SonarSource
by SonarSource Sàrl · www.sonarsource.com ↗
Code quality and security platform (SonarQube) that analyzes source code, including AI-generated code, with self-hosted, cloud, and IDE editions.
code-quality static-analysis code-security open-source
- Category
- Coding & Developer Tools
- Business model
- Freemium
- Availability
- Global
- Launched
- 2008
- Record updated
- 2026-09-10
- Pricing
- www.sonarsource.com ↗
- Documentation
- docs.sonarsource.com ↗
- Founded
- 2008
- Headquarters
- CH
Overview
SonarSource is a Swiss company founded in 2008 and headquartered in Geneva that develops code quality and security tooling. Its SonarQube line analyzes source code — including AI-generated code — for bugs, vulnerabilities, and maintainability issues across 30+ languages, and ships as a self-hosted server, a cloud service, and IDE extensions under an open-core model. Since 2024 the company has added AI features including AI Code Assurance and AI CodeFix, alongside newer products such as Gitar, an AI code review tool, and a SonarQube MCP server for AI and agentic workflows.
Key features
- Static analysis of code quality and security across 30+ languages
- SonarQube Server (self-hosted), SonarQube Cloud (SaaS), and SonarQube for IDE editions
- AI Code Assurance and AI CodeFix for reviewing and fixing issues
- Quality gates and pull-request analysis in CI workflows
- MCP server and CLI that bring code analysis into AI and agentic workflows
Use cases
- Enforcing code quality and security gates in CI pipelines
- Reviewing and remediating AI-generated code before merge
- Tracking technical debt and code complexity across a codebase
Pricing
SonarQube has a no-expiry free tier for private projects with a lines-of-code cap and is free for public open-source projects. Paid Team and Enterprise plans are priced per instance per year based on private-project lines of code, with a 14-day trial; SonarQube for IDE is free.
Frequently asked questions
What is SonarQube?
SonarQube is SonarSource's platform for continuous code quality and security analysis, available as a self-hosted server, a cloud service, and IDE extensions.
Is SonarQube open source?
It follows an open-core model: SonarQube Community Build is open source and free for public projects, while commercial editions add features such as advanced security and enterprise administration.
Where is SonarSource based?
SonarSource is headquartered in Geneva, Switzerland, and was founded in 2008.
Does SonarQube work with AI-generated code?
Yes. AI Code Assurance and AI CodeFix target AI-generated code, and the Gitar product provides AI code review that fixes issues until builds pass.
Similar products
- Aider — Open-source command-line tool for AI pair programming that edits code in your local git repository.
- Amazon Q Developer — AWS's AI coding assistant (formerly CodeWhisperer) for code generation, security scans, and AWS tasks.
- Amp — Agentic coding tool from Sourcegraph that runs locally or in remote orbs, writing and shipping code from the terminal, editors, web, and phone.
- Augment Code — AI coding assistant and agent focused on large codebases, with context retrieval across a team's entire repository.
- Base44 — AI app builder for creating full web applications from natural-language prompts, acquired by Wix in 2025.
- Bitrise — Mobile DevOps platform that automates building, testing, and releasing iOS and Android apps, with CI/CD pipelines and AI features for fixing failed builds and reviewing code.
All SonarSource alternatives → · All Coding & Developer Tools products →
Sources
This record was last reviewed on 2026-09-10.
Machine-readable record: /api/products/sonarsource.json · Spot an error? Suggest a correction