SonarQube Pros and Cons: Top 5 Advantages and Disadvantages

Quick AI Summary Based on G2 Reviews

Generated from real user reviews

Users value SonarQube for its ability to quickly flag code quality and security issues, ensuring a reliable codebase. (24 mentions)

Users value the flexible issue filtering and prioritization features of SonarQube, enhancing team productivity and focus. (20 mentions)

Users appreciate how SonarQube quickly flags code quality and security issues, ensuring a clean and reliable codebase. (19 mentions)

Users appreciate the ease of use of SonarQube, finding integration and actionable feedback simple and effective. (18 mentions)

Users appreciate the easy integrations with CI/CD tools, enhancing their workflow and improving code quality effectively. (18 mentions)

Users face software bugs that lead to false positives, complicating the experience and requiring significant knowledge to manage. (12 mentions)

Users find the complex configuration of SonarQube challenging, especially for beginners needing extensive knowledge. (10 mentions)

Users encounter false positives that complicate usage, despite helpful tools for review and customization of analysis. (10 mentions)

Users find SonarQube's complexity in configuration and excessive warnings can make it cumbersome to use. (8 mentions)

Users find the complex setup of SonarQube time-consuming, requiring significant effort to configure and tune effectively. (8 mentions)

5 Pros or Advantages of SonarQube

1. Code Quality

Users value SonarQube for its ability to quickly flag code quality and security issues, ensuring a reliable codebase.

See 24 mentions

See Related User Reviews

Do Nhat K.

Mid-Market (51-1000 emp.)

5.0/5

"Effortless Code Quality Enhancement and Security"

What do you like about SonarQube?

I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is

Verified User

Small-Business (50 or fewer emp.)

4.5/5

"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"

What do you like about SonarQube?

It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug

2. Features

Users value the flexible issue filtering and prioritization features of SonarQube, enhancing team productivity and focus.

See 20 mentions

See Related User Reviews

Verified User

Enterprise (> 1000 emp.)

3.5/5

"SonaQube gets the job done with its approach to organizing new and former findings."

What do you like about SonarQube?

I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren

Verified User

Small-Business (50 or fewer emp.)

4.5/5

"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"

What do you like about SonarQube?

It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug

3. Issue Identification

Users appreciate how SonarQube quickly flags code quality and security issues, ensuring a clean and reliable codebase.

See 19 mentions

See Related User Reviews

Verified User

Enterprise (> 1000 emp.)

3.5/5

"SonaQube gets the job done with its approach to organizing new and former findings."

What do you like about SonarQube?

I really like how SonarQube separates new code from older code. It helps me prioritize the newest findings first, especially since older findings aren

Verified User

Small-Business (50 or fewer emp.)

4.5/5

"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"

What do you like about SonarQube?

It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug

4. Ease of Use

Users appreciate the ease of use of SonarQube, finding integration and actionable feedback simple and effective.

See 18 mentions

See Related User Reviews

Do Nhat K.

Mid-Market (51-1000 emp.)

5.0/5

"Effortless Code Quality Enhancement and Security"

What do you like about SonarQube?

I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is

Verified User

Small-Business (50 or fewer emp.)

4.5/5

"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"

What do you like about SonarQube?

It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug

5. Easy Integrations

Users appreciate the easy integrations with CI/CD tools, enhancing their workflow and improving code quality effectively.

See 18 mentions

See Related User Reviews

Do Nhat K.

Mid-Market (51-1000 emp.)

5.0/5

"Effortless Code Quality Enhancement and Security"

What do you like about SonarQube?

I love how SonarQube helps us fix some security issues and makes the code cleaner. The script runs so fast and doesn't use much CPU and RAM, which is

Verified User

Small-Business (50 or fewer emp.)

4.5/5

"Streamlining Software Composition Analysis (SCA) Within the Dev Workflow"

What do you like about SonarQube?

