Generated from real user reviews
See Related User Reviews
Do Nhat K.
Mid-Market (51-1000 emp.)
5.0/5
"Effortless Code Quality Enhancement and Security"
What do you like about SonarQube?
I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is
Verified User
Small-Business (50 or fewer emp.)
4.5/5
"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"
What do you like about SonarQube?
It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
3.5/5
"SonaQube gets the job done with its approach to organizing new and former findings."
What do you like about SonarQube?
I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren
Verified User
Small-Business (50 or fewer emp.)
4.5/5
"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"
What do you like about SonarQube?
It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
3.5/5
"SonaQube gets the job done with its approach to organizing new and former findings."
What do you like about SonarQube?
I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren
Verified User
Small-Business (50 or fewer emp.)
4.5/5
"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"
What do you like about SonarQube?
It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug
See Related User Reviews
Do Nhat K.
Mid-Market (51-1000 emp.)
5.0/5
"Effortless Code Quality Enhancement and Security"
What do you like about SonarQube?
I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is
Verified User
Small-Business (50 or fewer emp.)
4.5/5
"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"
What do you like about SonarQube?
It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug
See Related User Reviews
Do Nhat K.
Mid-Market (51-1000 emp.)
5.0/5
"Effortless Code Quality Enhancement and Security"
What do you like about SonarQube?
I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is
Verified User
Small-Business (50 or fewer emp.)
4.5/5
"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"
What do you like about SonarQube?
It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug
See Related User Reviews
Ankshuk R.
Enterprise (> 1000 emp.)
5.0/5
"A Tool to Improve Code Quality!"
What do you dislike about SonarQube?
Although it is very customizable and user-friendly, SonalLint can be very vague at times, there are times when it throws errors in the code like some
Verified User
Mid-Market (51-1000 emp.)
4.0/5
"Centralized Code Quality Insights with Helpful Quality Gates"
What do you dislike about SonarQube?
One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee
See Related User Reviews
Pankaj J.
Small-Business (50 or fewer emp.)
4.5/5
"SonarQube Quickly Flags Code Quality and Security Issues"
What do you dislike about SonarQube?
I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s
Verified User
Mid-Market (51-1000 emp.)
4.0/5
"Centralized Code Quality Insights with Helpful Quality Gates"
What do you dislike about SonarQube?
One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
3.5/5
"SonaQube gets the job done with its approach to organizing new and former findings."
What do you dislike about SonarQube?
I wish there were more ways to group users and teams, and then automatically send them reports that include vulnerability details. I wish you can twe
Pankaj J.
Small-Business (50 or fewer emp.)
4.5/5
"SonarQube Quickly Flags Code Quality and Security Issues"
What do you dislike about SonarQube?
I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s
See Related User Reviews
Ankshuk R.
Enterprise (> 1000 emp.)
5.0/5
"A Tool to Improve Code Quality!"
What do you dislike about SonarQube?
Although it is very customizable and user-friendly, SonalLint can be very vague at times, there are times when it throws errors in the code like some
Pankaj J.
Small-Business (50 or fewer emp.)
4.5/5
"SonarQube Quickly Flags Code Quality and Security Issues"
What do you dislike about SonarQube?
I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s
See Related User Reviews
Verified User
Mid-Market (51-1000 emp.)
4.0/5
"Centralized Code Quality Insights with Helpful Quality Gates"
What do you dislike about SonarQube?
One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee
Shrey S.
Enterprise (> 1000 emp.)
5.0/5
"Reliable static code analysis that improves code quality & enforces standards for our clients"
What do you dislike about SonarQube?
One challenge with SonarQube, especially in the Community Edition that I am using is that the initial setup and rule tuning takes time. Out of the box
Code quality and potential errors in code flows Review collected by and hosted on G2.com.
The inability to link issues reported in sonar to tickets in Gitlab Review collected by and hosted on G2.com.
High quality , good response time are all involved in giving a high speed performance. Review collected by and hosted on G2.com.
SonarCube works without glitches . Nothing to dislike. Review collected by and hosted on G2.com.
SonarQube is a very easy-to-use and effective tool for code coverage analysis and SAST. It integrates seamlessly with Azure DevOps pipelines. The intuitive Dashboard provides easy access to analysis reports with multiple filters. Review collected by and hosted on G2.com.
Seemed that getting a quotation takes time. Review collected by and hosted on G2.com.
It's was fast and easier to implement and get things done, the IDE plugin works very well and is easy to understand the rules. Review collected by and hosted on G2.com.
I struggling to understand metrics and how AI Code features can really help the business. Review collected by and hosted on G2.com.
SonarQube gives code suggestions that are secure and give ideas how it can be written in a better way Review collected by and hosted on G2.com.
The suggestions are not always relevant for the code. Review collected by and hosted on G2.com.
What I love about SonarQube is how it digs deep into my code and finds hidden issues which are not as obvious when writing the code, especially bugs and security problems, across different programming languages. It hooks up smoothly with my CI/CD pipelines, which means I can keep an eye on code quality at every step. The reports it generates are super detailed and really help the team see where we can improve. Plus, you can customize the rules and use tons of plugins to make it work just how you need it. Review collected by and hosted on G2.com.
The one thing that I dislike is how much it can slow things down when you're working with big projects. The scans can take a while, which sometimes messes with our workflow, and we cannot use parallel analysis as we are on the Developer license since the Enterprise is too costly for us. Also, setting it up and getting everything configured right can be a bit of a headache and takes some time. Review collected by and hosted on G2.com.
SonarCloud is easy to use and integrates seamlessly into existing projects and nearly all CI/CD pipelines. We integrated almost all of our codebases and used it along with the Sonar cloud extension, which made it more powerful. Review collected by and hosted on G2.com.
The downside with sonar is that it requires us to make at least one change in a file to get it scanned. Because of this, sometimes, issues slip into production. Review collected by and hosted on G2.com.
SonarLint is an incredibly customizable, open-source tool that integrates seamlessly with a variety of IDEs and coding platforms, such as Spring Tools Suite and IntelliJ IDEA. Its flexibility and user-friendly nature are what stand out the most to me. Review collected by and hosted on G2.com.
While highly customizable and user-friendly, SonarLint can occasionally be unclear. For instance, it sometimes flags ignorable issues like auto-wiring errors in Spring Boot projects. Additionally, it lacks the ability to assess and improve code complexity. Review collected by and hosted on G2.com.
Our development process is helped a lot by SonarQube as it will detect some bugs such as running out of memory, or simple errors that we might not see the first time. Our team is happy to use the product. Review collected by and hosted on G2.com.
Getting it to start is a long process. We are having some trouble trying to understand how SonarQube judges our code. As our team is using it for the embedded environment, some suggestions (such as atomic implementations etc) are not really applicable to us. At first, we were frustrated as it always suggested that our code was wrong, but now we can find a way to silence it. Review collected by and hosted on G2.com.
SonarQube has a great way of examining code quality as a whole. It has the capability of discovering mistakes, threats, as well as unfavorable practices found in different programming languages to maintain superior coding norms. It generates detailed dashboards and reports which give specific views allowing for developing incrementally in addition to keeping code clean and gracious throughout its life span. Review collected by and hosted on G2.com.
SonarQube's complicated setup and configuration process remains trail and discouraging being time consuming for newbies. In addition one may also suffer from performance degradation caused by big code bases as well as when they discover that some extra skills need payment before using them; hence would be so costly particularly among little groups or small enterprises. Review collected by and hosted on G2.com.