--- title: SonarQube Reviews meta\_title: 'SonarQube Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 155 reviews by the users' company size, role or industry to find out how SonarQube works for a business like yours. aggregate\_rating: rating\_value: 4.4 review\_count: 155 scale: '5' date\_modified: '2026-08-07' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- ### SonarQube Pros and Cons: Top 5 Advantages and Disadvantages #### Quick AI Summary Based on G2 Reviews Generated from real user reviews Users value how SonarQube **efficiently flags code quality and security issues** , ensuring a clean and maintainable codebase. [(24 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505994&qs=pros-and-cons#reviews) Users value the **issue filtering and prioritization features** of SonarQube, enhancing focus on high-priority tasks. [(20 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504258&qs=pros-and-cons#reviews) Users value the **issue identification and prioritization** features of SonarQube, improving focus on critical tasks. [(19 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504704&qs=pros-and-cons#reviews) Users find SonarQube's **ease of use** invaluable for maintaining code quality and integrating seamlessly into development workflows. [(18 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504166&qs=pros-and-cons#reviews) Users appreciate the **easy integrations** with existing CI/CD tools, enhancing their development workflow seamlessly. [(18 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504924&qs=pros-and-cons#reviews) Users face challenges with **software bugs** as SonarQube can consume excessive RAM and occasionally reports false positives. [(12 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505060&qs=pros-and-cons#reviews) Users find SonarQube's configuration **complex** , especially for beginners, leading to difficulties and overwhelming warnings to manage. [(10 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505551&qs=pros-and-cons#reviews) Users encounter **false positives** that complicate evaluations, though mitigation options exist through detailed analysis and rule customization. [(10 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505594&qs=pros-and-cons#reviews) Users find that SonarQube's **complexity in configuration** and excessive warnings can hinder effective usage and efficiency. [(8 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=2100748&qs=pros-and-cons#reviews) Users find the **complex setup** of SonarQube challenging, especially for beginners unfamiliar with the configuration process. [(8 mentions)](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505008&qs=pros-and-cons#reviews) ### 5 Pros or Advantages of SonarQube ##### 1. Code Quality Users value how SonarQube **efficiently flags code quality and security issues** , ensuring a clean and maintainable codebase. [ See 24 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505994&qs=pros-and-cons#reviews) See Related User Reviews ![Do Nhat K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Do Nhat K.") DK Do Nhat K. Mid-Market (51-1000 emp.) 5.0/5 "Effortless Code Quality Enhancement and Security" What do you like about SonarQube? I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Small-Business (50 or fewer emp.) 4.5/5 "Streamlining Software Composition Analysis (SCA) Within the Dev Workflow" What do you like about SonarQube? It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug ##### 2. Features Users value the **issue filtering and prioritization features** of SonarQube, enhancing focus on high-priority tasks. [ See 20 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504258&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Enterprise (\> 1000 emp.) 3.5/5 "SonaQube gets the job done with its approach to organizing new and former findings." What do you like about SonarQube? I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Small-Business (50 or fewer emp.) 4.5/5 "Streamlining Software Composition Analysis (SCA) Within the Dev Workflow" What do you like about SonarQube? It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug ##### 3. Issue Identification Users value the **issue identification and prioritization** features of SonarQube, improving focus on critical tasks. [ See 19 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504704&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Enterprise (\> 1000 emp.) 3.5/5 "SonaQube gets the job done with its approach to organizing new and former findings." What do you like about SonarQube? I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Small-Business (50 or fewer emp.) 4.5/5 "Streamlining Software Composition Analysis (SCA) Within the Dev Workflow" What do you like about SonarQube? It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug ##### 4. Ease of Use Users find SonarQube's **ease of use** invaluable for maintaining code quality and integrating seamlessly into development workflows. [ See 18 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504166&qs=pros-and-cons#reviews) See Related User Reviews ![Do Nhat K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Do Nhat K.") DK Do Nhat K. Mid-Market (51-1000 emp.) 5.0/5 "Effortless Code Quality Enhancement and Security" What do you like about SonarQube? I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Small-Business (50 or fewer emp.) 4.5/5 "Streamlining Software Composition Analysis (SCA) Within the Dev Workflow" What do you like about