It is very easy to configure and integrate with our existing CI/CD pipelines. It provides high-quality static code analysis that helps us write bug

5 Cons or Disadvantages of SonarQube

1. Software Bugs

Users face software bugs that lead to false positives, complicating the experience and requiring significant knowledge to manage.

See 12 mentions

See Related User Reviews

Ankshuk R.

Enterprise (> 1000 emp.)

5.0/5

"A Tool to Improve Code Quality!"

What do you dislike about SonarQube?

Although it is very customizable and user-friendly, SonalLint can be very vague at times, there are times when it throws errors in the code like some

Verified User

Mid-Market (51-1000 emp.)

4.0/5

"Centralized Code Quality Insights with Helpful Quality Gates"

What do you dislike about SonarQube?

One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee

2. Complex Configuration

Users find the complex configuration of SonarQube challenging, especially for beginners needing extensive knowledge.

See 10 mentions

See Related User Reviews

Pankaj J.

Small-Business (50 or fewer emp.)

4.5/5

"SonarQube Quickly Flags Code Quality and Security Issues"

What do you dislike about SonarQube?

I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s

Verified User

Mid-Market (51-1000 emp.)

4.0/5

"Centralized Code Quality Insights with Helpful Quality Gates"

What do you dislike about SonarQube?

One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee

3. False Positives

Users encounter false positives that complicate usage, despite helpful tools for review and customization of analysis.

See 10 mentions

See Related User Reviews

Verified User

Enterprise (> 1000 emp.)

3.5/5

"SonaQube gets the job done with its approach to organizing new and former findings."

What do you dislike about SonarQube?

I wish there were more ways to group users and teams, and then automatically send them reports that include vulnerability details. I wish you can twe

Pankaj J.

Small-Business (50 or fewer emp.)

4.5/5

"SonarQube Quickly Flags Code Quality and Security Issues"

What do you dislike about SonarQube?

I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s

4. Complexity

Users find SonarQube's complexity in configuration and excessive warnings can make it cumbersome to use.

See 8 mentions

See Related User Reviews

Ankshuk R.

Enterprise (> 1000 emp.)

5.0/5

"A Tool to Improve Code Quality!"

What do you dislike about SonarQube?

Although it is very customizable and user-friendly, SonalLint can be very vague at times, there are times when it throws errors in the code like some

Pankaj J.

Small-Business (50 or fewer emp.)

4.5/5

"SonarQube Quickly Flags Code Quality and Security Issues"

What do you dislike about SonarQube?

I don’t like that SonarQube can sometimes feel complicated to configure, and it can also generate too many warnings that still need manual review to s

5. Complex Setup

Users find the complex setup of SonarQube time-consuming, requiring significant effort to configure and tune effectively.

See 8 mentions

See Related User Reviews

Verified User

Mid-Market (51-1000 emp.)

4.0/5

"Centralized Code Quality Insights with Helpful Quality Gates"

What do you dislike about SonarQube?

One thing I dislike about SonarQube is that the initial setup and configuration can be complex, especially for large projects. Sometimes the rules fee

Shrey S.

Enterprise (> 1000 emp.)

5.0/5

"Reliable static code analysis that improves code quality & enforces standards for our clients"

What do you dislike about SonarQube?

One challenge with SonarQube, especially in the Community Edition that I am using is that the initial setup and rule tuning takes time. Out of the box

Dimitar K.

InfoSec

Mid-Market (51-1000 emp.)

1/24/2024

"SonarQube as part of SDLC"

5/5

What do you like best about SonarQube?

The tool is really good for Static Code Analysis - detecting bugs, vulnerabilities and code smells. CI/CD pipeline integrations are really useful and crucial as part of the SDLC. Another great feature is the custom rules - for the advanced users. Apart from these things - combination with SonarLint is great! Last but not least, everyone can start with the free version and check if it will match their way of working - which is not available for many other tools! Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

It would be great if there is better dependencies report! Review collected by and hosted on G2.com.

