I like that SonarQube automatically identifies code quality and security issues early, provides clear, actionable feedback, and helps maintain consistent coding standards through quality gates. Review collected by and hosted on G2.com.

It can occasionally report false positives, and configuring rules to match a team's coding standards can be time-consuming. Review collected by and hosted on G2.com.

I like how SonarQube gives clean actionable insights and highlights issues right in pull requests. The dashboard and quality gate are very useful. The dashboards give a quick, centralized view of code health across projects, and quality gates ensure only code meeting defined standards gets merged. The initial setup was easy thanks to the documentation. Review collected by and hosted on G2.com.

It sometimes feels slow on large projects, and UI can be a bit overwhelming for new users. Review collected by and hosted on G2.com.

I'd like the new feature in the product roadmap (ex: AI features) Review collected by and hosted on G2.com.

They should add the Static Application Security Testing (SAST) Review collected by and hosted on G2.com.

I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is great. It's easy to integrate into our CI/CD, giving us a whole view of our codebase including code quality, code structure, and security. The initial setup was so simple on Jenkins, just had to install a plugin and input parameters. Review collected by and hosted on G2.com.

I think now we are good, just has some issue when starting integrating but support team already helping us. Review collected by and hosted on G2.com.

I like SonarQube's simple UI which makes navigation straightforward for me, and the report functionalities that provide clear insights into code issues. Additionally, I appreciate the good filtering of issues, which helps in easily identifying and categorizing code problems. Review collected by and hosted on G2.com.

I find issues with connecting to a real-time developer tool which could speed up the workflow for source code analysis. The process of moving analysis to developer tools and having SonarQube as the final place for product analysis reports feels like it needs improvement. I also encountered problems when connecting to LDAP, even though the installation itself was simple. Review collected by and hosted on G2.com.

It has a nice, simple UI that’s to the point and not filled with unnecessary extras. As both a user and an administrator, I find it straightforward and easy to use. Review collected by and hosted on G2.com.

It doesn't feel as if it innovates or changes often. AI summaries would be a great addition Review collected by and hosted on G2.com.

What I like best about SonarQube is its clear and centralized view of code quality. It makes it easy to see bugs, vulnerabilities, and code smells in one place. I also like how it integrates well with CI/CD pipelines and pull requests, which helps maintain clean code during development. The quality gates are especially useful because they enforce consistent standards across the team. Review collected by and hosted on G2.com.

One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules feel too strict or generate false positives, which requires additional time to review and adjust. The UI can also feel slow when working with big codebases. Review collected by and hosted on G2.com.

Excellent Quality Gates for DevOps automation. Review collected by and hosted on G2.com.

The UI for managing complex branch configurations can be a bit overwhelming and non-intuitive. Review collected by and hosted on G2.com.

It helps catch bugs early and improves overall code quality. Review collected by and hosted on G2.com.

Some of the rules feel overly strict, and the setup process is more complex than it needs to be. Review collected by and hosted on G2.com.

It is very easy to configure and integrate with our existing CI/CD pipelines.

It provides high-quality static code analysis that helps us write bug-free code consistently.

The real-time feedback allows our developers to fix issues immediately before they reach production. Review collected by and hosted on G2.com.

One major drawback is the lack of a built-in feature to easily export detailed analysis reports into formats like PDF or Excel. This makes it difficult to share status updates with stakeholders who don't have direct access to the SonarQube dashboard. Review collected by and hosted on G2.com.