SonarQube
An automated code review tool that systematically checks code health across multiple programming languages.
| Pricing from | 150 USD per year |
| Best for | Enterprise teams requiring comprehensive security gating |
| Website | www.sonarsource.com |
Company facts
| Founded | 2008 |
| Headquarters | Geneva, Switzerland |
| Social profiles | LinkedIn, X, Facebook, YouTube |
Facilities and features
- Published pricing
- Integrations
What stands out
The product finds bugs and vulnerabilities across thirty languages on every pull request.
“Finds bugs, vulnerabilities, and security hotspots across 30+ languages on every pull request.”SonarQube, own website
The product offers a ninety nine point nine percent uptime SLA for its cloud service.
“99.9% uptime SLA SOC 2 Type II”SonarQube, own website
Strengths and trade-offs
- Extensive language support
- Deep integration with CI/CD pipelines
- Can be resource heavy during large scans
Appears in
Application security testing tools with GitHub integration
1
Snyk96.02
Checkmarx94.03
Mend.io94.0RANKINGfull ranking →SOFTWAREVERIFIEDCode quality tools with GitHub integration
1
Codacy98.02
GitKraken96.03Snyk96.0RANKINGfull ranking →SOFTWAREVERIFIEDEnterprise code quality tools
1Codacy98.02
CodeScene96.03
CodeRabbit92.0RANKINGfull ranking →AIVERIFIEDAI code security tools with a free plan
1
Kodus96.02
Sourcery94.03
RepoShark92.0RANKINGfull ranking →AIVERIFIEDAI code security tools with a free trial
1Codacy98.02
DeepSource96.03Sourcery94.0RANKINGfull ranking →AIVERIFIEDAI code security tools with a team plan
1Codacy98.02DeepSource96.03
Aikido Security94.0RANKINGfull ranking →SOFTWAREVERIFIEDOpen-source application security testing tools
1Mend.io94.02
ReversingLabs94.03Snyk94.0RANKINGfull ranking →SOFTWAREVERIFIEDBest code quality tools
1Codacy98.02CodeScene96.03CodeRabbit92.0RANKINGfull ranking →SOFTWAREVERIFIEDBest application security testing tools
1Snyk96.02Mend.io94.03
AppKnox92.0RANKINGfull ranking →AI TOOLSTop 10 AI Bug Detection Tools
1Snyk95.02
GitHub Copilot92.73SonarQube90.3RANKINGfull ranking →AI TOOLSTop 10 AI Code Debuggers
1GitHub Copilot95.02
Sentry92.73DeepCode90.3RANKINGfull ranking →AI TOOLSTop 10 AI Code-Quality Analyzers
1SonarQube95.02DeepSource92.73Snyk90.3RANKINGfull ranking →AI TOOLSTop 10 AI Code-Review Tools
1GitHub Copilot95.02DeepSource92.73CodeRabbit90.3RANKINGfull ranking →AI TOOLSTop 10 AI Debuggers & Code Fixers
1GitHub Copilot95.02
Amazon CodeGuru92.73
JetBrains IDE IntelliCode90.3RANKINGfull ranking →How SonarQube ranks
#9 in AI code security tools with a free plan
How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 8.
“SonarQube Advanced Security Secure use of open source code with advanced SAST and SCA”SonarQube, own website
“Free tier never expires. Most popular Team Under 50 developers set up today, no sales call”SonarQube, own website
#8 in AI code security tools with a free trial
How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 8.
“SonarQube Advanced Security Secure use of open source code with advanced SAST and SCA”SonarQube, own website
“Start in minutes with a 14-day trial, no credit card.”SonarQube, own website
#10 in AI code security tools with a team plan
How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 8.
“SonarQube Advanced Security Secure use of open source code with advanced SAST and SCA”SonarQube, own website
“Most popular Team Under 50 developers set up today, no sales call SonarQube”SonarQube, own website
#5 in Application security testing tools with GitHub integration
How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 12.
“Secure use of open source code with advanced SAST and SCA Gitar”SonarQube, own website
“Gitar Integrations GitHub Bitbucket Azure DevOps GitLab See all 40+ languages & frameworks Java JavaScript Python C# See all Resources Explore”SonarQube, own website
#7 in Best application security testing tools
How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 12.
“SonarQube Advanced Security Secure use of open source code with advanced SAST and SCA”SonarQube, own website
#5 in Best code quality tools
How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 12.
“Improve quality, reliability, and security through automated, explainable, compliant code review.”SonarQube, own website
#6 in Code quality tools with GitHub integration
How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 12.
“Code verification for the AI era Fight AI slop. Improve quality, reliability, and security through automated, explainable, compliant code review.”SonarQube, own website
“Gitar Integrations GitHub Bitbucket Azure DevOps GitLab See all 40+ languages & frameworks Java JavaScript Python C# See all Resources Explore”SonarQube, own website
#6 in Enterprise code quality tools
How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 12.
“Code quality, security, and AI code review on one platform.”SonarQube, own website
“Over 50 developers one conversation, whole platform. Custom pricing”SonarQube, own website
#4 in Open-source application security testing tools
How the score is made up: Evidence on its own site 20; How complete its published information is 18; Fit to this ranking's criteria 40; Buying information on its own site 12.
“SonarQube Advanced Security Secure use of open source code with advanced SAST and SCA”SonarQube, own website
“Anchored on our open core principle, we carry a commitment to transparency, security, and continuous improvement of our Open Source solution.”SonarQube, own website
Alternatives to SonarQube
Questions about SonarQube
How much does SonarQube cost?
Lister lists SonarQube's pricing as: 150 USD per year.
Who is SonarQube best for?
SonarQube is best for enterprise teams requiring comprehensive security gating.
Where does SonarQube rank?
SonarQube is ranked #1 in Top 10 AI Code-Quality Analyzers (Lister Score 95.0), #3 in Top 10 AI Bug Detection Tools (Lister Score 90.3), #4 in Open-source application security testing tools (Lister Score 90.0), #5 in Application security testing tools with GitHub integration (Lister Score 90.0), #5 in Best code quality tools (Lister Score 90.0), #5 in Top 10 AI Code-Review Tools (Lister Score 85.7), #6 in Code quality tools with GitHub integration (Lister Score 90.0), #6 in Enterprise code quality tools (Lister Score 90.0), #7 in Best application security testing tools (Lister Score 90.0), #8 in AI code security tools with a free trial (Lister Score 86.0), #9 in AI code security tools with a free plan (Lister Score 86.0), #10 in AI code security tools with a team plan (Lister Score 86.0), #10 in Top 10 AI Code Debuggers (Lister Score 74.0) and #10 in Top 10 AI Debuggers & Code Fixers (Lister Score 74.0).
What are the best alternatives to SonarQube?
The closest alternatives on Lister are DeepSource (#2 in Top 10 AI Code-Quality Analyzers), Snyk (#3 in Top 10 AI Code-Quality Analyzers) and CodeClimate Quality (#4 in Top 10 AI Code-Quality Analyzers).
Where is SonarQube based?
SonarQube is headquartered in Geneva, Switzerland, and was founded in 2008.
Is this your company?
Claim SonarQube to suggest corrections to its listing (pricing, features, details) or ask about an enhanced profile. We review every claim before anything changes.