SonarQube? It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug ##### 5. Easy Integrations Users appreciate the **easy integrations** with existing CI/CD tools, enhancing their development workflow seamlessly. [ See 18 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1504924&qs=pros-and-cons#reviews) See Related User Reviews ![Do Nhat K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Do Nhat K.") DK Do Nhat K. Mid-Market (51-1000 emp.) 5.0/5 "Effortless Code Quality Enhancement and Security" What do you like about SonarQube? I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Small-Business (50 or fewer emp.) 4.5/5 "Streamlining Software Composition Analysis (SCA) Within the Dev Workflow" What do you like about SonarQube? It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug ### 5 Cons or Disadvantages of SonarQube ##### 1. Software Bugs Users face challenges with **software bugs** as SonarQube can consume excessive RAM and occasionally reports false positives. [ See 12 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505060&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Mid-Market (51-1000 emp.) 4.0/5 "Centralized Code Quality Insights with Helpful Quality Gates" What do you dislike about SonarQube? One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee NR Nassima R. Small-Business (50 or fewer emp.) 4.0/5 "Error Detection and Quality Gates That Strengthen Stability" What do you dislike about SonarQube? It consumes too much RAM, and it sometimes flags false positives on code patterns that are actually correct, which makes it quite tedious to use. ##### 2. Complex Configuration Users find SonarQube's configuration **complex** , especially for beginners, leading to difficulties and overwhelming warnings to manage. [ See 10 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505551&qs=pros-and-cons#reviews) See Related User Reviews PJ Pankaj J. Small-Business (50 or fewer emp.) 4.5/5 "SonarQube Quickly Flags Code Quality and Security Issues" What do you dislike about SonarQube? I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Mid-Market (51-1000 emp.) 4.0/5 "Centralized Code Quality Insights with Helpful Quality Gates" What do you dislike about SonarQube? One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee ##### 3. False Positives Users encounter **false positives** that complicate evaluations, though mitigation options exist through detailed analysis and rule customization. [ See 10 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505594&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") A Verified User Enterprise (\> 1000 emp.) 3.5/5 "SonaQube gets the job done with its approach to organizing new and former findings." What do you dislike about SonarQube? I wish there were more ways to group users and teams, and then automatically send them reports that include vulnerability details. I wish you can twe PJ Pankaj J. Small-Business (50 or fewer emp.) 4.5/5 "SonarQube Quickly Flags Code Quality and Security Issues" What do you dislike about SonarQube? I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s ##### 4. Complexity Users find that SonarQube's **complexity in configuration** and excessive warnings can hinder effective usage and efficiency. [ See 8 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=2100748&qs=pros-and-cons#reviews) See Related User Reviews PJ Pankaj J. Small-Business (50 or fewer emp.) 4.5/5 "SonarQube Quickly Flags Code Quality and Security Issues" What do you dislike about SonarQube? I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Mid-Market (51-1000 emp.) 4.0/5 "Centralized Code Quality Insights with Helpful Quality Gates" What do you dislike about SonarQube? One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee ##### 5. Complex Setup Users find the **complex setup** of SonarQube challenging, especially for beginners unfamiliar with the configuration process. [ See 8 mentions ](https://www.g2.com/products/sonarqube/reviews?filters%5Bsentiment_snippet%5D=1505008&qs=pros-and-cons#reviews) See Related User Reviews ![Verified User](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User") U Verified User Mid-Market (51-1000 emp.) 4.0/5 "Centralized Code Quality Insights with Helpful Quality Gates" What do you dislike about SonarQube? One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee SS Shrey S. Enterprise (\> 1000 emp.) 5.0/5 "Reliable static code analysis that improves code quality & enforces standards for our clients" What do you dislike about SonarQube? One challenge with SonarQube, especially in the Community Edition that I am using is that the initial setup and rule tuning takes time. Out of the box ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") AI Verified User in Information Technology and Services Small-Business (50 or fewer emp.) 10/23/2025 "Helpful Code Suggestions, Though Sometimes Misses the Mark" 4.5/5 What do you like best about SonarQube? SonarQube gives code suggestions that are secure and give ideas how it can be written in a better way Review collected by and hosted on G2.com. What do you dislike about SonarQube? The suggestions are not always relevant for the code. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? We use it in our SecDevOps way of working to comply with ISO27001 Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite ![Verified User in Insurance](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Insurance") II Verified User in Insurance Mid-Market (51-1000 emp.) 7/3/2025 "QA on code" 4/5 What do you like best about SonarQube? That helps developers maintain high code quality standards Review collected by and hosted on G2.com. What do you dislike about SonarQube? I don't dislike nothing in particular . Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? Code quality and compliance on our coding standards Review collected by and hosted on G2.com. Show More Our network of Icons are G2 members who are recognized for their outstanding contributions and commitment to helping others through their expertise.G2 IconCurrent UserValidated ReviewerSource: Organic KB Kevin B. Senior DevOps Engineer Mid-Market (51-1000 emp.) 6/27/2024 "Effective Code Quality Management with SonarQube" 4/5 What do you like best about SonarQube? What I love about SonarQube is how it digs deep into my code and finds hidden issues which are not as obvious when writing the code, especially bugs and security problems, across different programming languages. It hooks up smoothly with my CI/CD pipelines, which means I can keep an eye on code quality at every step. The reports it generates are super detailed and really help the team see where we can improve. Plus, you can customize the rules and use tons of plugins to make it work just how you need it. Review collected by and hosted on G2.com. What do you dislike about SonarQube? The one thing that I dislike is how much it can slow things down when you're working with big projects. The scans can take a while, which sometimes messes with our workflow, and we cannot use parallel analysis as we are on the Developer license since the Enterprise is too costly for us. Also, setting it up and getting everything configured right can be a bit of a headache and takes some time. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? SonarQube is a lifesaver for keeping our code clean, secure, and easy to maintain. It’s always on the lookout, catching bugs, code smells, and security issues early in the game. This means our codebase stays solid and we don’t end up with a pile of technical debt. For me and the team, it’s been a game-changer. We get automatic code reviews and detailed feedback that helps us catch issues before they cause any real trouble. The insights we get from the quality metrics push us to keep improving our code. Integrating SonarQube into our CI/CD pipelines has really smoothed out our quality checks, making sure we keep high standards from start to finish. All in all, it’s made our software better and we feel way more confident in what we deliver. Review collected by and hosted on G2.com. Show More 7/1/2024 Current UserValidated ReviewerIncentivizedSource: Seller invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") UC Verified User in Computer Software Mid-Market (51-1000 emp.) 12/13/2024 "Easy but powerful enough" 5/5 What do you like best about SonarQube? SonarCloud is easy to use and integrates seamlessly into existing projects and nearly all CI/CD pipelines. We integrated almost all of our codebases and used it along with the Sonar cloud extension, which made it more powerful. Review collected by and hosted on G2.com. What do you dislike about SonarQube? The downside with sonar is that it requires us to make at least one change in a file to get it scanned. Because of this, sometimes, issues slip into production. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? Linting issues in the code Security vulnerabilities in the code It helped us in identifying the issues while development itself and if anything misses Sonar's CICD Integration will take care of this. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") CC Verified User in Computer Software Enterprise (\> 1000 emp.) 10/3/2024 "A Tool one can rely for large scale applications" 4/5 What do you like best about SonarQube? SonarLint is an incredibly customizable, open-source tool that integrates seamlessly with a variety of IDEs and coding platforms, such as Spring Tools Suite and IntelliJ IDEA. Its flexibility and user-friendly nature are what stand out the most to me. Review collected by and hosted on G2.com. What do you dislike about SonarQube? While highly customizable and user-friendly, SonarLint can occasionally be unclear. For instance, it sometimes flags ignorable issues like auto-wiring errors in Spring Boot projects. Additionally, it lacks the ability to assess and improve code complexity. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? SonarLint helps by cutting down the time spent on code reviews and improving code readability. It has made our code more production-ready and less cumbersome, while also identifying potential error-prone areas and giving real-time feedback to developers during coding. This version maintains the core points while making the language flow more smoothly. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Stanley S.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Stanley S.") SS Stanley S. Embedded Engineer Small-Business (50 or fewer emp.) 4/24/2024 "How our team uses SonarQube" 5/5 What do you like best about SonarQube? Our development process is helped alot by SonarQube as it will detect some bugs such as running out of memory, or simple error that we might not see at the first time. Our team is happy to use the product. Review collected by and hosted on G2.com. What do you dislike about SonarQube? Getting it to start is a long process. We are having some trouble trying to understand how sonarqube judges our code. As our team is using it for the embedded environment, some suggestions (such as atomic implementations etc) are not really applicable to us. At first we were frustated as it always suggested that our code is wrong, but now we can find a way to silence it. