.5/5(901) ](https://www.g2.com/products/gitlab/reviews) [ ![Veracode Application Security Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Veracode Application Security Platform") Veracode Application Security Platform 3.8/5(26) ](https://www.g2.com/products/veracode-application-security-platform/reviews) [ View All Alternatives ](https://www.g2.com/products/sonarqube/competitors/alternatives) ##### Categories on G2 [Bug Tracking](https://www.g2.com/categories/bug-tracking)[AI Governance Tools](https://www.g2.com/categories/ai-governance-tools)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis) [Bug Tracking](https://www.g2.com/categories/bug-tracking)[AI Governance Tools](https://www.g2.com/categories/ai-governance-tools)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Software Development Analytics Tools](https://www.g2.com/categories/software-development-analytics-tools)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Application Security Posture Management (ASPM)](https://www.g2.com/categories/application-security-posture-management-aspm)[Software Bill of Materials (SBOM)](https://www.g2.com/categories/software-bill-of-materials-sbom) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Best SAP service provider near me](https://www.g2.com/discussions/best-sap-service-provider-near-me)[What is the best tool for managing ads across multiple networks?](https://www.g2.com/discussions/what-is-the-best-tool-for-managing-ads-across-multiple-networks)[What is the top absence tracking tool for remote teams?](https://www.g2.com/discussions/what-is-the-top-absence-tracking-tool-for-remote-teams) [Which Google Workspace academic solutions provide the easiest deployment and fastest time to value for enterprise implementations?](https://www.g2.com/discussions/which-google-workspace-academic-solutions-provide-the-easiest-deployment-and-fastest-time-to-value-for-enterprise-implementations)[Is Speed Kit worth it for web client acceleration?](https://www.g2.com/discussions/is-speed-kit-worth-it-for-web-client-acceleration)[Pros and Cons Details](https://www.g2.com/products/sonarqube/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)