Sheldon R.

Senior Software Engineer | Technical Lead

Small-Business (50 or fewer emp.)

4/24/2024

"Exceptional"

5/5

What do you like best about SonarQube?

Great way to measure quality and ensure all new dev meets expected quality standards. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

Pricing is a little too expensive - we need local pricing tiers. Review collected by and hosted on G2.com.

theo g.

Mid-Market (51-1000 emp.)

4/24/2024

"really Bad i have issues to implement on a repo sonaqube free edition"

0/5

What do you like best about SonarQube?

they sell that is good , i don't have a change to fully test Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

complicated to implement , lack of documentation for diff version . all points to developer edition of sonaclone that is expensive Review collected by and hosted on G2.com.

Mohit S.

Mid-Market (51-1000 emp.)

9/7/2023

"Best tool to inspect code quality and detect bugs and very easy to use."

4.5/5

What do you like best about SonarQube?

I like everything about SonarQube, It is best tool to make your code bug free and optimised. It analysis your code very fast and provide proper path of the issue in your code and also provide best suggestion to how to solve it. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

SonarQube is not synchronized with the IDE, from where I am solving the issues. Whenever I solve an issue I have to re-run the SonarQube to check whether the issue is solved or not. It is little time consuming. Review collected by and hosted on G2.com.

Verified User in Human Resources

Enterprise (> 1000 emp.)

4/24/2024

"SonarQube delivers on Code Quality and Code Security"

4.5/5

What do you like best about SonarQube?

SonarQube support an extensive number of code languages and provides flexibility to introduce quality rules and quality gates, lastly shifting left for Code Quality with SonarLint. The solution is easy to implement and use. Customer support provides timely responses. We have incorporate SonarQube within our CI/CD SDLC workflow. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

No support for Elixir, SonarQube Enterprise not offered as a native SaaS Cloud option. Review collected by and hosted on G2.com.

Marco B.

Enterprise (> 1000 emp.)

4/24/2024

"Enhance our progress"

5/5

What do you like best about SonarQube?

- Easy to install and use in our pipelines.

- Integrates with GitHub and Jira.

- Great support and community for help. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

Some documentation can be a bit confusing. Review collected by and hosted on G2.com.

Recep C.

Mid-Market (51-1000 emp.)

4/24/2024

"Best Tool for Code Quality"

5/5

What do you like best about SonarQube?

Especially Issues about security, and code smells are great to be better developer Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

To develop new ext or rules for sonarqube Review collected by and hosted on G2.com.

Verified User in Hospital & Health Care

Mid-Market (51-1000 emp.)

4/24/2024

"SonarQube for Static code analysis"

5/5

What do you like best about SonarQube?

It's pretty effortless to integrate this with DevSecOps pipeline Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

It would be good if they provide support for more legacy code languages. Review collected by and hosted on G2.com.

Verified User in Hospital & Health Care

Enterprise (> 1000 emp.)

4/24/2024

"Great tool but getting developers to adopt in large enterprise is very difficult"

2.5/5

What do you like best about SonarQube?

It has great features and is very transparent. It relies on open source community and is overall a good product Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

Ease of use is not that great. The datacenter product is not reliable. Customer support for enterprise product is also that that great. Lot of time they point you to KB article which doesnt always help. Review collected by and hosted on G2.com.

Shubham .

Software Engineer

Enterprise (> 1000 emp.)

8/24/2023

"SonarLint Review"

4.5/5

What do you like best about SonarQube?

SonarLint is a free IDE extension that connects to the Sonar Cloud. It is a good tool to use. As you type the code, it highlights the issues it finds and also suggests how to resolve them. This saves time as issues can be resolved at the time of writing the code. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

The thing I disliked about SonarLint based on my experience is at times it doesn't give correct solutions to the issues highlighted. Also, you can't use it to run checks only for a specific piece of code or find code coverage of the specific piece of new code written. Review collected by and hosted on G2.com.