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? It can be integrated easily (after we understand) to our Gitlab server. We can have the analysis out of the box immediately when we are pushing the commits. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite RS Rekha S. Software Developer Computer Software Mid-Market (51-1000 emp.) 5/30/2024 "Comprehensive Code Quality Tool" 4/5 What do you like best about SonarQube? SonarQube has a great way of examining code quality as a whole. It has the capability of discovering mistakes, threats, as well as unfavorable practices found in different programming languages to maintain superior coding norms. It generates detailed dashboards and reports which give specific views allowing for developing incrementally in addition to keeping code clean and gracious throughout its life span. Review collected by and hosted on G2.com. What do you dislike about SonarQube? SonarQube's complicated setup and configuration process remains trail and discouraging being time consuming for newbies. In addition one may also suffer from performance degradation caused by big code bases as well as when they discover that some extra skills need payment before using them; hence would be so costly particularly among little groups or small enterprises. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? SonarQube focuses on addressing the critical issue of keeping code desirable and secure thereby automating code reviews, identifying potential issues earlier on and ensuring conformity to coding standards. Instead of taking a reactive approach, it helps reduce technical debts, fosters software reliability, simplifies development as it eventually saves on time and resources. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite ![Murtadha Bazli T.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Murtadha Bazli T.") MT Murtadha Bazli T. Senior Embedded System Engineer Small-Business (50 or fewer emp.) 4/24/2024 "Easy to use, modular and helpful in improving software quality." 5/5 What do you like best about SonarQube? I use SonarQube mainly for analyzing C, C++ and Python programming languages, and that's why I need a SonarQube developer license. The $160 I spent for a year is really worth it. Think of SonarQube as your peer review, friend and supervisor for your software development. Analyzing C/C++ is really easy and not tied to an IDE. I simply host SonarQube in Docker, build my software with build-wrapper and analyze it with Sonar-scanner. The analysis results then appear in the SonarQube dashboard. I use SonarQube both at work and at home for my personal project. Due to the affordable price and ease of use, I have been loyal to SonarQube for 3 years now. Sonar also has responsive customer support, and I mainly contact them to get a new license due to an issue with my Docker image. The response consistently within 1-2 days, and I always communicate via email. No website to report or form to fill out, which for me is convenience. Review collected by and hosted on G2.com. What do you dislike about SonarQube? I develop embedded software that adheres to MISRA C/C++, and SonarQube does have some MISRA rules, but not all of them are implemented. I really love to see SonarQube being able to adopt all these rules. A few times I have found alternatives to SonarQube for this reason, but since other tools are expensive, tied to an IDE and the learning curve is unknown (unlike SonarQube, we only need 3 steps to analyze the code), I keep coming back to SonarQube. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? SonarQube became my main platform for consolidating unit test results, code coverage and static code analysis. SonarQube Dashboard becomes my benchmark for software development maturity. Other static code analyzers can also report errors, but unlike SonarQube, it shows very nice examples of compliant and non-compliant code. This has helped me a lot throughout my software development career. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite ![Alan R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Alan R.") AR Alan R. R&D Manager Mid-Market (51-1000 emp.) 4/24/2024 "Sonarqube is a great tool to help devs raise the quality of legacy code and new greenfield code" 5/5 What do you like best about SonarQube? Identification of coding issues across whole codebases, while providing a manageable way to gradually improve the code quality over time by enforcing that new code is of good quality. Developers can be gently guided to better practices without having to solve thousands of code smells all at once. We can refactor code as we work in different areas without introducing new risk of regressions. Easy to setup and manage and pretty hands off. It integrates well with Azure DevOps and our pull request and CI workflows. Review collected by and hosted on G2.com. What do you dislike about SonarQube? Some churn recently in how Sonarqube manages quality gates and what the bar is. We have a number of limitations in our analysis, particularly in collecting code coverage information. