# SonarSource

Code quality and security platform (SonarQube) that analyzes source code, including AI-generated code, with self-hosted, cloud, and IDE editions.

- Company: SonarSource Sàrl
- Category: Coding & Developer Tools
- Business model: Freemium
- Availability: global
- Launched: 2008
- Tags: code-quality, static-analysis, code-security, open-source
- Website: https://www.sonarsource.com
- Canonical URL: https://globalaiproductindex.com/products/sonarsource/
- Record updated: 2026-09-10

SonarSource is a Swiss company founded in 2008 and headquartered in Geneva that develops code quality and security tooling. Its SonarQube line analyzes source code — including AI-generated code — for bugs, vulnerabilities, and maintainability issues across 30+ languages, and ships as a self-hosted server, a cloud service, and IDE extensions under an open-core model. Since 2024 the company has added AI features including AI Code Assurance and AI CodeFix, alongside newer products such as Gitar, an AI code review tool, and a SonarQube MCP server for AI and agentic workflows.

## Key features

- Static analysis of code quality and security across 30+ languages
- SonarQube Server (self-hosted), SonarQube Cloud (SaaS), and SonarQube for IDE editions
- AI Code Assurance and AI CodeFix for reviewing and fixing issues
- Quality gates and pull-request analysis in CI workflows
- MCP server and CLI that bring code analysis into AI and agentic workflows

## Use cases

- Enforcing code quality and security gates in CI pipelines
- Reviewing and remediating AI-generated code before merge
- Tracking technical debt and code complexity across a codebase

## Pricing

SonarQube has a no-expiry free tier for private projects with a lines-of-code cap and is free for public open-source projects. Paid Team and Enterprise plans are priced per instance per year based on private-project lines of code, with a 14-day trial; SonarQube for IDE is free.

## FAQ

**What is SonarQube?**

SonarQube is SonarSource's platform for continuous code quality and security analysis, available as a self-hosted server, a cloud service, and IDE extensions.

**Is SonarQube open source?**

It follows an open-core model: SonarQube Community Build is open source and free for public projects, while commercial editions add features such as advanced security and enterprise administration.

**Where is SonarSource based?**

SonarSource is headquartered in Geneva, Switzerland, and was founded in 2008.

**Does SonarQube work with AI-generated code?**

Yes. AI Code Assurance and AI CodeFix target AI-generated code, and the Gitar product provides AI code review that fixes issues until builds pass.

## Sources

- [Official website](https://www.sonarsource.com)
- [Documentation](https://docs.sonarsource.com)
- [SonarSource (Wikipedia)](https://en.wikipedia.org/wiki/SonarSource)

---
Data from the [Global AI Product Index](https://globalaiproductindex.com/), licensed CC BY 4.0.