SonarQube Reviews

Name: SonarQube
Brand: Sonar
Rating: 4 (108 reviews)

Vendor: Sonar

4.0 out of 5

108 reviews
80% willing to recommend

3,554 followers

Post review

What is SonarQube?UNIXBusinessApplication
Price:

SonarQube is a self-managed open-source platform that helps developers create code devoid of quality and vulnerability issues. By integrating seamlessly with the top DevOps platforms in the Continuous Integration (CI) pipeline, SonarQube continuously inspects projects across multiple programming languages, providing immediate status feedback while coding. SonarQube’s quality gates become part of your release pipeline, displaying pass/fail results for new code based on quality profiles you customize to your company standards. Following Sonar’s Clean as You Code methodology guarantees that only software of the highest quality makes it to production.

Get the SonarQube Buyer's Guide and find out what your peers are saying about SonarQube, Veracode, Checkmarx One and more!

SonarQube is the #1 ranked solution in application security solutions, AST tools, and top Software Development Analytics solutions. PeerSpot users give SonarQube an average rating of 8.0 out of 10. SonarQube is most commonly compared to Veracode: SonarQube vs Veracode. SonarQube is popular among the large enterprise segment, accounting for 71% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 17% of all views.

Helped 767,319 peers since 2012

Featured reviews

Wang Dayong

Senior Software Engineering Manager at Hill

May 10, 2023

We use the product to review our software codes. We have integrated the product to review our new delivery code When we deliver a code, the solution scans the code and reports whether the code has bugs or any other vulnerability issues. Thus the solution helps us identify issues and improve the…

Read full review

HimanshuSharma

General Manager at Dalmia Bharat Group

Apr 10, 2022

We do a lot of development. We were previously doing it internally, and then we hired a couple of development partners. So, day in and day out, a lot of changes were happening. We wanted to ensure that whatever changes happened, they undergo some level of quality assessments. That was one of the…

Read full review

Chetan Jayatheertha

Lead DevOps Consultant at itcinfotech

May 12, 2023

SonarQube provides security vulnerabilities within the cloud. It identifies the code pattern and quality and detects the causes of any particular issues. We use this to minimize a lot of coding errors. I'm a lead dev ops consultant in IT infrastructure SonarQube helps to improve the code coverage…

Read full review

SonarQube market share

Product category:

As of March 2024, the market share of SonarQube in the Application Security Tools category stands at 27.4%, marking an increase of 1.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Application Security Tools

Key learnings from peers

Last updated Mar 4, 2024

Valuable Features

"The features of SonarQube that I find most valuable for identifying code smells are its comprehensive code analysis capabilities, which cover various aspects of code sustainability."
"The solution's user interface is very user-friendly."
"The integrations SonarQube provides with our software delivery pipeline are very seamless."

Room for Improvement

"SonarQube could be improved by implementing inter-procedural code analysis capabilities, allowing for a more comprehensive detection of defects and vulnerabilities across the entire codebase."
"It would be a great add-on if SonarQube could update its database for vulnerabilities or plugging parts."
"SonarQube could improve its static application security testing as per the industry standard."

Pricing

"SonarQube is a fairly affordable solution for a larger scale if you have a specific role or specific department for secure code."
"It's an open-source product."
"The product’s price is lower than Veracode’s price."

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our SonarQube Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

17%

Computer Software Company

15%

Manufacturing Company

11%

Government

Insurance Company

Comms Service Provider

Retailer

Healthcare Company

Energy/Utilities Company

Educational Organization

Construction Company

University

Media Company

Real Estate/Law Firm

Wholesaler/Distributor

Transportation Company

Logistics Company

Non Profit

Hospitality Company

Legal Firm

Outsourcing Company

Aerospace/Defense Firm

Pharma/Biotech Company

Recreational Facilities/Services Company

Engineering Company

Performing Arts

Compare SonarQube with alternative products

Learn more about SonarQube

At its core, SonarQube includes a static code analyzer that identifies bugs, security vulnerabilities, hidden secrets, and code smells. The platform guides you through issue resolution, fostering a culture of continuous improvement. SonarQube’s comprehensive reporting is a valuable tool for dev teams to monitor their codebase's overall health and quality across multiple projects in their portfolio. With SonarQube, you can achieve a state of Clean Code, leading to secure, reliable, and maintainable software.

Sonar is the only solution combining the power of industry-leading software quality analysis with static application security testing (SAST) and real-time coding guidance in the IDE (with SonarLint) to meet the DevOps and DevSecOps demand of putting agility, automation, and security in the hands of developers. Further accelerate DevOps continuous integration by helping developers find and fix issues in code before the software testing stage, reducing the churn of finding, fixing, rebuilding, and retesting your app.

With over 5,000 Clean Code rules, SonarQube analyzes 30+ of the most popular programming languages, including dozens of frameworks, the top DevOps platforms (GitLab, GitHub, Azure DevOps, and Bitbucket, and more), and the leading infrastructure as code (IaC) platforms.

SonarQube is the most trusted static code analyzer used by over 7 million developers and 400,000 organizations globally to clean over half a trillion lines of code.

SonarQube was previously known as Sonar.