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? Sonarqube provides a level of security review to our code changes. Sonarqube helps developers maintain a high quality bar in the code they write, provides neutral guidance and learning without code reviewers having to nitpick every commit. Developers are guided to improve the code they touch, gradually helping improve the quality of older legacy codebases without making large changes and introducing regression risk. Review collected by and hosted on G2.com. Show More Validated ReviewerIncentivizedSource: Seller invite ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") UC Verified User in Computer Software Mid-Market (51-1000 emp.) 4/24/2024 "Effective static analysis for bugs and vulnerabilities" 4.5/5 What do you like best about SonarQube? Being able to filter issues and assign them to different team members allows each developer to focus on high-priority issues. SonarQube allows you to enable to disable specific rules, and to set the severity of each rule. This further help to prioritize the issues needing attention. When a developer determines that a particular issue should NOT result in a code change, they can mark that issue as "won't fix" and enter an explanation. This helps provide detailed reports. SonarQube also provides clear, high-level overviews of the status of your software projects (for managers), along with reports (for customers). This helps take much of the communication burden off of the development team. Review collected by and hosted on G2.com. What do you dislike about SonarQube? Like any static analysis tool, there are occasional false-positives. And depending on your code, there may be issues flagged as "problems" which are really just stylistic differences or deviations from best practices. But it is fairly easy to mitigate these issues. False-positives need to be reviewed, but the detailed analysis provided by SonarQube (including traces through earlier statements showing how the issue was identified) help with the review. As for issues that are merely stylistic differences, these can be given a lower severity rating or even eliminated by customizing the underlying rules. Review collected by and hosted on G2.com. What problems is SonarQube solving and how is that benefiting you? Identifies code quality issues. Helps us improve the reliability of our applications and reduce our technical support burden. Also helps us mature the code base, which makes subsequent development faster and easier. Identifies code security issues. Helps us head off vulnerability crises and the need to develop hotfixes. Reports the status of unresolved issues and unit test code coverage per project. Helps us track technical debt. Reports the status of each project or application (set of projects) for consumption by customers. Meets requirements imposed by some customers, allowing certain sales to go through that would otherwise be blocked. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: Seller invite ## Top-Rated Alternatives [ ![GitHub](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitHub") GitHub 4.7/5(2,397) ](https://www.g2.com/products/github/reviews) [ ![GitLab](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "GitLab") GitLab 4.5/5(901) ](https://www.g2.com/products/gitlab/reviews) [ ![Veracode Application Security Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Veracode Application Security Platform") Veracode Application Security Platform 3.8/5(26) ](https://www.g2.com/products/veracode-application-security-platform/reviews) [ View All Alternatives ](https://www.g2.com/products/sonarqube/competitors/alternatives) ##### Categories on G2 [Bug Tracking](https://www.g2.com/categories/bug-tracking)[AI Governance Tools](https://www.g2.com/categories/ai-governance-tools)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis) [Bug Tracking](https://www.g2.com/categories/bug-tracking)[AI Governance Tools](https://www.g2.com/categories/ai-governance-tools)[Software Composition Analysis](https://www.g2.com/categories/software-composition-analysis)[Static Application Security Testing (SAST)](https://www.g2.com/categories/static-application-security-testing-sast)[Secure Code Review](https://www.g2.com/categories/secure-code-review)[Software Development Analytics Tools](https://www.g2.com/categories/software-development-analytics-tools)[Static Code Analysis](https://www.g2.com/categories/static-code-analysis)[AI AppSec Assistants](https://www.g2.com/categories/ai-appsec-assistants)[Application Security Posture Management (ASPM)](https://www.g2.com/categories/application-security-posture-management-aspm)[Software Bill of Materials (SBOM)](https://www.g2.com/categories/software-bill-of-materials-sbom) [Show MoreShow Less](javascript:void(0);) ##### Explore More [Best SAP service provider near me](https://www.g2.com/discussions/best-sap-service-provider-near-me)[What is the best tool for managing ads across multiple networks?](https://www.g2.com/discussions/what-is-the-best-tool-for-managing-ads-across-multiple-networks)[What is the top absence tracking tool for remote teams?](https://www.g2.com/discussions/what-is-the-top-absence-tracking-tool-for-remote-teams) [Which Google Workspace academic solutions provide the easiest deployment and fastest time to value for enterprise implementations?](https://www.g2.com/discussions/which-google-workspace-academic-solutions-provide-the-easiest-deployment-and-fastest-time-to-value-for-enterprise-implementations)[Is Speed Kit worth it for web client acceleration?](https://www.g2.com/discussions/is-speed-kit-worth-it-for-web-client-acceleration)[Pros and Cons Details](https://www.g2.com/products/sonarqube/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)