Overview
Product Information on SonarQube
What is SonarQube?
SonarQube Pricing
SonarQube Product Images
Overall experience with SonarQube
“SonarQube Enables Transparent Software Quality Tracking and Customizable Coding Rules”
“SonarCloud's Unexpected Price Increase Very Concerning”
About Company
Company Description
Sonar helps prevent code quality and security issues from reaching production, amplifies developers' productivity in concert with AI assistants, and improves the developer experience with streamlined workflows. Sonar analyzes all code, regardless of who writes it—your internal team or genAI—resulting in more secure, reliable, and maintainable software. Rooted in the open-source community, Sonar’s solutions support over 30 programming languages, frameworks, and infrastructure technologies. Today, Sonar is used by 7M+ developers and 400K organizations worldwide.
Company Details
Do You Manage Peer Insights at SonarSource?
Access Vendor Portal to update and manage your profile.
Key Insights
A Snapshot of What Matters - Based on Validated User Reviews
Reviewer Insights for: SonarQube
Deciding Factors: SonarQube Vs. Market Average
Performance of SonarQube Across Market Features
SonarQube Likes & Dislikes
I like the capability to have various rulesets and be able to customize rules that are relevant to my specific domain. I liked the possibility to push these rules as settings for my developers IDE so that they had an early indication when coding rules were violated.
They are the few Vendors that integrate with Azure DevOps. It provides good Quality Code analytics and has limited and useful security features.
- SonarQube PyCharm plug-in's code recommendations help to optimize code and make it more clean; - SonarQube server shows test coverage level on the new and overall code; - All found alerts and warnings could be assigned to the team members to remediate
I have never achieved good results on C repos, however this may be due to inherent difficulties in analysing C/C code. Maintaining custom coding rules becomes tedious when there are a lot of changes in the underlying rulesets.
They are lacking on Support. I wanted to use a quality gate in my Azure DevOps pipeline and they don't have documentation on how to implement it in a real-world pipeline with a quality gate. They had a basic example that was completely worthless to me. In addition, they were unwilling to help me with any support.
- the default settings provide a lot of unnecessary warnings and should be tweaked to have more sense; - it is hard to exclude or partially exclude files and code blocks from scan - it is slower than expected analyzing the large projects
Top SonarQube Alternatives
Peer Discussions
SonarQube Reviews and Ratings
- Chief Architect10B+ USDConsumer GoodsReview Source
SonarQube Enables Transparent Software Quality Tracking and Customizable Coding Rules
I set up and used SonarQube for several years in CI/CD pipelines to ensure software quality goals in my teams were clearly defined and met at each commit. The results of the scans were important for handover of software products between teams and different devops partners, as we had a very transparent state of the software quality. - IT OPS SPECIALIST10B+ USDBankingReview Source
SonarQube Enhances Python Code Quality With Customizable Checks And Assignable Alerts
SonarQube provides an additional layer of checks and optimizations during my Python development. It helps keeping my code clean and properly covered by the tests. Some checks could be annoying though, but they could be commented out in place or turned off at all - Director Enterprise Architecture50M-1B USDBankingReview Source
SonarQube Enables Fast Issue Identification and Seamless Integration in Build Pipelines
SonarQube is a true value-add for many organizations. Not only does it help identify various quality issues, it does it at speed in the build pipeline. Additionally, smart engineers will use the IDE extension to get feedback while the code is being written, without waiting on the CI/CD build to complete. - IT Manager10B+ USDIT ServicesReview Source
Intuitive Dashboard for SAST and Seamless Azure DevOps Integration by SonarQube
SonarQube seemed to be a very good tool for code coverage analysis and finding vulnerabilities in code. The dashboard gives a very good view of the analysis results. Pricing seemed to be optimal with respect to other vendors providing similar features. Open API of SonarQube is also very helpful for preparing custom reports. - Sourcing Operations Manager1B-10B USDIT ServicesReview Source
A reliable LOC Analyzer
The tool is working very well in analyzing lines of Code and increasing the efficiency of our developers.