Audience

Companies searching for a solution to manage and empower their dev teams

About SonarQube Server

SonarQube Server is a self-managed solution for continuous code quality inspection that helps development teams identify and fix bugs, vulnerabilities, and code smells in real-time. It provides automated static code analysis for a variety of programming languages, ensuring the highest quality and security standards are maintained throughout the development lifecycle. SonarQube Server integrates seamlessly with existing CI/CD pipelines, offering flexibility for on-premise or cloud-based deployment. With advanced reporting features, it helps teams manage technical debt, track improvements, and enforce coding standards. SonarQube Server is ideal for organizations seeking full control over their code quality and security without compromising on performance.

Other Popular Alternatives & Related Software
GitLab
GitLab
(14 Ratings)
GitLab is a complete DevOps platform. With GitLab, you get a complete CI/CD toolchain out-of-the-box. One interface. One conversation. One permission model. GitLab is a complete DevOps platform, delivered as a single application, fundamentally changing the way Development, Security, and Ops teams collaborate. GitLab helps teams accelerate software delivery from weeks to minutes, reduce development costs, and reduce the risk of application vulnerabilities while increasing developer productivity. Source code management enables coordination, sharing and collaboration across the entire software development team. Track and merge branches, audit changes and enable concurrent work, to accelerate software delivery. Review code, discuss changes, share knowledge, and identify defects in code among distributed teams via asynchronous review and commenting. Automate, track and report code reviews.
Learn more
GitGuardian
GitGuardian
(32 Ratings)
GitGuardian is an end-to-end NHI security platform that empowers software-driven organizations to enhance their Non-Human Identity (NHI) security and comply with industry standards. With attackers increasingly targeting NHIs, such as service accounts and applications, GitGuardian integrates Secrets Security and NHI Governance. This dual approach enables the detection of compromised secrets across your dev environments while also managing non human identities and their secrets lifecycle. The platform supports over 450+ types of secrets, offers public monitoring for leaked data, and deploys honeytokens for added defense. Trusted by over 600,000 developers, GitGuardian is the choice of leading organizations like Snowflake, ING, BASF and Bouygues Telecom for robust secrets protection.
Learn more
ConnectWise Cybersecurity Management
ConnectWise Cybersecurity Management
(3 Ratings)
Define and Deliver Comprehensive Cybersecurity Services. Security threats continue to grow, and your clients are most likely at risk. Small- to medium-sized businesses (SMBs) are targeted by 64% of all cyberattacks, and 62% of them admit lacking in-house expertise to deal with security issues. Now technology solution providers (TSPs) are a prime target. Enter ConnectWise Cybersecurity Management (formerly ConnectWise Fortify) — the advanced cybersecurity solution you need to deliver the managed detection and response protection your clients require. Whether you’re talking to prospects or clients, we provide you with the right insights and data to support your cybersecurity conversation. From client-facing reports to technical guidance, we reduce the noise by guiding you through what’s really needed to demonstrate the value of enhanced strategy.
Learn more
Gemini Code Assist
Gemini Code Assist
(1 Rating)
Increase software development and delivery velocity using generative AI assistance, with enterprise security and privacy protection. Gemini Code Assist completes your code as you write, and generates whole code blocks or functions on demand. Code assistance is available in many popular IDEs, such as Visual Studio Code, JetBrains IDEs (IntelliJ, PyCharm, GoLand, WebStorm, and more), Cloud Workstations, Cloud Shell Editor, and supports 20+ programming languages, including Java, JavaScript, Python, C, C++, Go, PHP, and SQL. Through a natural language chat interface, you can quickly chat with Gemini Code Assist to get answers to your coding questions, or receive guidance on coding best practices. Chat is available in all supported IDEs. Enterprises can customize Gemini Code Assist using their organization’s private codebases and knowledge sources so that Gemini Code Assist can offer more tailored assistance. Gemini Code Assist enables large-scale changes to entire codebases.
Learn more

Integrations

See Integrations

Ratings/Reviews - 2 User Reviews

Overall 5.0 / 5
ease 5.0 / 5
features 5.0 / 5
design 5.0 / 5
support 5.0 / 5
More Reviews Write a Review

Company Information

SonarSource
Founded: 2008
Switzerland
www.sonarsource.com/products/sonarqube/

Videos and Screen Captures

SonarQube Server Screenshot 1
SonarQube Server Screenshot 1 SonarQube Server Screenshot 2
Other Useful Business Software
MongoDB Atlas runs apps anywhere Icon
MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
Start Free

Product Details

Platforms Supported
Cloud
Training
Documentation

SonarQube Server Frequently Asked Questions

Q: What kinds of users and organization types does SonarQube Server work with?
Q: What languages does SonarQube Server support in their product?
Q: What other applications or services does SonarQube Server integrate with?
Q: What type of training does SonarQube Server provide?

SonarQube Server Product Features

Application Security

Open Source Component Monitoring
Source Code Analysis
Training Resources
Vulnerability Detection
Analytics / Reporting
Third-Party Tools Integration
Vulnerability Remediation

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

SonarQube Server Additional Categories

SonarQube Server Verified User Reviews

Write a Review
  • Aman V.
    Technical Lead
    Used the software for: 2+ Years
    Frequency of Use: Weekly
    User Role: User
    Company Size: 20,000 or More
    Design
    Ease
    Features
    Pricing
    Support
    Probability You Would Recommend?
    1 2 3 4 5 6 7 8 9 10

    "Industry standard code quality tool"

    Posted 2022-04-01

    Pros: Great User Interface / Dashboard.
    Different tiers of bugs - helps identify and fix only the critical issues.
    Suggestions to fix the issue.
    Jenkins integration.
    Also available as SaaS offering.
    Also shows security defects.

    Cons: The only con i can think of is expensive license which is not optimal for personal projects (unless open source). There is a free trial though.

    Overall: SonarQube is used across the industry as the go-to solution for code review. It has an impressive interface which provides all the information - issue, the code where it occurred and the optimal solution suggestion; at one place.

    Read More...
  • Daniel M.
    Security Architect
    Used the software for: Less than 6 months
    Frequency of Use: Daily
    User Role: User
    Company Size: 500 - 999
    Design
    Ease
    Features
    Pricing
    Support
    Probability You Would Recommend?
    1 2 3 4 5 6 7 8 9 10

    "Excellent Product"

    Posted 2019-04-01

    Pros: - Accurate results and no bullshit findings
    - Very fast analysis
    - Handy configuration features for analysis customization
    - Nice interface
    - Plenty integration options

    Cons: - It has its price but its worth every penny. Similar vendors are more expensive with significantly less value.

    Overall: I integrated SonarQube into my SDLC and it reliably detects and blocks security issues

    Read More...
  • Previous
  • You're on page 1
  • Next