sonarsource

Changes to the facts recorded here, not a live scan of every vendor update. Save this tool to follow updates in your account.

1. 9/14/2026

   Updated: export formats, features, integrations, limitations, open source, plans, sources, summary, use cases

   See recorded changes

   exportFormats

   Before: ["Provides portfolio-wide dashboards and customizable Quality Gates for visibility and reporting on code quality and security metrics."]

   After: ["Generates and exports software bill of materials (SBOM) for projects in Enterprise plans."]

   features

   Before: ["Automated code review with multi-layered verification methods across reliability, security, quality, and compliance.","Background remediation of technical debt through autonomous pull requests that are verified before merging.","Integration with major DevOps platforms such as GitHub, GitLab, Azure DevOps, Bitbucket Cloud, and GitLab for automated code reviews and pipeline quality gates.","Static Application Security Testing (SAST) engine detects critical vulnerabilities including OWASP Top 10 with high precision and low false positives.","Secrets detection tool to prevent secrets from leaking in code and causing security breaches."]

   After: ["Automated code review with static analysis and real-time feedback integrated into development pipelines.","Security analysis detecting complex vulnerabilities and security hotspots before production.","Automated AI-powered code fix suggestions to minimize manual debugging.","Multi-language support covering over 35 programming languages and frameworks.","Integration with major DevOps platforms such as GitHub, GitLab, Azure DevOps, and Bitbucket Cloud."]

   integrations

   Before: []

   After: ["Integrates with AI coding agents and platforms including Claude Code, Cursor, Devin, GitHub Copilot, Antigravity, and Codex."]

   limitations

   Before: ["SonarQube Cloud requires integration with supported DevOps platforms and may not support all custom workflows out of the box."]

   After: []

   openSource

   Before: "Not recorded"

   After: true

   plans

   Before: []

   After: [{"name":"Enterprise","note":"Contact the provider for a quote.","annual":null,"monthly":null,"perSeat":false,"currency":"USD","features":[],"extraUnit":null,"unitLabel":"","maximumSeats":null,"minimumSeats":1,"includedUnits":null,"startingPrice":false,"seatsConfirmed":false}]

   sources

   Before: [{"url":"https://www.sonarsource.com/","label":"Sonar AI Code Verification Platform | SonarSource | Sonar"},{"url":"https://www.sonarsource.com/products/sonarqube/","label":"SonarQube: Fight AI Slop & Verify AI Code | Sonar"},{"url":"https://www.sonarsource.com/products/sonarqube/cloud/","label":"SonarQube Cloud: Scalable AI Code Verification | Sonar"}]

   After: [{"url":"https://www.sonarsource.com/","label":"Sonar AI Code Verification Platform | SonarSource | Sonar"},{"url":"https://www.sonarsource.com/plans-and-pricing/","label":"Plans & Pricing: Enterprise & Team Plans for Developers | Sonar"},{"url":"https://www.sonarsource.com/products/sonarqube/","label":"SonarQube: Fight AI Slop & Verify AI Code | Sonar"},{"url":"https://www.sonarsource.com/products/sonarqube/cloud/","label":"SonarQube Cloud: Scalable AI Code Verification | Sonar"}]

   summary

   Before: "Sonar is an AI-powered code verification platform that helps developers build secure, reliable software by providing automated, explainable, and compliant code reviews. It supports real-time feedback, static code analysis, and remediation to detect and fix issues early in the development process."

   After: "Sonar is an AI-powered code verification platform that helps developers build secure, reliable software by providing automated, explainable, and compliant code reviews integrated into existing workflows. It supports static code analysis, security vulnerability detection, and automated code fixes across multiple languages and platforms, available as both cloud and self-hosted solutions."

   useCases

   Before: ["Continuous integration and delivery pipelines to enforce code quality and security standards automatically before merging or deployment.","Background remediation of legacy technical debt to maintain cleaner codebases and improve efficiency of AI coding agents."]

   After: ["Continuous integration and delivery pipelines to ensure code quality and security before deployment."]