Audience

Companies searching for a solution to manage and empower their dev teams

About SonarQube Server

SonarQube Server is a self-managed solution for continuous code quality inspection that helps development teams identify and fix bugs, vulnerabilities, and code smells in real-time. It provides automated static code analysis for a variety of programming languages, ensuring the highest quality and security standards are maintained throughout the development lifecycle. SonarQube Server integrates seamlessly with existing CI/CD pipelines, offering flexibility for on-premise or cloud-based deployment. With advanced reporting features, it helps teams manage technical debt, track improvements, and enforce coding standards. SonarQube Server is ideal for organizations seeking full control over their code quality and security without compromising on performance.

Other Popular Alternatives & Related Software
Kiuwan Code Security
Kiuwan Code Security
4.5 out of 5 stars (11 Ratings)
Kiuwan is an end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application Security Testing (SAST), Software Composition Analysis (SCA), Software Governance and Code Quality, empowering your team to quickly identify and remediate vulnerabilities. Integrating into your CI/CD pipeline, Kiuwan enables early detection and remediation of security issues. Kiuwan supports strict compliance with industry standards including OWASP, CWE, MISRA, NIST, PCI DSS, and CERT, among others. ✅ Large language support: 30+ programming languages. ✅ Detailed action plans: Prioritize remediation with tailored action plans. ✅ Code Security: Seamless Static Application Security Testing (SAST) integration. ✅ Insights: On-demand or continuous scanning Software Composition Analysis (SCA) to help reduce third-party threats. ✅ One-click Software Bill of Materials (SBOM) generation Code Smarter. Secure Faster. Ship Sooner.
Learn more about Kiuwan Code Security
ZeroPath
ZeroPath
5.0 out of 5 stars (1 Rating)
ZeroPath (YC S24) is an AI-native application security platform that delivers comprehensive code protection beyond traditional SAST. Founded by security engineers from Tesla and Google, ZeroPath combines large language models with advanced program analysis to find and automatically fix vulnerabilities. ZeroPath provides complete security coverage: 1. AI-powered SAST for business logic flaws & broken authentication 2. SCA with reachability analysis 3. Secrets detection and validation 4. Infrastructure as Code 5. Automated patch generation. any more... ZeroPath delivers 2x more real vulnerabilities with 75% fewer false positives. Our research team has been successful in finding vulns like critical account takeover in better-auth (CVE-2025-61928, 300k+ weekly downloads), identifying 170+ verified bugs in curl, and discovering 0-days in production systems at Netflix, Hulu, and Salesforce. Trusted by 750+ companies and performing 200k+ code scans monthly.
Learn more about ZeroPath
ConnectWise Cybersecurity Management
ConnectWise Cybersecurity Management
5.0 out of 5 stars (3 Ratings)
Define and Deliver Comprehensive Cybersecurity Services. Security threats continue to grow, and your clients are most likely at risk. Small- to medium-sized businesses (SMBs) are targeted by 64% of all cyberattacks, and 62% of them admit lacking in-house expertise to deal with security issues. Now technology solution providers (TSPs) are a prime target. Enter ConnectWise Cybersecurity Management (formerly ConnectWise Fortify) — the advanced cybersecurity solution you need to deliver the managed detection and response protection your clients require. Whether you’re talking to prospects or clients, we provide you with the right insights and data to support your cybersecurity conversation. From client-facing reports to technical guidance, we reduce the noise by guiding you through what’s really needed to demonstrate the value of enhanced strategy.
Learn more about ConnectWise Cybersecurity Management
Mend.io
Mend.io
5.0 out of 5 stars (1 Rating)
Mend.io offers the first AI native application security platform, empowering organizations to build and run a proactive AppSec program tuned for AI powered development. The unified platform secures AI generated code and embedded AI components, drives risk reduction through AI powered remediation, automates compliance, and provides a holistic enterprise scale view of risks and clear actions for developers across your entire codebase.
Learn more about Mend.io

Integrations

See Integrations

Ratings/Reviews - 2 User Reviews

Overall 5.0 / 5
ease 5.0 / 5
features 5.0 / 5
design 5.0 / 5
support 5.0 / 5
More Reviews for SonarQube Server Write a Review

Company Information

SonarSource
Founded: 2008
Switzerland
www.sonarsource.com/products/sonarqube/

Videos and Screen Captures

SonarQube Server Screenshot 1
SonarQube Server Screenshot 1 SonarQube Server Screenshot 2
Other Useful Business Software
Custom VMs From 1 to 96 vCPUs With 99.95% Uptime Icon
Custom VMs From 1 to 96 vCPUs With 99.95% Uptime

General-purpose, compute-optimized, or GPU/TPU-accelerated. Built to your exact specs.

