Generated from real user reviews
See Related User Reviews
Do Nhat K.
Mid-Market (51-1000 emp.)
5.0/5
"Effortless Code Quality Enhancement and Security"
What do you like about SonarQube?
I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is
Verified User
Small-Business (50 or fewer emp.)
4.5/5
"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"
What do you like about SonarQube?
It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
3.5/5
"SonaQube gets the job done with its approach to organizing new and former findings."
What do you like about SonarQube?
I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren
Verified User
Small-Business (50 or fewer emp.)
4.5/5
"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"
What do you like about SonarQube?
It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
3.5/5
"SonaQube gets the job done with its approach to organizing new and former findings."
What do you like about SonarQube?
I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren
Verified User
Small-Business (50 or fewer emp.)
4.5/5
"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"
What do you like about SonarQube?
It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug
See Related User Reviews
Do Nhat K.
Mid-Market (51-1000 emp.)
5.0/5
"Effortless Code Quality Enhancement and Security"
What do you like about SonarQube?
I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is
Verified User
Small-Business (50 or fewer emp.)
4.5/5
"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"
What do you like about SonarQube?
It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug
See Related User Reviews
Do Nhat K.
Mid-Market (51-1000 emp.)
5.0/5
"Effortless Code Quality Enhancement and Security"
What do you like about SonarQube?
I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is
Verified User
Small-Business (50 or fewer emp.)
4.5/5
"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"
What do you like about SonarQube?
It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug
See Related User Reviews
Ankshuk R.
Enterprise (> 1000 emp.)
5.0/5
"A Tool to Improve Code Quality!"
What do you dislike about SonarQube?
Although it is very customizable and user-friendly, SonalLint can be very vague at times, there are times when it throws errors in the code like some
Verified User
Mid-Market (51-1000 emp.)
4.0/5
"Centralized Code Quality Insights with Helpful Quality Gates"
What do you dislike about SonarQube?
One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee
See Related User Reviews
Pankaj J.
Small-Business (50 or fewer emp.)
4.5/5
"SonarQube Quickly Flags Code Quality and Security Issues"
What do you dislike about SonarQube?
I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s
Verified User
Mid-Market (51-1000 emp.)
4.0/5
"Centralized Code Quality Insights with Helpful Quality Gates"
What do you dislike about SonarQube?
One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
3.5/5
"SonaQube gets the job done with its approach to organizing new and former findings."
What do you dislike about SonarQube?
I wish there were more ways to group users and teams, and then automatically send them reports that include vulnerability details. I wish you can twe
Pankaj J.
Small-Business (50 or fewer emp.)
4.5/5
"SonarQube Quickly Flags Code Quality and Security Issues"
What do you dislike about SonarQube?
I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s
See Related User Reviews
Ankshuk R.
Enterprise (> 1000 emp.)
5.0/5
"A Tool to Improve Code Quality!"
What do you dislike about SonarQube?
Although it is very customizable and user-friendly, SonalLint can be very vague at times, there are times when it throws errors in the code like some
Pankaj J.
Small-Business (50 or fewer emp.)
4.5/5
"SonarQube Quickly Flags Code Quality and Security Issues"
What do you dislike about SonarQube?
I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s
See Related User Reviews
Verified User
Mid-Market (51-1000 emp.)
4.0/5
"Centralized Code Quality Insights with Helpful Quality Gates"
What do you dislike about SonarQube?
One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee
Shrey S.
Enterprise (> 1000 emp.)
5.0/5
"Reliable static code analysis that improves code quality & enforces standards for our clients"
What do you dislike about SonarQube?
One challenge with SonarQube, especially in the Community Edition that I am using is that the initial setup and rule tuning takes time. Out of the box
Cve management and checking code
Management risks Review collected by and hosted on G2.com.
Slow to trigger runs and need manual intervention Review collected by and hosted on G2.com.
I like SonarQube because it quickly flags code quality and security issues, making it easier for me to keep the codebase clean, reliable, and maintainable over time. Review collected by and hosted on G2.com.
I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to sort through. Review collected by and hosted on G2.com.
I like SonarQube's integration with third-party tools, which makes it really convenient to use alongside other tools we have internally. It's also light to host, which is a big plus for us. The initial setup was fairly easy, with just a couple of properties to adjust, and those improved over time. Review collected by and hosted on G2.com.
I don't like the upgrades and Java versions decommissioning, which usually impact a lot of users using SonarQube. Review collected by and hosted on G2.com.
SonarQube makes it easy to maintain high code quality by automatically detecting bugs, vulnerabilities, and code smells. I like how it integrates with CI/CD pipelines and provides clear, actionable insights for developers. The detailed dashboards and quality gates help enforce coding standards across teams. Review collected by and hosted on G2.com.
The initial setup and configuration can be a bit complex, especially for new users. It also requires tuning to avoid too many false positives. For very large projects, performance can sometimes feel slower, and the UI could be more modern and intuitive. Review collected by and hosted on G2.com.
The ability to detect errors, combined with Quality Gates, is vital to our stability; it filters out defective code before it reaches production and helps mitigate serious operational risks. Review collected by and hosted on G2.com.
It consumes too much RAM, and it sometimes flags false positives on code patterns that are actually correct, which makes it quite tedious to use. Review collected by and hosted on G2.com.
I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren’t always as critical in some cases. Review collected by and hosted on G2.com.
I wish there were more ways to group users and teams, and then automatically send them reports that include vulnerability details. I wish you can tweak false positives at a more granular level allowing you more options to exclude some findings but not the whole category. Review collected by and hosted on G2.com.
Integration within our existing CI/CD tooling, with AI capabilities available. Review collected by and hosted on G2.com.
Using the web interface, I prefer to manage everything through our existing workflow tools, so this works well for me because I don’t need to use it very often. Review collected by and hosted on G2.com.
SonarCloud is very easy to set up, and integrates nicely into your development platform.
It supports a large number of languages, rules, and can be configured to fit your needs.
Teams use it on a daily basis without needing to think of it.
It is also very intuitive and robust, so you will hardly need technical support; if you need to, the community website is the way to go for quick answers. Review collected by and hosted on G2.com.
The 2024 changes in pricing and product organization led to some hard discussions on pricing internally. The pricing is fair, but the price hike was hard to swallow by the management. Review collected by and hosted on G2.com.
I like how easy it is to spot issues before they hit production. SonarQube gives clear feedback and keeps our codebase clean and secure. Review collected by and hosted on G2.com.
The community edition is pretty difficult to upgrade. All the available documentation is vague. Review collected by and hosted on G2.com.
I love that it is really easy to use, it can be integrated with GitHub, and it can review a wide array of code languages Review collected by and hosted on G2.com.
It can be overwhelming when you get your first review Review collected by and hosted on G2.com.