Live migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
Start Free

Product Details

Platforms Supported
Cloud
Training
Documentation

SonarQube Server Frequently Asked Questions

Q: What kinds of users and organization types does SonarQube Server work with?
SonarQube Server works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does SonarQube Server support in their product?
SonarQube Server supports these languages: English.
Q: What other applications or services does SonarQube Server integrate with?
SonarQube Server integrates with: Apache DevLake, ArmorCode, AWS CloudFormation, Betterscan.io, Bizzy, Blink, BMC Middleware Management, bugScout, C, C++, C#, COBOL, Codemagic, CodePeer, CodeScene, configure8, Cortex, CSS, and ZeroNorth and more.
Q: What type of training does SonarQube Server provide?
SonarQube Server provides training in the form of documentation.

SonarQube Server Product Features

Application Security

Open Source Component Monitoring Supported
Source Code Analysis Supported
Training Resources Supported
Vulnerability Detection Supported
Analytics / Reporting Not Supported
Third-Party Tools Integration Not Supported
Vulnerability Remediation Not Supported

Static Application Security Testing (SAST)

Application Security Not Supported
Dashboard Not Supported
Debugging Not Supported
Deployment Management Not Supported
IDE Not Supported
Multi-Language Scanning Not Supported
Real-Time Analytics Not Supported
Source Code Scanning Not Supported
Vulnerability Scanning Not Supported

Static Code Analysis

Analytics / Reporting Supported
Code Standardization / Validation Supported
Multiple Programming Language Support Supported
Provides Recommendations Supported
Standard Security/Industry Libraries Supported
Vulnerability Management Supported

SonarQube Server Additional Categories

SonarQube Server Verified User Reviews

Write a Review
  • Aman V.
    Technical Lead
    Used the software for: 2+ Years
    Frequency of Use: Weekly
    User Role: User
    Company Size: 20,000 or More
    Design 5 out of 5 stars
    Ease 5 out of 5 stars
    Features 5 out of 5 stars
    Pricing 4 out of 5 stars
    Support 5 out of 5 stars
    Probability You Would Recommend? 9 out of 10

    "Industry standard code quality tool"

    5 out of 5 stars Posted 2022-04-01

    Pros: Great User Interface / Dashboard.
    Different tiers of bugs - helps identify and fix only the critical issues.
    Suggestions to fix the issue.
    Jenkins integration.
    Also available as SaaS offering.
    Also shows security defects.

    Cons: The only con i can think of is expensive license which is not optimal for personal projects (unless open source). There is a free trial though.

    Overall: SonarQube is used across the industry as the go-to solution for code review. It has an impressive interface which provides all the information - issue, the code where it occurred and the optimal solution suggestion; at one place.

    Read More...
  • Daniel M.
    Security Architect
    Used the software for: Less than 6 months
    Frequency of Use: Daily
    User Role: User
    Company Size: 500 - 999
    Design 5 out of 5 stars
    Ease 5 out of 5 stars
    Features 5 out of 5 stars
    Pricing 3 out of 5 stars
    Support 5 out of 5 stars
    Probability You Would Recommend? 9 out of 10

    "Excellent Product"

    5 out of 5 stars Posted 2019-04-01

    Pros: - Accurate results and no bullshit findings
    - Very fast analysis
    - Handy configuration features for analysis customization
    - Nice interface
    - Plenty integration options

    Cons: - It has its price but its worth every penny. Similar vendors are more expensive with significantly less value.

    Overall: I integrated SonarQube into my SDLC and it reliably detects and blocks security issues

    Read More...
  • Previous
  • You're on page 1
  • Next